//! The engine core: the `Server` struct that owns all state, the output //! primitives (send / numeric / to_channel) and the connection lifecycle. //! Per-subsystem behaviour lives beside its data — [`crate::users`] and //! [`crate::channels`] add their own `impl Server` blocks, the way InspIRCd //! keeps usermanager / channelmanager separate from the core. No locks: only the //! single core thread ever holds a `Server`. use std::cell::RefCell; use std::collections::{HashMap, HashSet, VecDeque}; use std::net::{SocketAddr, TcpStream}; use std::sync::atomic::AtomicU64; use std::sync::mpsc::Sender; use std::sync::Arc; use std::thread; use std::time::{SystemTime, UNIX_EPOCH}; use crate::channels::Channel; use crate::config::{Config, LinkBlock}; use crate::extensible::Extensible; use crate::ircd::Event; use crate::link::{Link, RemoteServer, RemoteUser}; use crate::module::Hook; use crate::modules::dnsbl; use crate::resolver; use crate::socketengine::OutSink; use crate::users::{Caps, User, UserFlags}; use crate::xline::XLine; use crate::Uid; pub const VERSION: &str = env!("CARGO_PKG_VERSION"); /// Background timer cadence + idle/ping timeouts, in seconds. pub const TICK_SECS: u64 = 15; pub const PING_AFTER: u64 = 90; pub const PING_TIMEOUT: u64 = 60; pub const REG_TIMEOUT: u64 = 60; pub fn now() -> u64 { SystemTime::now() .duration_since(UNIX_EPOCH) .map(|d| d.as_secs()) .unwrap_or(0) } /// Format a unix timestamp as an IRCv3 `server-time` tag value /// (`2026-08-05T07:58:03.000Z`), computing the civil date with std only. pub fn iso_time(secs: u64) -> String { let days = (secs / 86400) as i64; let (h, mi, s) = ((secs % 86400) / 3600, (secs % 3600) / 60, secs % 60); // civil date from days since 1970-01-01 (Howard Hinnant's algorithm) let z = days + 719468; let era = if z >= 0 { z } else { z - 146096 } / 146097; let doe = z - era * 146097; let yoe = (doe - doe / 1460 + doe / 36524 - doe / 146096) / 365; let y = yoe + era * 400; let doy = doe - (365 * yoe + yoe / 4 - yoe / 100); let mp = (5 * doy + 2) / 153; let d = doy - (153 * mp + 2) / 5 + 1; let m = if mp < 10 { mp + 3 } else { mp - 9 }; let y = if m <= 2 { y + 1 } else { y }; format!("{y:04}-{m:02}-{d:02}T{h:02}:{mi:02}:{s:02}.000Z") } /// Parse an IRCv3 `server-time` value (`2026-08-08T19:52:42.000Z`) back to unix /// seconds — the inverse of [`iso_time`], for CHATHISTORY `timestamp=` selectors. pub fn parse_iso(s: &str) -> Option { let (date, time) = s.split_once('T')?; let mut d = date.split('-'); let y: i64 = d.next()?.parse().ok()?; let mo: i64 = d.next()?.parse().ok()?; let da: i64 = d.next()?.parse().ok()?; let time = time.trim_end_matches('Z').split('.').next()?; let mut t = time.split(':'); let h: i64 = t.next()?.parse().ok()?; let mi: i64 = t.next()?.parse().ok()?; let se: i64 = t.next().unwrap_or("0").parse().ok()?; // civil date -> days since 1970-01-01 (inverse Howard Hinnant) let yy = y - i64::from(mo <= 2); let era = if yy >= 0 { yy } else { yy - 399 } / 400; let yoe = yy - era * 400; let mp = if mo > 2 { mo - 3 } else { mo + 9 }; let doy = (153 * mp + 2) / 5 + da - 1; let doe = yoe * 365 + yoe / 4 - yoe / 100 + doy; let days = era * 146097 + doe - 719468; Some((days * 86400 + h * 3600 + mi * 60 + se).max(0) as u64) } /// A recently-departed identity, kept for WHOWAS. pub struct WhowasEntry { pub nick: String, pub ident: String, pub host: String, pub realname: String, pub account: Option, pub ts: u64, } /// One captured server log line (fed by `snotice`), for the RPC `log.tail` / /// `log.events` methods — echoIRCd's in-memory answer to InspIRCd's log file. pub struct LogLine { pub id: u64, pub ts: u64, pub msg: String, } /// The rolling server-log ring plus its monotonic sequence counter. #[derive(Default)] pub struct LogState { pub seq: u64, pub ring: VecDeque, } pub struct Server { pub name: String, pub network: String, pub created: u64, pub motd: Vec, pub users: HashMap, pub nick_index: HashMap, // lower nick -> uid pub channels: HashMap, // lower name -> channel pub events: VecDeque, pub opers: Vec<(String, String)>, // (name, password) from config pub cloak_key: Option, // host-cloaking key (see modules::cloak) pub line_ctags: String, // client-only tags of the line being handled // --- server-to-server (see crate::link) --- pub sid: String, // our 3-char server id pub server_desc: String, // our description pub link_blocks: Vec, // peers we accept / dial pub links: HashMap, // local link connections pub servers: HashMap, // sid -> linked server pub uuid_counter: u64, // mints local user UIDs pub msgid_counter: u64, // mints IRCv3 `msgid` message tags pub uuid_local: HashMap, // our users, by network uuid