179 commits

Author	SHA1	Message	Date
Jean	fc214ab0d3	Add three-tier services operator model (operator, administrator, root)	2026-07-19 02:19:51 +00:00
Jean	0d16240606	nickserv/chanserv: announce a blocked look-alike registration to the staff feed (ServiceCtx alert drained by dispatch)	2026-07-19 00:24:27 +00:00
Jean	89ac01d0b0	nickserv/chanserv: catch styled/fullwidth look-alike names too, and add a [register] confusable_check toggle (REHASH-reloadable)	2026-07-19 00:15:08 +00:00
Jean	c2b70f5004	nickserv/chanserv: reject look-alike / mixed-script registration names (homoglyph impersonation guard)	2026-07-19 00:02:44 +00:00
Jean	623750e638	dictserv: opt-in DICT (RFC 2229) lookup service — bots and /msg answer dict/define/thes/acronym/law/etc via dict.org off-reactor	2026-07-18 20:21:30 +00:00
Jean	e05c62c085	operserv: NOTIFY gains k/m/u/o flags and quit/part reasons; protocol carries kicker, mode-setter, oper-up, user modes	2026-07-18 19:18:17 +00:00
Jean	bbdb34aa77	operserv: NOTIFY allows broad masks (it only observes) so a #* watch can match all joins	2026-07-18 17:14:13 +00:00
Jean	1d30c9cfe3	operserv: note the log channel and notify exclude list are REHASH-reloadable in HELP	2026-07-18 17:02:01 +00:00
Jean	c415117ec5	operserv: add NOTIFY oper watch list emitting matched-user events to the staff feed	2026-07-18 16:16:06 +00:00
Jean	6429b82fc4	nickserv: SET SNOTICE — opt-in server-notice-style service replies (*** NickServ: ...) sourced from the server instead of the pseudoclient	2026-07-18 03:40:22 +00:00
Jean	3230cdd9db	protocol: handle SQUERY like PRIVMSG so the NS/CS/OS/... service aliases work (proto 1206 delivers SQUERY raw instead of folding it to PRIVMSG)	2026-07-18 03:24:58 +00:00
Jean	c64c3820a7	protocol: verify echos pseudoclients request servprotect (+k, by name from CAPAB USERMODES) so they cannot be killed by operators; warn if service_modes lacks it	2026-07-18 02:41:03 +00:00
Jean	2f70b0c133	protocol: verify echo ircd module dependencies from CAPAB MODULES at link, warning per-feature if one is missing rather than failing silently	2026-07-18 02:22:43 +00:00
Jean	0ca06247f8	protocol: read CASEMAPPING from CAPAB and verify it matches echos ascii identity folding, warning on mismatch instead of silently desyncing	2026-07-18 01:58:49 +00:00
Jean	e206f4edbb	operserv: REDACT deletes a message by its msgid (draft/message-redaction), relayed server-sourced so no ircd oper privilege is needed	2026-07-18 01:23:37 +00:00
Jean	e6f05a3ede	protocol: learn channel-mode arity + prefix modes (incl custom Y/ojoin) from CAPAB CHANMODES; services MODE uses the authoritative set	2026-07-18 01:15:23 +00:00
Jean	d313ca3523	chanserv: LEVELS grants a capability (op/topic/invite/access) to an access tier and above, additive so it never locks anyone out	2026-07-18 01:05:58 +00:00
Jean	0c3e09ea00	operserv: SPAMFILTER — persisted content filters pushed to the ircd m_filter via metadata, re-asserted at burst	2026-07-18 00:04:24 +00:00
Jean	9908548978	chanserv: reuse echo_api chanmode_takes_param in the MODE extban gate instead of a less-complete local copy	2026-07-17 22:52:31 +00:00
Jean	8c77016aed	helpserv: HELP EXTBANS lists the network live extban set with a friendly example for each	2026-07-17 22:23:54 +00:00
