sync: dev to extern-contrib

[github-actions]

sync-branches: New code has just landed in dev, so let's bring extern-contrib up to speed!

Summary by Sourcery

Improve submission reliability during busy judge queues by adding robust captcha handling and local recognition.

New Features:

• Add optional local recognition and manual entry support for XMOJ submission captchas, including refresh and fallback handling.

Bug Fixes:

• Ensure captcha requirements are detected and enforced consistently when the judge queue state changes during submission.

Enhancements:

• Centralize default-off setting behavior for debugging and interface replacement options.

Build:

• Bump the userscript and package versions to 3.6.4.

---

Summary by cubic

Show and submit the server captcha on the custom submit page to prevent silent failures when the judge queue is busy. Previously the page dropped the vcode field; now it renders the captcha, includes vcode in POSTs, and blocks blank submissions.

• Submit page mirrors the server captcha before DOM replacement, shows an image and input, refreshes on click, and expands the captcha area on “验证码错误”.
• Always sends vcode; safe when the queue is idle because submit.php ignores the field.
• Blocks “强制提交” if captcha is missing to avoid server vfail upgrading to 8‑char challenges.
• Adds AutoCaptcha (default on): local, 4‑digit recognition that only fills when confident; otherwise leaves the field for manual entry.
• Centralizes defaults via DefaultOffSettings; bumps version to 3.6.4 in package.json and updates release notes in Update.json.

^{Written for commit 8e9b445. Summary will update on new commits.}

[sourcery-ai]

Reviewer's Guide

Implements local image-based solving for XMOJ’s vcode captcha on the submit page, wires it into the submission flow with safety checks, refactors default-off settings into a shared constant, and bumps the script/package versions to 3.6.4.

Sequence diagram for captcha-aware code submission

sequenceDiagram
    participant User
    participant SubmitPage
    participant Captcha as vcode.php
    participant Submit as submit.php

    SubmitPage->>SubmitPage: NativeCaptchaShown
    alt captcha is shown
        SubmitPage->>Captcha: fetch("vcode.php?" + Math.random())
        Captcha-->>SubmitPage: ImageBlob
        SubmitPage->>SubmitPage: GetCaptchaLength(ImageBlob)
        alt four-digit captcha and AutoCaptcha enabled
            SubmitPage->>SubmitPage: SolveCaptcha(ImageBlob)
            SubmitPage->>SubmitPage: Fill #vcode when confidence is sufficient
        else unsupported or uncertain captcha
            SubmitPage-->>User: Request manual input
        end
    end
    User->>SubmitPage: PassCheck.click
    SubmitPage->>SubmitPage: CaptchaIsMissing()
    alt captcha missing
        SubmitPage-->>User: Show captcha-required error
    else captcha available
        SubmitPage->>Submit: POST submission with GetCaptchaParameter()
        alt captcha rejected
            Submit-->>SubmitPage: Response containing 验证码错误
            SubmitPage->>SubmitPage: RefreshCaptcha("")
            SubmitPage-->>User: Show retry message
        else accepted
            Submit-->>SubmitPage: Submission response or redirect
        end
    end