pub remote_users: HashMap, // users on other servers pub remote_nick: HashMap, // lower nick -> remote uuid pub whowas: VecDeque, // recent nick history (WHOWAS) pub conf_path: String, // config path, for REHASH pub xlines: Vec, // server bans (KLINE/GLINE/ZLINE) pub mode_sudo: bool, // SAMODE/SAKICK: bypass rank checks pub in_redirect: bool, // +L: guards against redirect loops pub censor: Vec<(String, String)>, // +G bad words: (find, replace) pub amu: crate::config::AntiMixedCfg, // antimixedutf8 module config pub resolve_hosts: bool, // reverse-DNS clients on connect pub use_resolved_host: bool, // apply the resolved name to the hostmask pub dnsbl_zones: Vec, // DNS blocklist zones checked on connect pub dnsbl_action: String, // mark | kline | gline | zline pub dnsbl_reason: String, // ban reason on a DNSBL hit pub sasl_server: String, // services server that handles SASL pub webirc: Vec<(String, String, String)>, // web gateways: (password, name, ip-mask) /// Every `key = value` line from the config, so each module reads its own /// settings via [`Server::conf`] / [`conf_all`] / [`conf_bool`] / [`conf_num`] /// — no per-module field lives on this struct (module-per-file rule). pub raw_config: HashMap>, // labeled-response: while Some((uid, buf)), that client's own responses are // diverted into `buf` instead of the socket, so `on_line` can wrap them with // the command's `label` (single tag, BATCH, or ACK). RefCell because the // output primitives are `&self`. pub label_capture: RefCell)>>, /// Rolling in-memory server log (fed by `snotice`), read by the RPC log methods. pub log: RefCell, pub event_tx: Sender, // self-inject events (DNS results) pub conn_counter: Arc, // mints connection uids (for CONNECT dials) /// Module-owned server state, keyed by type — the InspIRCd `ExtensionItem` /// equivalent. Each `modules/*.rs` stores its own struct here so features live /// in their own file instead of bloating this one. pub ext: Extensible, } impl Server { pub fn new(cfg: Config, event_tx: Sender, conn_counter: Arc) -> Server { Server { name: cfg.servername, network: cfg.network, created: now(), motd: cfg.motd, users: HashMap::new(), nick_index: HashMap::new(), channels: HashMap::new(), events: VecDeque::new(), opers: cfg.opers, cloak_key: cfg.cloak_key, line_ctags: String::new(), sid: cfg.sid, server_desc: cfg.serverdesc, link_blocks: cfg.links, links: HashMap::new(), servers: HashMap::new(), uuid_counter: 0, msgid_counter: 0, uuid_local: HashMap::new(), remote_users: HashMap::new(), remote_nick: HashMap::new(), whowas: VecDeque::new(), conf_path: cfg.conf_path, xlines: Vec::new(), mode_sudo: false, in_redirect: false, censor: cfg.censor, amu: cfg.amu, resolve_hosts: cfg.resolve_hosts, use_resolved_host: cfg.use_resolved_host, dnsbl_zones: cfg.dnsbl_zones, dnsbl_action: cfg.dnsbl_action, dnsbl_reason: cfg.dnsbl_reason, sasl_server: cfg.sasl_server, webirc: cfg.webirc, raw_config: cfg.raw, label_capture: RefCell::new(None), log: RefCell::new(LogState::default()), event_tx, conn_counter, ext: Extensible::default(), } } /// The last value set for config `key` (`None` if unset). Modules read their /// own settings through here so no per-module field bloats `Server`/`Config`. pub fn conf(&self, key: &str) -> Option<&str> { self.raw_config .get(key) .and_then(|v| v.last()) .map(|s| s.as_str()) } /// Every value set for `key` (repeated lines, e.g. `securitygroup`, `motd`). pub fn conf_all(&self, key: &str) -> &[String] { self.raw_config .get(key) .map(|v| v.as_slice()) .unwrap_or(&[]) } /// A boolean config value (`yes`/`no`/…); `default` when the key is unset. pub fn conf_bool(&self, key: &str, default: bool) -> bool { self.conf(key).map(crate::config::yesish).unwrap_or(default) } /// A parsed config value; `default` when unset or unparseable. pub fn conf_num(&self, key: &str, default: T) -> T { self.conf(key) .and_then(|v| v.parse().ok()) .unwrap_or(default) } /// Apply a freshly-loaded config to the running server — the shared body of /// REHASH and the `server.rehash` RPC. Reloads the typed fields **and** /// `raw_config`, so modules reading via `conf*` see the new values too. pub fn apply_config(&mut self, fresh: crate::config::Config) { self.motd = fresh.motd; self.opers = fresh.opers; self.cloak_key = fresh.cloak_key; self.censor = fresh.censor; self.amu = fresh.amu; self.resolve_hosts = fresh.resolve_hosts; self.use_resolved_host = fresh.use_resolved_host; self.dnsbl_zones = fresh.dnsbl_zones; self.dnsbl_action = fresh.dnsbl_action; self.dnsbl_reason = fresh.dnsbl_reason; self.sasl_server = fresh.sasl_server; self.raw_config = fresh.raw; } /// Remember an identity for WHOWAS (capped ring, newest first). pub fn push_whowas( &mut self, nick: &str, ident: &str, host: &str, realname: &str, account: Option, ) { if nick.is_empty() { return; } self.whowas.push_front(WhowasEntry { nick: nick.to_string(), ident: ident.to_string(), host: host.to_string(), realname: realname.to_string(), account, ts: now(), }); let cap = self.conf_num("whowas_maxentries", 256usize); while self.whowas.len() > cap { self.whowas.pop_back(); } } // --- connection lifecycle ------------------------------------------------ pub fn add_conn( &mut self, uid: Uid, addr: SocketAddr, out: OutSink, sock: Option, secure: bool, certfp: Option, ) { let uuid = self.next_uuid(); self.uuid_local.insert(uuid.clone(), uid); let ip = addr.ip(); self.users.insert( uid, User { uid, uuid, nick: String::new(), ident: String::new(), realname: String::new(), host: addr.ip().to_string(), cloak: String::new(), vhost: None, secure, certfp, account: None, signon: now(), addr, registered: false, dns_pending: false, deferred: Vec::new(), cap: false, cap_302: false, caps: Caps::default(), sasl_mech: None, channels: HashSet::new(), watch: Vec::new(), monitor: Vec::new(), silence: Vec::new(), accept: Vec::new(), quitting: None, flags: UserFlags::default(), last_active: now(), ping_sent: false, ext: Extensible::default(), out, sock, }, ); // connflood — refuse an IP that's opening connections too fast (see modules::connflood) if crate::modules::connflood::over_limit(self, ip) { self.send( uid, "ERROR :Closing link: (Too many connections from your IP)".to_string(), ); self.remove_user(uid, "Connection throttled"); return; } // connectban — z-line an IP range that opens too many connections (see modules::connectban) crate::modules::connectban::on_connect(self, ip); // Pre-registration connection notices, InspIRCd / solanum style. Ident-113 // is archaic and firewalled, so those two are cosmetic; the hostname lookup // is real (see `resolver`) — its result arrives later as an Event. self.notice_star(uid, "Checking Ident"); self.notice_star(uid, "No Ident response"); let do_rdns = self.resolve_hosts; let zones = self.dnsbl_zones.clone(); // DNSBL runs if any zones are configured if do_rdns { self.notice_star(uid, "Looking up your hostname..."); } if (do_rdns || !zones.is_empty()) && resolver::try_acquire() { if let Some(u) = self.users.get_mut(&uid) { u.dns_pending = true; // hold registration until the lookups return } let tx = self.event_tx.clone(); thread::spawn(move || { // rDNS and DNSBL are independent (DNSBL only needs the IP), so run // them concurrently — the client waits on max(rdns, dnsbl), not the // sum. Only spin up the extra thread when both are actually needed. let (host, dnsbl) = if do_rdns && !zones.is_empty() { let job = thread::spawn(move || dnsbl::check(ip, &zones, resolver::DNS_TIMEOUT)); let host = resolver::reverse_confirmed(ip, resolver::DNS_TIMEOUT); (host, job.join().unwrap_or(dnsbl::Outcome::Skipped)) } else if do_rdns { ( resolver::reverse_confirmed(ip, resolver::DNS_TIMEOUT), dnsbl::Outcome::Skipped, ) } else { (None, dnsbl::check(ip, &zones, resolver::DNS_TIMEOUT)) }; resolver::release(); let _ = tx.send(Event::ResolvedHost { uid, host, dnsbl }); }); } else if do_rdns { // wanted rDNS but couldn't start (too many in flight): keep the IP self.notice_star( uid, "Couldn't look up your hostname; using your IP address instead", ); } } /// Fire an HTTP POST on a worker thread and deliver `(status, body)` back to /// the core as `Event::HttpResult { uid, tag, .. }` — the same self-injection /// pattern as the DNS resolver, so a slow endpoint never blocks the main loop. /// `tag` is `":"`; the core routes the reply by its prefix. pub fn spawn_http( &self, uid: Uid, tag: String, url: String, body: String, headers: Vec<(String, String)>, ) { let tx = self.event_tx.clone(); std::thread::spawn(move || { let (status, body) = crate::http::post( &url, "application/x-www-form-urlencoded", &body, &headers, std::time::Duration::from_secs(10), ) .unwrap_or((0, String::new())); let _ = tx.send(crate::ircd::Event::HttpResult { uid, tag, status, body, }); }); } /// A pre-registration `:server NOTICE * :*** ` line. pub(crate) fn notice_star(&self, uid: Uid, msg: &str) { self.send(uid, format!