chanserv: channel SUSPEND / UNSUSPEND (oper-gated)

Freezes a channel gated on Priv::Suspend: a typed Suspension on ChannelInfo
(event-logged, snapshotted, lazy expiry — same shape as the account one, no
Anope Extensible/Checker or expiry timer). While suspended, ChanServ refuses
all management (guards in require_op/require_founder and the founder-inline
SET/DROP/MLOCK), the engine skips Join enforcement (no auto-op/akick/entrymsg),
and suspending kicks everyone out; INFO shows it. parse_duration moved into the
SDK so both SUSPEND commands share it. Data + full-flow tests.

chanserv/src/lib.rs

@@ -38,6 +38,8 @@ mod enforce;
 mod clone;
 #[path = "xop.rs"]
 mod xop;
+#[path = "suspend.rs"]
+mod suspend;
 
 pub struct ChanServ {
     pub uid: String,
@@ -101,6 +103,9 @@ impl Service for ChanServ {
                             ctx.notice(me, from.uid, format!("  Description: {}", info.desc));
                         }
                         ctx.notice(me, from.uid, format!("  Registered : {}", fedserv_api::human_time(info.ts)));
+                        if let Some(s) = db.channel_suspension(chan) {
+                            ctx.notice(me, from.uid, format!("  Suspended  : by \x02{}\x02 — {}", s.by, s.reason));
+                        }
                         let mut opts = Vec::new();
                         if info.signkick { opts.push("SIGNKICK"); }
                         if info.private { opts.push("PRIVATE"); }
@@ -132,6 +137,9 @@ impl Service for ChanServ {
                     ctx.notice(me, from.uid, format!("Only \x02{chan}\x02's founder can drop it."));
                     return;
                 }
+                if suspended_block(me, from, chan, ctx, db) {
+                    return;
+                }
                 match db.drop_channel(chan) {
                     Ok(()) => {
                         ctx.channel_mode(me, chan, "-r"); // no longer registered
@@ -168,6 +176,9 @@ impl Service for ChanServ {
                     ctx.notice(me, from.uid, format!("Only \x02{chan}\x02's founder can set its mode lock."));
                     return;
                 }
+                if suspended_block(me, from, chan, ctx, db) {
+                    return;
+                }
                 let (on, off) = parse_mlock(&args[2..].concat());
                 match db.set_mlock(chan, &on, &off) {
                     Ok(()) => {
@@ -192,6 +203,8 @@ impl Service for ChanServ {
             Some("INVITE") => invite::handle(me, from, args, ctx, net, db),
             Some("AKICK") => akick::handle(me, from, args, ctx, db),
             Some("STATUS") => status::handle(me, from, args, ctx, net, db),
+            Some("SUSPEND") => suspend::handle(me, from, args, ctx, net, db, true),
+            Some("UNSUSPEND") => suspend::handle(me, from, args, ctx, net, db, false),
             Some("LIST") => list::handle(me, from, args, ctx, db),
             Some("SET") => set::handle(me, from, args, ctx, db),
             Some("ENTRYMSG") => entrymsg::handle(me, from, args, ctx, db),
@@ -211,6 +224,9 @@ impl Service for ChanServ {
 
 // True if `from` is the channel's founder; otherwise notices why and returns false.
 fn require_founder(me: &str, from: &Sender, chan: &str, ctx: &mut ServiceCtx, db: &dyn Store) -> bool {
+    if suspended_block(me, from, chan, ctx, db) {
+        return false;
+    }
     match db.channel(chan) {
         None => {
             ctx.notice(me, from.uid, format!("\x02{chan}\x02 isn't registered."));
@@ -226,6 +242,9 @@ fn require_founder(me: &str, from: &Sender, chan: &str, ctx: &mut ServiceCtx, db
 
 // True if `from` is the founder or an access-list op of `chan`; else notices why.
 fn require_op(me: &str, from: &Sender, chan: &str, ctx: &mut ServiceCtx, db: &dyn Store) -> bool {
+    if suspended_block(me, from, chan, ctx, db) {
+        return false;
+    }
     match (from.account, db.channel(chan)) {
         (_, None) => {
             ctx.notice(me, from.uid, format!("\x02{chan}\x02 isn't registered."));
@@ -239,6 +258,15 @@ fn require_op(me: &str, from: &Sender, chan: &str, ctx: &mut ServiceCtx, db: &dy
     }
 }
 
