feat(PasswordInput)!: build the frame and the toggle, like Number Input

[mrholek]

Number Input landed with the component owning its frame and its buttons, so the markup is a plain form control. Password Input already owned the icon; this gives it the rest.

- <div class="form-control-group">
-   <input type="password" class="form-control">
-   <button type="button" class="form-control-action" data-coreui-toggle="password" aria-label="Toggle password visibility"></button>
- </div>
+ <input type="password" class="form-control" data-coreui-toggle="password-input">

What changes

• data-coreui-toggle moves from the button to the input, and its value becomes the component's name — password-input, matching number-input. There is no button left in the markup to carry it.
• Classes other than .form-control move onto the frame. A class on the control describes the field, and once the input is wrapped the field is the frame — mb-3 left behind would put the margin inside the border. They move back on dispose().
• An input already inside a .form-control-group is left alone, so a password field can share a frame with other adornments; only a frame the component created is removed on dispose().
• ariaToggleLabel is a new option: the button is no longer the author's to label.

One helper, not two copies

The wrapping is ensureControlGroup / releaseControlGroup in util/form-control-group.ts, used by both components. Number Input's inline version is gone — its 20 tests pass against the shared one unchanged, which is the check that mattered for the extraction.

The helper carries the rule Number Input arrived at, with the reasoning in one place rather than restated per component.

Verification

• 26 password unit tests. The data-api block is rewritten against the new contract — frame and toggle built on init, clicking toggles both type and aria-pressed, disabled control gets a disabled button, several fields stay independent, classes round-trip through dispose(), an authored group survives.
• 20 Number Input tests unchanged, on the shared helper.
• 33 visual baselines; the password ones and the input-group one regenerated. The input-group case keeps a hand-authored frame — with the password markup no longer containing one, that case would otherwise have stopped covering what it was written for.
• Full docs pass: every example is a bare control, the Usage section describes the new contract, and the customization section gains the note about the authored group and the moved classes. Migration guide carries the markup diff.

Bundlewatch budgets nudged for the shared helper; CSS unchanged.

[coveralls]

Coverage Report for CI Build 30940890853

Coverage increased (+0.02%) to 92.965%

Details

• Coverage increased (+0.02%) from the base build.
• Patch coverage: 49 of 49 lines across 3 files are fully covered (100%).
• 2 coverage regressions across 2 files.

Uncovered Changes

No uncovered changes found.

Coverage Regressions

2 previously-covered lines in 2 files lost coverage.

File	Lines Losing Coverage	Coverage
js/src/navigation.ts	1	64.63%
js/src/password-input.ts	1	91.07%

---

Coverage Stats

Relevant Lines:	8668
Covered Lines:	8272
Line Coverage:	95.43%
Relevant Branches:	4821
Covered Branches:	4268
Branch Coverage:	88.53%
Branches in Coverage %:	Yes
Coverage Strength:	362.41 hits per line

---

💛 - Coveralls