(":{} NOTICE * :*** {msg}", self.name)); } /// While a client's connect-time DNS/DNSBL lookups are still running, hold its /// handshake lines instead of processing them, so the "*** ..." notices print /// as one contiguous block rather than interleaving with the CAP/NICK replies. /// Returns true if `line` was buffered. Bounded — past the cap we let lines /// through (degrading to interleaved output rather than dropping input). pub fn defer_if_resolving(&mut self, uid: Uid, line: &str) -> bool { const MAX_DEFERRED: usize = 32; match self.users.get_mut(&uid) { Some(u) if u.dns_pending && u.deferred.len() < MAX_DEFERRED => { u.deferred.push(line.to_string()); true } _ => false, } } /// Take and clear the handshake lines held while `uid`'s lookups ran, to replay /// once the notice block has printed. pub fn take_deferred(&mut self, uid: Uid) -> Vec { self.users .get_mut(&uid) .map(|u| std::mem::take(&mut u.deferred)) .unwrap_or_default() } /// A client's reverse-DNS lookup finished. Set the resolved host (so WHOIS, /// bans and cloaking use the hostname, not the IP), tell the client, and clear /// the flag that was holding their registration. pub fn on_resolved(&mut self, uid: Uid, host: Option, outcome: dnsbl::Outcome) { // hostname result (only announced if we actually attempted the lookup) match &host { Some(h) => self.notice_star(uid, &format!("Found your hostname ({h})")), None if self.resolve_hosts => self.notice_star( uid, "Couldn't look up your hostname; using your IP address instead", ), None => {} } let apply = self.use_resolved_host; if let Some(u) = self.users.get_mut(&uid) { // `use_resolved_host = off` keeps the IP in the hostmask even though we // resolved and reported the name above. if apply { if let Some(h) = host { u.host = h; } } } // DNSBL notices + action (InspIRCd m_dnsbl style) — see `modules::dnsbl`. // May close the connection if the zone is listed and the action bans. dnsbl::report(self, uid, outcome); // release the registration hold (no-op if a DNSBL ban already removed them) if let Some(u) = self.users.get_mut(&uid) { u.dns_pending = false; } } /// Mark a user as quitting; the core turns this into a full quit after the /// current command returns (so hooks fire while the user still exists). pub fn mark_quit(&mut self, uid: Uid, reason: String) { if let Some(u) = self.users.get_mut(&uid) { u.quitting = Some(reason); } } pub fn take_quit(&mut self, uid: Uid) -> Option { self.users.get_mut(&uid).and_then(|u| u.quitting.take()) } /// Remove a user: broadcast QUIT to everyone sharing a channel, drop them /// from all channels, free the nick, and close the socket. pub fn remove_user(&mut self, uid: Uid, reason: &str) { let Some(user) = self.users.remove(&uid) else { return; }; self.uuid_local.remove(&user.uuid); if user.registered { self.push_whowas( &user.nick, &user.ident, user.host_display(), &user.realname, user.account.clone(), ); self.propagate(&format!(":{} QUIT :{reason}", user.uuid), None); // tell links } // NB: we do *not* force-shutdown the socket here. When `user` drops at // the end of this function its `out` Sender drops with it, so the writer // thread drains any still-queued lines — e.g. a KILL / x-line ERROR — // and then closes the socket itself once the channel is empty. if !user.nick.is_empty() { self.nick_index.remove(&user.nick.to_ascii_lowercase()); } if user.registered { let line = format!(":{} QUIT :{reason}", user.prefix()); let mut seen: HashSet = HashSet::new(); for key in &user.channels { if let Some(ch) = self.channels.get_mut(key) { // +D delayjoin: if their JOIN here was never announced, no QUIT either let hidden = ch.members.get(&uid).map(|m| m.hidden).unwrap_or(false); ch.members.remove(&uid); if !hidden { for &m in ch.members.keys() { seen.insert(m); } } } } for m in seen { self.send(m, line.clone()); } self.channels.retain(|_, c| c.keep_alive()); self.watch_notify_offline(&user.nick); // tell WATCH/MONITOR watchers } } // --- output primitives --------------------------------------------------- /// Queue one raw line to a connection (no-op if it's gone). pub fn send(&self, uid: Uid, line: String) { if let Some(u) = self.users.get(&uid) { // server-time: tag sourced (`:prefix …`) lines for clients that asked let line = if u.caps.server_time && line.starts_with(':') { format!("@time={} {line}", iso_time(now())) } else { line }; self.emit_to(uid, line); } } /// Final hop for one line to a client: diverted into the labeled-response /// capture buffer when one is active for `uid`, otherwise written to the wire. fn emit_to(&self, uid: Uid, line: String) { if let Ok(mut cap) = self.label_capture.try_borrow_mut() { if let Some((cuid, buf)) = cap.as_mut() { if *cuid == uid { buf.push(line); return; } } } if let Some(u) = self.users.get(&uid) { u.out.send(line); } } /// Send a numeric: `:server NNN `. `` is the client's /// nick, or `*` before it has one. /// The ISUPPORT (005) token blocks this server advertises — the fixed set plus /// the config-driven module tokens (ICON, FILEHOST). Each entry is a token block /// without the trailing `:are supported by this server`. Shared by the welcome /// burst and the `ISUPPORT` command (draft/extended-isupport). pub fn isupport_lines(&self) -> Vec { // advertised limits mirror the (config-driven) values actually enforced let maxwatch = self.conf_num("maxwatch", crate::watch::WATCH_MAX); let maxmon = self.conf_num("maxmonitor", crate::watch::MONITOR_MAX); let maxsil = self.conf_num("maxsilence", crate::watch::SILENCE_MAX); let chathist = crate::modules::chathistory::limit(self); let maxnick = self.conf_num("maxnick", 30usize); let maxchan = self.conf_num("maxchannel", 50usize); let mut lines = vec![format!