Add global autofill guard for hub, env, and transfer inputs.

Co-authored-by: Cursor <cursoragent@cursor.com>

lib/instance/templates/embed_shell.html

@@ -4,6 +4,7 @@
     <meta charset="UTF-8">
     <meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover">
     <script src="/static/instance_theme.js?v=50"></script>
+    <script src="/static/autofill_guard.js?v=1"></script>
     <link rel="stylesheet" href="/static/instance_theme_early.css?v=4">
     <link rel="stylesheet" href="/static/account_risk_badge.css?v=4">
     <link rel="stylesheet" href="/static/instance_page.css?v=11">
@@ -117,7 +118,7 @@ const ORDER_ENTRY_MODEL_CODE_TO_CATEGORY = {{ entry_model_code_to_category | toj
 <script>
 window.__INSTANCE_DISPLAY__ = {{ display | tojson }};
 </script>
-<script src="/static/instance_settings_prefs.js?v=14"></script>
+<script src="/static/instance_settings_prefs.js?v=15"></script>
 <script src="/static/instance_live.js?v=6"></script>
 <script src="/static/instance_embed.js?v=27"></script>
 </body>

lib/instance/templates/env_config_panel.html

@@ -64,7 +64,13 @@
                             type="password"
                             data-env-key="{{ field.key }}"
                             placeholder="{% if field.has_value %}修改时填写新值,留空不修改{% else %}请输入{% endif %}"
-                            autocomplete="off"
+                            autocomplete="new-password"
+                            data-lpignore="true"
+                            data-1p-ignore="true"
+                            data-bwignore="true"
+                            data-form-type="other"
+                            readonly
+                            onfocus="this.removeAttribute('readonly')"
                         >
                         {% else %}
                         <input
@@ -73,6 +79,14 @@
                             type="text"
                             data-env-key="{{ field.key }}"
                             value="{{ field.current or field.default or '' }}"
+                            autocomplete="off"
+                            autocorrect="off"
+                            autocapitalize="off"
+                            spellcheck="false"
+                            data-lpignore="true"
+                            data-1p-ignore="true"
+                            data-bwignore="true"
+                            data-form-type="other"
                         >
                         {% endif %}
                     </div>

lib/instance/templates/index.html

@@ -5,6 +5,7 @@
     <meta charset="UTF-8">
     <meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover">
 <script src="/static/instance_theme.js?v=50"></script>
+    <script src="/static/autofill_guard.js?v=1"></script>
     <link rel="stylesheet" href="/static/instance_theme_early.css?v=4">
     <link rel="stylesheet" href="/static/account_risk_badge.css?v=4">
     <script src="/static/account_risk_badge.js?v=4"></script>
@@ -2019,6 +2020,6 @@ document.addEventListener("DOMContentLoaded", function () {
 });
 {% endif %}
 </script>
-<script src="/static/instance_settings_prefs.js?v=14"></script>
+<script src="/static/instance_settings_prefs.js?v=15"></script>
 </body>
 </html>

lib/instance/templates/instance_transfer_panel.html

@@ -8,14 +8,17 @@
         不足从 <code>{{ auto_transfer_from }}</code> 划入,超出划回 <code>{{ auto_transfer_from }}</code>;
         <strong>持仓中不划转</strong>并微信通知.
     </p>
-    <form action="/manual_transfer" method="post" class="form-row gate-transfer-form settings-transfer-form">
-        <input name="amount" type="number" min="0.01" step="0.01" placeholder="手动划转金额 U" required>
-        <select name="from_account" aria-label="划出账户">
+    <form action="/manual_transfer" method="post" class="form-row gate-transfer-form settings-transfer-form" autocomplete="off">
+        <input type="text" name="username" autocomplete="username" tabindex="-1" aria-hidden="true"
+               style="position:absolute;left:-9999px;width:1px;height:1px;opacity:0" value="">
+        <input name="amount" id="manual-xfer-amount" type="number" min="0.01" step="0.01" placeholder="手动划转金额 U" required
+               autocomplete="off" inputmode="decimal" data-lpignore="true" data-1p-ignore="true" data-bwignore="true" data-form-type="other" readonly>
+        <select name="from_account" aria-label="划出账户" autocomplete="off">
             <option value="funding" {% if auto_transfer_from == 'funding' %}selected{% endif %}>from: funding</option>
             <option value="swap" {% if auto_transfer_from == 'swap' %}selected{% endif %}>from: swap</option>
             <option value="spot" {% if auto_transfer_from == 'spot' %}selected{% endif %}>from: spot</option>
         </select>
-        <select name="to_account" aria-label="划入账户">
+        <select name="to_account" aria-label="划入账户" autocomplete="off">
             <option value="swap" {% if auto_transfer_to == 'swap' %}selected{% endif %}>to: swap</option>
             <option value="funding" {% if auto_transfer_to == 'funding' %}selected{% endif %}>to: funding</option>
             <option value="spot" {% if auto_transfer_to == 'spot' %}selected{% endif %}>to: spot</option>

lib/instance/templates/password_settings_panel.html

@@ -1,7 +1,7 @@
 {# 系统设置 · 账户密码(外层 card 由 settings_panel 提供) #}
 <h2>账户密码修改</h2>
 <p class="settings-subcard-desc">修改网页登录账号密码,写入 <code>.env</code> 后需重启实例生效.</p>
-<div class="settings-password-form">
+<div class="settings-password-form password-settings" data-password-settings="1">
     <label>当前密码 <input type="password" id="pwd-old" autocomplete="current-password"></label>
     <label>新用户名(可选) <input type="text" id="pwd-new-username" autocomplete="username"></label>
     <label>新密码 <input type="password" id="pwd-new" autocomplete="new-password"></label>

lib/instance/templates/records_panel.html

@@ -92,7 +92,7 @@
                 <label><input type="checkbox" name="mood_issues" value="扛单">扛单</label>
                 <label><input type="checkbox" name="mood_issues" value="重仓违规">重仓违规</label>
             </div>
-            <textarea name="note" rows="2" placeholder="备注"></textarea>
+            <textarea name="note" rows="2" placeholder="备注" autocomplete="off" data-lpignore="true" data-1p-ignore="true" data-form-type="other"></textarea>
             <button type="submit" style="margin-top:8px">保存复盘记录</button>
         </form>
     </div>