dsh-password-shield
阻止悬浮在 DeepSeek Harness 聊天编辑器上的 iCloud Passwords 补全列表弹窗。
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add dsh-password-shield@0.4.0Password Shield 以 dsh-password-shield 发布，当前版本为 0.4.0。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
A narrowly scoped DSH web plugin that blocks the iCloud Passwords completion-list popup floating over the chat composer in old conversations.
The iCloud Passwords Chrome extension applies WebKit-style credential-field heuristics to every page. On some DSH conversation pages it misclassifies the chat composer and injects its empty completion list:
No saved credential is required. The empty-state popup itself confirms that the extension offered autofill even though it found no credential for the DSH URL.
The popup is implemented as a <div popover> appended to <body>. Its open shadow root contains an iframe whose extension URL points to completion_list.html.
The plugin watches the DOM for exactly that structure. When it appears, it removes the completion-list iframe and forces its host invisible while keeping the host connected, allowing the extension to finish its own show/hide bookkeeping safely.
It intentionally does not:
input[type=password] into another type;dsh plugin --profile web add dsh-password-shield@0.4.0 --save-exact --ignore-scripts
# Restart dsh web.
For a reviewed checkout during development only:
dsh plugin --profile web add github:ruby1304/dsh-password-shield#<full-commit-sha> --save-exact --ignore-scripts
Never use a mutable branch or link: checkout as production state.
Version 0.4.0 targets DSH 0.1.5-rc.1 exactly. Its browser bundle has no
DSH-internal module request, relies only on the 0.1.5-rc.1 baseline loader, and
does not request eager activation.
completion_list.html iframe inside an open shadow root.Uninstall with dsh plugin --profile web remove dsh-password-shield, restart DSH Web, and reload open pages. A completion-list iframe already removed from the current document is restored only by that page reload.
npm install
npm run check
npm run release:check
Tests cover pre-existing and dynamically inserted iCloud completion lists, ordinary DSH popovers, unrelated extension iframes, and the guarantee that password/text inputs remain untouched.
MIT