Loading

File-Level Changes

Change	Details	Files
Add local captcha recognition and UI integration to the submit page, including robust handling of when the server requires or rejects captcha answers.	Detect when the native captcha is present on submitpage.php and keep that state across the custom submit UI Render a captcha input/image/status block in the custom submit UI and show it only when needed Ensure the captcha image is fetched exactly once per challenge and reused so that the displayed image matches the server’s expected answer Add logic to read the GIF header to infer captcha length and distinguish 4-digit numeric captchas from 8-character alphanumeric ones Build a pixel mask from the captcha image by separating background from text via colour inversion and tolerances Split the mask into digit glyph columns and match each against precomputed Vera.ttf glyph bitmaps Use a score + margin system to only accept unambiguous matches and fall back to manual entry otherwise Gate automatic solving behind a new AutoCaptcha setting and never overwrite user-typed captcha values Add event handlers: clicking the image refreshes the captcha; Enter in the captcha field triggers submission Require a non-empty captcha when it’s shown before both PassCheck and the main submit flows, surfacing clear error messages and focusing the field Append the captcha value to submit.php POST bodies when present, and on captcha failures, refresh the challenge and show a specific error prompting re-entry	XMOJ.user.js
Introduce and reuse a shared list of settings that default to off, and add the AutoCaptcha option to the settings UI.	Define DefaultOffSettings constant listing settings that should default to false in localStorage Update UtilityEnabled to seed missing setting values based on DefaultOffSettings instead of a local hard-coded array Update settings UI initialization to seed each setting’s default from DefaultOffSettings rather than always true Add a new AutoCaptcha setting entry in the settings menu, enabling users to toggle automatic captcha recognition	XMOJ.user.js
Bump project and userscript versions to 3.6.4 to reflect the new functionality.	Update @Version metadata in the userscript header from 3.6.3 to 3.6.4 Update package.json version field from 3.6.3 to 3.6.4	XMOJ.user.js package.json

---

Tips and commands

Interacting with Sourcery

• Trigger a new review: Comment @sourcery-ai review on the pull request.
• Continue discussions: Reply directly to Sourcery's review comments.
• Generate a GitHub issue from a review comment: Ask Sourcery to create an
  issue from a review comment by replying to it. You can also reply to a
  review comment with @sourcery-ai issue to create an issue from it.
• Generate a pull request title: Write @sourcery-ai anywhere in the pull
  request title to generate a title at any time. You can also comment
  @sourcery-ai title on the pull request to (re-)generate the title at any time.
• Generate a pull request summary: Write @sourcery-ai summary anywhere in
  the pull request body to generate a PR summary at any time exactly where you
  want it. You can also comment @sourcery-ai summary on the pull request to
  (re-)generate the summary at any time.
• Generate reviewer's guide: Comment @sourcery-ai guide on the pull
  request to (re-)generate the reviewer's guide at any time.
• Resolve all Sourcery comments: Comment @sourcery-ai resolve on the
  pull request to resolve all Sourcery comments. Useful if you've already
  addressed all the comments and don't want to see them anymore.
• Dismiss all Sourcery reviews: Comment @sourcery-ai dismiss on the pull
  request to dismiss all existing Sourcery reviews. Especially useful if you
  want to start fresh with a new review - don't forget to comment
  @sourcery-ai review to trigger a new review!

Customizing Your Experience

Access your dashboard to:

• Enable or disable review features such as the Sourcery-generated pull request
  summary, the reviewer's guide, and others.
• Change the review language.
• Add, remove or edit custom review instructions.
• Adjust other review settings.

Getting Help

• Contact our support team for questions or feedback.
• Visit our documentation for detailed guides and information.
• Keep in touch with the Sourcery team by following us on X/Twitter, LinkedIn or GitHub.

[cloudflare-workers-and-pages]

Deploying xmoj-script-dev-channel with    Cloudflare Pages

Latest commit:	8e9b445
Status:	✅  Deploy successful!
Preview URL:	https://55fc6201.xmoj-script-dev-channel.pages.dev

View logs

[sourcery-ai]

Hey - I've reviewed your changes and they look great!

Sourcery assessment

Needs a human reviewer. The change alters captcha enforcement and automatically submits locally recognized answers, so a parsing or session-state mistake could consume captcha attempts, escalate the challenge, or cause submissions to be rejected or mishandled. Reverting stops the behavior but cannot undo failed captcha attempts or submissions already made.

---

Sourcery is free for open source - if you like our reviews please consider sharing them ✨

• X
• Mastodon
• LinkedIn
• Facebook

_{Help me be more useful! Please click 👍 or 👎 on each comment and I'll use the feedback to improve your reviews.}