sync: dev to extern-contrib

CLAUDE.md

@@ -5,12 +5,48 @@ This file provides guidance to Claude Code (claude.ai/code) when working with co
 ## Project Overview
 
 XMOJ-Script is a browser userscript that enhances the XMOJ online judge platform (xmoj.tech). This repository consists of:
-- **Main userscript** (`XMOJ.user.js`): ~5000 line single-file userscript with all features. As this file is very large you should use the xmoj-code-navigator agent to help you whenever possible.
+- **Main userscript** (`XMOJ.user.js`): ~5000 line single-file userscript with all features. **See "Working with XMOJ.user.js" section below for CRITICAL instructions on using the xmoj-code-navigator agent.**
 - **Update/version management scripts** (`Update/`): Automation for version bumping and releases
 - **Metadata and documentation**: `Update.json` tracks version history, README and contributing guides
 
 The `backend/` directory is a git submodule pointing to https://github.com/XMOJ-Script-dev/XMOJ-bbs and should be modified in that repository, not here.
 
+## Working with XMOJ.user.js (CRITICAL)
+
+**IMPORTANT: Due to the large size of XMOJ.user.js (~5000 lines), you MUST use the xmoj-code-navigator agent whenever you need to explore, search, or understand any part of this file.**
+
+### When to use xmoj-code-navigator
+
+Use the Task tool with `subagent_type="xmoj-code-navigator"` for:
+
+- **Finding specific functions or features**: "Where is the auto-refresh functionality implemented?"
+- **Understanding code sections**: "How does the login authentication work?"
+- **Locating code patterns**: "Find all API calls to the backend"
+- **Searching for specific implementations**: "Show me the dark mode toggle implementation"
+- **Verifying if code exists**: "Does XMOJ.user.js have a function for parsing XML?"
+- **ANY exploration task involving XMOJ.user.js**
+
+### Why use this agent
+
+Loading the entire XMOJ.user.js file into context:
+- Wastes context window space
+- Makes responses slower
+- Is unnecessary when you only need specific sections
+
+The xmoj-code-navigator agent efficiently locates and retrieves only the relevant code sections you need.
+
+### Example usage
+
+```
+Instead of: Read tool on XMOJ.user.js (loads entire 5000 lines)
+Use: Task tool with xmoj-code-navigator agent to find specific sections
+```
+
+**Exception**: Only use Read tool on XMOJ.user.js when:
+- You need to edit a specific line number you already know
+- You're making targeted edits and already know the exact location
+- You need to verify a small, specific section (use offset and limit parameters)
+
 ## Development Workflow
 
 ### Branch Structure and PR Requirements

Update.json

@@ -3299,6 +3299,92 @@
                 }
             ],
             "Notes": "Adds WebSocket-based real-time notification system for BBS mentions and mail notifications. Notifications now arrive within 1-2 seconds instead of requiring page focus. Includes automatic reconnection with exponential backoff and fallback to polling when WebSocket is unavailable."
+        },
+        "2.7.4": {
+            "UpdateDate": 1771211196807,
+            "Prerelease": true,
+            "UpdateContents": [
+                {
+                    "PR": 906,
+                    "Description": "Add toggleable Minimalist Monochrome UI"
+                }
+            ],
+            "Notes": "Added a new toggleable \"极简黑白界面风格\" (Minimalist Monochrome UI) setting under Beautify options. Features serif typography, zero border-radius, line-based visual structure, and automatic dark mode support with charcoal tones."
+        },
+        "3.0.0": {
+            "UpdateDate": 1771211353041,
+            "Prerelease": true,
+            "UpdateContents": [
+                {
+                    "PR": 906,
+                    "Description": "Add toggleable Minimalist Monochrome UI"
+                }
+            ],
+            "Notes": "Added a new toggleable \"极简黑白界面风格\" (Minimalist Monochrome UI) setting under Beautify options. Features serif typography, zero border-radius, line-based visual structure, and automatic dark mode support with charcoal tones."
+        },
+        "3.1.0": {
+            "UpdateDate": 1771254908784,
+            "Prerelease": false,
+            "UpdateContents": [
+                {
+                    "PR": 895,
+                    "Description": "Update to release 2.7.0"
+                },
+                {
+                    "PR": 896,
+                    "Description": "Update to release 2.7.0"
+                },
+                {
+                    "PR": 905,
+                    "Description": "Add WebSocket notification system for real-time BBS and mail mentions"
+                },
+                {
+                    "PR": 906,
+                    "Description": "Add toggleable Minimalist Monochrome UI"
+                },
+                {
+                    "PR": 906,
+                    "Description": "Add toggleable Minimalist Monochrome UI"
+                }
+            ],
+            "Notes": "v3 显然需要在新年第一天发布("
+        },
+        "3.1.1": {
+            "UpdateDate": 1771489733913,
+            "Prerelease": true,
+            "UpdateContents": [
+                {
+                    "PR": 910,
+                    "Description": "Fix XSS in post title rendering"
+                }
+            ],
+            "Notes": "Fixed a stored XSS vulnerability in discussion thread post titles."
+        },
+        "3.1.2": {
+            "UpdateDate": 1771493127347,
+            "Prerelease": true,
+            "UpdateContents": [
+                {
+                    "PR": 911,
+                    "Description": "Fix additional XSS vulnerabilities"
+                }
+            ],
+            "Notes": "Fixed additional stored XSS vulnerabilities where user-controlled data was inserted into innerHTML without sanitization."
+        },
+        "3.2.0": {
+            "UpdateDate": 1771493320789,
+            "Prerelease": false,
+            "UpdateContents": [
+                {
+                    "PR": 910,
+                    "Description": "Fix XSS in post title rendering"
+                },
+                {
+                    "PR": 911,
+                    "Description": "Fix additional XSS vulnerabilities"
+                }
+            ],
+            "Notes": "No release notes were provided for this release."
         }
     }
 }