+// A suspended channel is frozen: ChanServ won't manage it (returns true + notices).
+fn suspended_block(me: &str, from: &Sender, chan: &str, ctx: &mut ServiceCtx, db: &dyn Store) -> bool {
+    if db.is_channel_suspended(chan) {
+        ctx.notice(me, from.uid, format!("\x02{chan}\x02 is suspended by network staff and can't be managed right now."));
+        return true;
+    }
+    false
+}
+
 // PEACE: returns true (and notices) if `from` may not act against `target_uid`
 // because the channel has PEACE set and the target holds equal-or-higher access.
 fn peace_blocks(me: &str, from: &Sender, chan: &str, target_uid: &str, ctx: &mut ServiceCtx, net: &dyn NetView, db: &dyn Store) -> bool {

chanserv/src/set.rs

@@ -17,6 +17,9 @@ pub fn handle(me: &str, from: &Sender, args: &[&str], ctx: &mut ServiceCtx, db:
         ctx.notice(me, from.uid, format!("Only \x02{chan}\x02's founder can change its settings."));
         return;
     }
+    if super::suspended_block(me, from, chan, ctx, db) {
+        return;
+    }
     match args.get(2).map(|s| s.to_ascii_uppercase()).as_deref() {
         Some("FOUNDER") => {
             let Some(&account) = args.get(3) else {

chanserv/src/suspend.rs

@@ -0,0 +1,53 @@
+use fedserv_api::{parse_duration, NetView, Priv, Sender, ServiceCtx, Store};
+use std::time::{SystemTime, UNIX_EPOCH};
+
+// SUSPEND <#channel> [+expiry] [reason] / UNSUSPEND <#channel>: freeze or unfreeze
+// a channel. Its data is kept but it can't be managed while suspended. Oper-only
+// (Priv::Suspend). `suspending` selects SUSPEND vs UNSUSPEND.
+pub fn handle(me: &str, from: &Sender, args: &[&str], ctx: &mut ServiceCtx, net: &dyn NetView, db: &mut dyn Store, suspending: bool) {
+    if !from.privs.has(Priv::Suspend) {
+        ctx.notice(me, from.uid, "Access denied — that command is for services operators.");
+        return;
+    }
+    let Some(&chan) = args.get(1) else {
+        let syntax = if suspending { "Syntax: SUSPEND <#channel> [+expiry] [reason]" } else { "Syntax: UNSUSPEND <#channel>" };
+        ctx.notice(me, from.uid, syntax);
+        return;
+    };
+    if db.channel(chan).is_none() {
+        ctx.notice(me, from.uid, format!("\x02{chan}\x02 isn't registered."));
+        return;
+    }
+
+    if !suspending {
+        match db.unsuspend_channel(chan) {
+            Ok(true) => ctx.notice(me, from.uid, format!("\x02{chan}\x02 is no longer suspended.")),
+            Ok(false) => ctx.notice(me, from.uid, format!("\x02{chan}\x02 isn't suspended.")),
+            Err(_) => ctx.notice(me, from.uid, "Sorry, that didn't work. Please try again in a moment."),
+        }
+        return;
+    }
+
+    let mut rest = &args[2..];
+    let expires = rest.first().and_then(|t| t.strip_prefix('+')).and_then(parse_duration).map(|secs| now_unix() + secs);
+    if expires.is_some() {
+        rest = &rest[1..];
+    }
+    let reason = if rest.is_empty() { "This channel has been suspended.".to_string() } else { rest.join(" ") };
+    let by = from.account.unwrap_or(from.nick);
+    match db.suspend_channel(chan, by, &reason, expires) {
+        Ok(()) => {
+            // Clear the channel: kick everyone currently in it.
+            for uid in net.channel_members(chan) {
+                ctx.kick(me, chan, &uid, &reason);
+            }
+            let expiry = if expires.is_some() { " (with expiry)" } else { "" };
+            ctx.notice(me, from.uid, format!("\x02{chan}\x02 is now suspended{expiry}."));
+        }
+        Err(_) => ctx.notice(me, from.uid, "Sorry, that didn't work. Please try again in a moment."),
+    }
+}
+
+fn now_unix() -> u64 {
+    SystemTime::now().duration_since(UNIX_EPOCH).map(|d| d.as_secs()).unwrap_or(0)
+}