( "CHANTYPES=# PREFIX=(qaohv)~&@%+ CHANMODES=beIgX,k,lfjFLHBJdK,ACDGMNOPQRSTUcimnpstuz EXTBAN=,Gcgjmnrsy WATCH={maxwatch} MONITOR={maxmon} SILENCE={maxsil} CALLERID=g WHOX CHATHISTORY={chathist} MSGREFTYPES=timestamp,msgid UTF8ONLY CASEMAPPING=ascii NICKLEN={maxnick} CHANNELLEN={maxchan} NETWORK={}", self.network )]; if let Some(tok) = crate::modules::network_icon::isupport(self) { lines.push(tok); } if let Some(tok) = crate::modules::filehost::isupport(self) { lines.push(tok); } lines } /// Emit the ISUPPORT numerics to `uid`. When `batched` (the client negotiated /// `draft/extended-isupport` + `batch`), wrap them in a `draft/isupport` BATCH so /// the multi-line set arrives atomically (InspIRCd's m_ircv3_extended_isupport). pub fn send_isupport(&mut self, uid: Uid, batched: bool) { let lines = self.isupport_lines(); if batched { let nick = self .users .get(&uid) .map(|u| u.nick.clone()) .unwrap_or_default(); let bref = self.next_msgid().replace('-', ""); self.send(uid, format!(":{} BATCH +{bref} draft/isupport", self.name)); for l in &lines { self.send( uid, format!( "@batch={bref} :{} {:03} {nick} {l} :are supported by this server", self.name, crate::numeric::RPL_ISUPPORT ), ); } self.send(uid, format!(":{} BATCH -{bref}", self.name)); } else { for l in &lines { self.numeric( uid, crate::numeric::RPL_ISUPPORT, &format!("{l} :are supported by this server"), ); } } } pub fn numeric(&self, uid: Uid, code: u16, rest: &str) { let target = self .users .get(&uid) .map(|u| { if u.nick.is_empty() { "*".to_string() } else { u.nick.clone() } }) .unwrap_or_else(|| "*".to_string()); self.send( uid, format!(":{} {:03} {} {}", self.name, code, target, rest), ); } /// Send a server notice to every operator who has snomask (+s) on. /// Record one server-notice line in the rolling log (for RPC log.tail/events). fn log_push(&self, msg: &str) { let mut lg = self.log.borrow_mut(); lg.seq += 1; let id = lg.seq; lg.ring.push_back(LogLine { id, ts: now(), msg: msg.to_string(), }); while lg.ring.len() > 1000 { lg.ring.pop_front(); } } /// Deliver a `*** msg` server notice to `uid`, folding in that recipient's /// server-time + `draft/json-log` tags — the two tags every server notice may /// carry. `jval` is the per-notice escaped json-log value, shared across /// recipients (`""` when nobody negotiated the cap). One path for both /// `snotice` and `announce`, so tagging is consistent no matter the caller. fn deliver_server_notice(&self, uid: Uid, msg: &str, jval: &str) { let Some(u) = self.users.get(&uid) else { return; }; let nick = u.nick.clone(); let mut tags: Vec = Vec::new(); if u.caps.server_time { tags.push(format!("time={}", iso_time(now()))); } if u.caps.json_log && !jval.is_empty() { tags.push(format!("draft/json-log={jval}")); } let base = format!(":{} NOTICE {nick} :*** {msg}", self.name); let line = if tags.is_empty() { base } else { format!("@{} {base}", tags.join(";")) }; self.emit_to(uid, line); } /// The escaped json-log value for `msg`, or `""` if none of `targets` want it /// (so we skip building the JSON when no recipient has the cap). fn json_log_value(&self, msg: &str, targets: &[Uid]) -> String { let wanted = targets .iter() .any(|u| self.users.get(u).map(|x| x.caps.json_log).unwrap_or(false)); if wanted { crate::modules::jsonlog::tag_value(self, msg) } else { String::new() } } /// Send a server notice to every operator who has snomask (+s) on. pub fn snotice(&self, msg: &str) { self.log_push(msg); let opers: Vec = self .users .iter() .filter(|(_, u)| u.flags.oper && u.flags.snomask) .map(|(&u, _)| u) .collect(); let jval = self.json_log_value(msg, &opers); for o in opers { self.deliver_server_notice(o, msg, &jval); } } /// Broadcast a `*** msg` server NOTICE to *every* registered local user — for /// server-wide announcements everyone should see (e.g. a config reload). Goes /// through the same tagged path as `snotice`, so cap-holders get the server-time /// + `draft/json-log` tags and the line is recorded in the server log. pub fn announce(&self, msg: &str) { self.log_push(msg); let