chanserv: SET PEACE (block acting against equal-or-higher access)

PEACE stops a channel op from using ChanServ KICK/BAN/DEOP/DEVOICE against
someone whose access rank (founder>op>voice) is equal to or above their own.
Adds a typed access_rank on ChannelView and a peace_blocks guard in those
commands. Same typed-settings path as SIGNKICK/PRIVATE; shown in INFO.

chanserv/src/ban.rs

@@ -15,6 +15,9 @@ pub fn handle(me: &str, from: &Sender, args: &[&str], ctx: &mut ServiceCtx, net:
         ctx.notice(me, from.uid, format!("\x02{nick}\x02 isn't here."));
         return;
     };
+    if super::peace_blocks(me, from, chan, &target, ctx, net, db) {
+        return;
+    }
     let host = net.host_of(&target).unwrap_or("*");
     ctx.channel_mode(me, chan, &format!("+b *!*@{host}"));
     let reason = if args.len() > 3 { args[3..].join(" ") } else { "Banned".to_string() };

chanserv/src/kick.rs

@@ -15,6 +15,9 @@ pub fn handle(me: &str, from: &Sender, args: &[&str], ctx: &mut ServiceCtx, net:
         ctx.notice(me, from.uid, format!("\x02{nick}\x02 isn't here."));
         return;
     };
+    if super::peace_blocks(me, from, chan, target, ctx, net, db) {
+        return;
+    }
     let mut reason = if args.len() > 3 { args[3..].join(" ") } else { "Kicked".to_string() };
     // SIGNKICK: attribute the kick to whoever asked for it.
     if db.channel(chan).is_some_and(|c| c.signkick) {

chanserv/src/lib.rs

@@ -104,6 +104,7 @@ impl Service for ChanServ {
                         let mut opts = Vec::new();
                         if info.signkick { opts.push("SIGNKICK"); }
                         if info.private { opts.push("PRIVATE"); }
+                        if info.peace { opts.push("PEACE"); }
                         if !opts.is_empty() {
                             ctx.notice(me, from.uid, format!("  Options    : {}", opts.join(", ")));
                         }
@@ -235,6 +236,20 @@ fn require_op(me: &str, from: &Sender, chan: &str, ctx: &mut ServiceCtx, db: &dy
     }
 }
 
+// PEACE: returns true (and notices) if `from` may not act against `target_uid`
+// because the channel has PEACE set and the target holds equal-or-higher access.
+fn peace_blocks(me: &str, from: &Sender, chan: &str, target_uid: &str, ctx: &mut ServiceCtx, net: &dyn NetView, db: &dyn Store) -> bool {
+    let Some(info) = db.channel(chan) else { return false };
+    if !info.peace {
+        return false;
+    }
+    if info.access_rank(net.account_of(target_uid)) >= info.access_rank(from.account) {
+        ctx.notice(me, from.uid, "\x02PEACE\x02 is set: you can't act against someone with equal or higher access.");
+        return true;
+    }
+    false
+}
+
 // Parse a mode spec like "+nt-s" into (locked-on, locked-off) mode chars. `r` is
 // implicit for a registered channel and is ignored here.
 fn parse_mlock(spec: &str) -> (String, String) {

chanserv/src/op.rs

@@ -22,5 +22,9 @@ pub fn handle(me: &str, from: &Sender, mode: &str, args: &[&str], ctx: &mut Serv
         },
         None => from.uid.to_string(),
     };
+    // PEACE only guards removing status (-o/-v) from an equal-or-higher user.
+    if mode.starts_with('-') && super::peace_blocks(me, from, chan, &target, ctx, net, db) {
+        return;
+    }
     ctx.channel_mode(me, chan, &format!("{mode} {target}"));
 }

chanserv/src/set.rs

@@ -41,7 +41,8 @@ pub fn handle(me: &str, from: &Sender, args: &[&str], ctx: &mut ServiceCtx, db:
         }
         Some("SIGNKICK") => toggle(me, from, ctx, db, chan, ChanSetting::SignKick, args.get(3).copied(), "SIGNKICK"),
         Some("PRIVATE") => toggle(me, from, ctx, db, chan, ChanSetting::Private, args.get(3).copied(), "PRIVATE"),
-        _ => ctx.notice(me, from.uid, "Syntax: SET <#channel> FOUNDER <account> | DESC <text> | SIGNKICK {ON|OFF} | PRIVATE {ON|OFF}"),
+        Some("PEACE") => toggle(me, from, ctx, db, chan, ChanSetting::Peace, args.get(3).copied(), "PEACE"),
+        _ => ctx.notice(me, from.uid, "Syntax: SET <#channel> FOUNDER <account> | DESC <text> | SIGNKICK {ON|OFF} | PRIVATE {ON|OFF} | PEACE {ON|OFF}"),
     }
 }