targets: Vec = self .users .iter() .filter(|(_, u)| u.registered && !u.nick.is_empty()) .map(|(&u, _)| u) .collect(); let jval = self.json_log_value(msg, &targets); for u in targets { self.deliver_server_notice(u, msg, &jval); } } /// IRCv3 standard reply (`FAIL`/`WARN`/`NOTE`): structured, machine-readable /// command feedback. Sent in the `:server FAIL :` form /// to clients that negotiated `standard-replies`; others get the description as /// a plain server NOTICE so the human-readable text still reaches them. pub fn fail(&self, uid: Uid, command: &str, code: &str, desc: &str) { self.standard_reply(uid, "FAIL", command, code, desc); } pub fn warn(&self, uid: Uid, command: &str, code: &str, desc: &str) { self.standard_reply(uid, "WARN", command, code, desc); } pub fn note(&self, uid: Uid, command: &str, code: &str, desc: &str) { self.standard_reply(uid, "NOTE", command, code, desc); } fn standard_reply(&self, uid: Uid, kind: &str, command: &str, code: &str, desc: &str) { let cap = self .users .get(&uid) .map(|u| u.caps.standard_replies) .unwrap_or(false); if cap { self.send( uid, format!(":{} {kind} {command} {code} :{desc}", self.name), ); } else { let nick = self .users .get(&uid) .map(|u| { if u.nick.is_empty() { "*".to_string() } else { u.nick.clone() } }) .unwrap_or_else(|| "*".to_string()); self.send(uid, format!(":{} NOTICE {nick} :{desc}", self.name)); } } /// Send a line to every member of a channel, optionally skipping one uid. pub fn to_channel(&self, key: &str, line: &str, except: Option) { if let Some(ch) = self.channels.get(key) { for &uid in ch.members.keys() { if Some(uid) != except { self.send(uid, line.to_string()); } } } } /// Send a message body (`:prefix CMD …`) from `src` to `uid`, composing its /// IRCv3 tag prefix from *that recipient's* caps: `time=` (server-time), /// `account=` (account-tag, from the sender's login) plus the client-only tags /// `ctags` and `msgid` (message-tags). For PRIVMSG / NOTICE / TAGMSG delivery. pub fn send_tagged(&self, uid: Uid, src: Uid, ctags: &str, msgid: &str, body: &str) { if let Some(u) = self.users.get(&uid) { let mut tags: Vec = Vec::new(); if u.caps.server_time { tags.push(format!("time={}", iso_time(now()))); } // account-tag: label a message with the sender's services account, so // recipients see who's authenticated without a separate WHOIS. if u.caps.account_tag { if let Some(acct) = self.users.get(&src).and_then(|su| su.account.as_deref()) { tags.push(format!("account={acct}")); } } // msgid (IRCv3): a unique, server-assigned id per message so clients // can reference it (reactions, replies, redaction). Tag-only feature, // so it goes to message-tags clients alongside any client `+`-tags. if u.caps.message_tags { if !msgid.is_empty() { tags.push(format!("msgid={msgid}")); } if !ctags.is_empty() { tags.push(ctags.to_string()); } } let line = if tags.is_empty() { body.to_string() } else { format!("@{} {body}", tags.join(";")) }; self.emit_to(uid, line); } } /// Mint a unique IRCv3 `msgid` for one message. Generated once per PRIVMSG/ /// NOTICE/TAGMSG and shared across all its recipients so they correlate. /// `-` in hex: unique for this run, distinct across /// restarts (the start time changes). pub fn next_msgid(&mut self) -> String { self.msgid_counter = self.msgid_counter.wrapping_add(1); format!("{:x}-{:x}", self.created, self.msgid_counter) } /// Send `line` to every user sharing a channel with `uid` (except `uid`) whose /// capabilities satisfy `want`. Drives away-/account-/chghost-/setname-notify. pub fn notify_peers(&self, uid: Uid, line: &str, want: fn(&Caps) -> bool) { let chans: Vec = self .users .get(&uid) .map(|u| u.channels.iter().cloned().collect()) .unwrap_or_default(); let mut seen: HashSet = HashSet::new(); for k in &chans { if let Some(ch) = self.channels.get(k) { for &m in ch.members.keys() { seen.insert(m); } } } // extended-monitor (IRCv3): clients that MONITOR this nick and negotiated // `extended-monitor` are treated as able to see it — so away/account/ // chghost/setname reach them even without a shared channel. The `want` // filter below still requires the matching base cap, per spec. if let Some(low) = self.users.get(&uid).map(|u| u.nick.to_ascii_lowercase()) { for (&m, u) in &self.users { if u.caps.extended_monitor && u.monitor.contains(&low) { seen.insert(m); } } } for m in seen { if m != uid && self.users.get(&m).map(|u| want(&u.caps)).unwrap_or(false) { self.send(m, line.to_string()); } } } /// Change a user's displayed host and/or ident (CHGHOST/CHGIDENT/SETHOST/ /// SETIDENT). Announces it via the `chghost` cap to peers that speak it and /// to the user, and sends RPL_HOSTHIDDEN (396) when the host changed. Mirrors /// InspIRCd's ChangeDisplayedHost / ChangeIdent (local scope for now). pub fn change_host_ident(&mut self, uid: Uid, new_ident: Option<&str>, new_host: Option<&str>) { let Some(u) = self.users.get(&uid) else { return; }; let old_prefix = u.prefix(); if let Some(h) = new_host { if let Some(u) = self.users.get_mut(&uid) { u.vhost = Some(h.to_string()); } } if let Some(i) = new_ident { if let Some(u) = self.users.get_mut(&uid) { u.ident = i.to_string(); } } let (ident, host, aware) = { let u = &self.users[&uid]; ( u.ident.clone(), u.host_display().to_string(), u.caps.chghost, ) }; // chghost-cap peers (and, if it speaks it, the user) get a CHGHOST line let line = format!(":{old_prefix} CHGHOST {ident} {host}"); self.notify_peers(uid, &line, |c| c.chghost); if aware { self.send(uid, line); } // hostcycle — clients WITHOUT the chghost cap only learn the new host via a // PART+JOIN, so cycle them through each shared channel (chghost peers already // got the CHGHOST line above). Prefix modes are re-sent so they don't appear // de-opped. InspIRCd `m_hostcycle`. if new_host.is_some() || new_ident.is_some() { let (nick, new_prefix, acct, realname) = { let u = &self.users[&uid]; ( u.nick.clone(), u.prefix(), u.account.clone().unwrap_or_else(|| "*".to_string()), u.realname.clone(), ) }; let chans: Vec = self.users[&uid].channels.iter().cloned().collect(); for key in chans { let Some(ch) = self.channels.get(&key) else { continue; }; let name = ch.name.clone(); let modes: String = ch .members .get(&uid) .map(|mem| { let mut s = String::new(); for (on, c) in [ (mem.owner, 'q'), (mem.admin, 'a'), (mem.op, 'o'), (mem.halfop, 'h'), (mem.voice, 'v'), ] { if on { s.push(c); } } s }) .unwrap_or_default(); let recips: Vec<(Uid, bool)> = ch .members .keys() .copied() .filter(|&m| m != uid) .filter_map(|m| { self.users .get(&m) .filter(|u| !u.caps.chghost) .map(|u| (m, u.caps.extended_join)) }) .collect(); for (m, extjoin) in recips { self.send(m, format!(":{old_prefix} PART {name} :Changing host")); let joinline = if extjoin { format!(":{new_prefix} JOIN {name} {acct} :{realname}") } else { format!(":{new_prefix} JOIN {name}") }; self.send(m, joinline); if !modes.is_empty() { let args = vec![nick.clone(); modes.len()].join(" "); self.send(m, format!(":{} MODE {name} +{modes} {args}", self.name)); } } } } if new_host.is_some() { self.numeric( uid, crate::numeric::RPL_HOSTHIDDEN, &format!("{host} :is now your displayed host"), ); } } /// Decide which connections to PING and which to drop, given `now`. /// Returns `(to_ping, to_quit)`. Pure over the state, so it's unit-testable. pub fn idle_check(&self, now: u64) -> (Vec, Vec) { let reg_timeout = self.conf_num("registration_timeout", REG_TIMEOUT); let ping_after = self.conf_num("ping_frequency", PING_AFTER); let ping_timeout = self.conf_num("ping_timeout", PING_TIMEOUT); let mut ping = Vec::new(); let mut quit = Vec::new(); for (&uid, u) in &self.users { let idle = now.saturating_sub(u.last_active); if !u.registered { if idle >= reg_timeout { quit.push(uid); // never registered in time } } else if u.ping_sent { if idle >= ping_after + ping_timeout { quit.push(uid); // no reply to our PING } } else if idle >= ping_after { ping.push(uid); // idle — poke it } } (ping, quit) } } #[cfg(test)] mod tests { use super::*; use crate::channels::valid_chan; use crate::users::{valid_nick, User, UserFlags}; use std::sync::mpsc::{self, Receiver}; /// Insert a registered user with an output channel we can read in the test. fn add_user(s: &mut Server, uid: Uid, nick: &str) -> Receiver { let (tx, rx) = mpsc::channel(); s.users.insert( uid, User { uid, uuid: format!("TST{uid:06}"), nick: nick.to_string(), ident: "u".to_string(), realname: "real".to_string(), host: "localhost".to_string(), cloak: String::new(), vhost: None, secure: false, certfp: None, account: None, signon: 0, addr: "127.0.0.1:1".parse().unwrap(), registered: true, dns_pending: false, deferred: Vec::new(), cap: false, cap_302: false, caps: Caps::default(), sasl_mech: None, channels: HashSet::new(), watch: Vec::new(), monitor: Vec::new(), silence: Vec::new(), accept: Vec::new(), quitting: None, flags: UserFlags::default(), last_active: 0, ping_sent: false, ext: Extensible::default(), out: OutSink::Thread(tx), sock: None, }, ); s.nick_index.insert(nick.to_ascii_lowercase(), uid); rx } fn srv() -> Server { let (tx, _rx) = mpsc::channel(); Server::new(Config::default(), tx, Arc::new(AtomicU64::new(1))) } #[test] fn resolved_host_applied_only_when_configured() { let mut s = srv(); // use_resolved_host = true (default) let _a = add_user(&mut s, 1, "ann"); // host starts "localhost" s.on_resolved( 1, Some("host.example.net".to_string()), dnsbl::Outcome::Skipped, ); assert_eq!(s.users[&1].host, "host.example.net"); assert!(!s.users[&1].dns_pending); s.use_resolved_host = false; // resolve + report, but keep the IP in the mask let _b = add_user(&mut s, 2, "bob"); s.on_resolved( 2, Some("host.example.net".to_string()), dnsbl::Outcome::Skipped, ); assert_eq!(s.users[&2].host, "localhost"); assert!(!s.users[&2].dns_pending); // registration still un-held either way } #[test] fn join_broadcasts_and_tracks_membership() { let mut s = srv(); let arx = add_user(&mut s, 1, "ann"); let brx = add_user(&mut s, 2, "bob"); s.join(1, "#c", None); // ann creates -> gets @ s.join(2, "#c", None); // bob joins assert!(s.channels["#c"].members[&1].op); assert!(!s.channels["#c"].members[&2].op); assert_eq!(s.channels["#c"].members.len(), 2); let ann: Vec = arx.try_iter().collect(); assert!(ann .iter() .any(|l| l.contains("JOIN #c") && l.contains("ann!"))); assert!(ann .iter() .any(|l| l.contains(":bob!") && l.contains("JOIN #c"))); let bob: Vec = brx.try_iter().collect(); assert!(bob.iter().any(|l| l.contains("353") && l.contains("@ann"))); } #[test] fn nick_change_reindexes_and_notifies_channel() { let mut s = srv(); let arx = add_user(&mut s, 1, "ann"); add_user(&mut s, 2, "bob"); s.join(1, "#c", None); s.join(2, "#c", None); s.set_nick(1, "annie"); assert_eq!(s.find_nick("annie"), Some(1)); assert_eq!(s.find_nick("ann"), None); let ann: Vec = arx.try_iter().collect(); assert!(ann .iter() .any(|l| l.contains("NICK :annie") && l.contains("ann!"))); } #[test] fn quit_frees_the_nick_and_tells_neighbors() { let mut s = srv(); add_user(&mut s, 1, "ann"); let brx = add_user(&mut s, 2, "bob"); s.join(1, "#c", None); s.join(2, "#c", None); s.remove_user(1, "bye"); assert!(s.find_nick("ann").is_none()); assert!(!s.channels["#c"].members.contains_key(&1)); let bob: Vec = brx.try_iter().collect(); assert!(bob .iter() .any(|l| l.contains(":ann!") && l.contains("QUIT :bye"))); } #[test] fn moderated_channel_needs_voice() { let mut s = srv(); add_user(&mut s, 1, "ann"); add_user(&mut s, 2, "bob"); s.join(1, "#c", None); // ann = op s.join(2, "#c", None); s.channels.get_mut("#c").unwrap().modes.moderated = true; assert!(s.is_op(1, "#c") && !s.is_op(2, "#c")); assert!(s.is_member(2, "#c")); } #[test] fn secure_only_channel_rejects_plaintext() { let mut s = srv(); add_user(&mut s, 1, "tls"); s.users.get_mut(&1).unwrap().secure = true; // on TLS add_user(&mut s, 2, "plain"); // add_user defaults secure=false s.join(1, "#z", None); // tls creates -> op s.channels.get_mut("#z").unwrap().modes.secure_only = true; s.join(2, "#z", None); // plaintext tries to join assert!(s.is_member(1, "#z")); // the TLS user stays assert!(!s.is_member(2, "#z")); // the plaintext user is refused } #[test] fn reg_only_channel_rejects_unregistered() { let mut s = srv(); add_user(&mut s, 1, "member"); s.users.get_mut(&1).unwrap().account = Some("acct".to_string()); // logged in add_user(&mut s, 2, "guest"); // account None s.join(1, "#r", None); // logged-in user creates -> op s.channels.get_mut("#r").unwrap().modes.reg_only = true; s.join(2, "#r", None); // guest tries to join assert!(s.is_member(1, "#r")); // the logged-in user stays assert!(!s.is_member(2, "#r")); // the guest is refused } #[test] fn iso_time_formats_server_time() { assert_eq!(iso_time(0), "1970-01-01T00:00:00.000Z"); assert_eq!(iso_time(1_000_000_000), "2001-09-09T01:46:40.000Z"); } #[test] fn nick_and_chan_validation() { assert!(valid_nick("reverse", 30)); assert!(valid_nick("[abc]`", 30)); assert!(!valid_nick("1abc", 30)); // can't start with a digit assert!(!valid_nick("", 30)); assert!(valid_chan("#argentina", 50)); assert!(!valid_chan("argentina", 50)); assert!(!valid_chan("#a b", 50)); } #[test] fn idle_check_pings_then_times_out() { let mut s = srv(); add_user(&mut s, 1, "ann"); // registered, last_active = 0 let now = 1000; let (ping, quit) = s.idle_check(now); assert_eq!(ping, vec![1]); // idle -> PING assert!(quit.is_empty()); s.users.get_mut(&1).unwrap().ping_sent = true; let (ping, quit) = s.idle_check(now); assert!(ping.is_empty()); // already pinged assert_eq!(quit, vec![1]); // no reply -> ping timeout s.users.get_mut(&1).unwrap().ping_sent = false; s.users.get_mut(&1).unwrap().last_active = now; let (ping, quit) = s.idle_check(now); assert!(ping.is_empty() && quit.is_empty()); // active -> left alone s.users.get_mut(&1).unwrap().registered = false; s.users.get_mut(&1).unwrap().last_active = 0; let (_, quit) = s.idle_check(now); assert_eq!(quit, vec![1]); // unregistered + idle -> registration timeout } }