Jean	77d09c4bdc	akick: accept a matching extban only the ircd knows (ircd-enforced +b), reject acting extbans with a clear reason	2026-07-17 22:01:32 +00:00
Jean	c990eb1e1e	extban: learn the ircd live set from CAPAB EXTBANS and validate AKICK/MODE against what it actually offers	2026-07-17 21:47:02 +00:00
Jean	da94142bad	chanserv: hold MODE ban/except/invex extbans to the [extban] enabled policy, matching AKICK	2026-07-17 21:33:00 +00:00
Jean	74a983467c	akick: match the server and fingerprint extbans from the SERVER name and ssl_cert metadata the s2s stream carries	2026-07-17 21:23:25 +00:00
Jean	f7c38cedad	chanserv: full AKICK extban registry, [extban] enabled gate, passive extbans pushed as channel bans for the ircd to enforce	2026-07-17 21:06:14 +00:00
Jean	426fc694a2	akick: match extbans (account/realname/realmask/unauthed) using the ident, real host and real name the UID carries but was discarding	2026-07-17 19:47:34 +00:00
Jean	bc4fada354	api: type GroupServ flags (GroupFlag/GroupFlags via a shared flag_set! macro); delete the stringly apply_flags	2026-07-17 18:47:08 +00:00
Jean	2a12ebd6e3	api: typed Flag/Flags bitset for channel access (mirrors Privs); level_caps resolves every level through it, collapsing 40 lines to 5	2026-07-17 18:30:45 +00:00
Jean	65323caaeb	chanserv: FLAGS maps sop/halfop presets to flag letters (oa=+ao), fixing privilege escalation when editing a HOP/SOP entry	2026-07-17 18:14:58 +00:00
Jean	f2ba876ce4	botserv: bots join +ao (protected admin + op), keeping op alongside protect	2026-07-17 17:11:25 +00:00
Jean	73467b91ca	botserv: bots join channels as protected admins (+a) so ordinary ops can't kick or deop them	2026-07-17 16:52:00 +00:00
Jean	2f6fd41465	chanserv: SOP protect tier over AOP (+ao), founder owner (+qo); resolve op access by capability not mode string	2026-07-17 15:43:16 +00:00
Jean	c8106035df	chanserv: give SOP/AOP/HOP/VOP four distinct access tiers matching Anope, classified by capability	2026-07-17 14:54:36 +00:00
Jean	f5c976eb56	api/gameserv: type email ExpiryTarget and chess Ending as enums (drop stringly returns)	2026-07-17 14:15:39 +00:00
Jean	2cdc7f820a	chanserv/nickserv: resolve access level via caps, so FLAGS-set roles list correctly in ALIST and AOP/SOP/VOP	2026-07-17 14:15:39 +00:00
Jean	7a5f1502a4	infoserv: type the news kind as an enum at the store boundary	2026-07-17 13:53:53 +00:00
Jean	ee95225eaf	operserv: OPER ADD rejects unknown privilege names instead of silently dropping them	2026-07-17 13:53:53 +00:00
Jean	ef34c04c8d	operserv: type the X-line kind as an enum at the command/store boundary, wire token in storage	2026-07-17 13:47:10 +00:00
Jean	2c8ba4460d	forbid: type the FORBID kind as an enum at the store boundary, string only in storage	2026-07-17 13:26:16 +00:00
Jean	cfe05481d6	gameserv: model the domain with enums (GameType/Side/Status/Outcome/Board), zero-alloc grid moves	2026-07-17 12:20:26 +00:00
Jean	108c15e95a	gameserv: ranked ladder rides StatServ's persisted counters, no separate store	2026-07-17 12:07:35 +00:00
Jean	b763eab9ed	gameserv: use the GamesServ nick, GameServ is reserved on the network	2026-07-17 11:51:35 +00:00
Jean	a7a37d1277	gameserv: server-authoritative ttt/c4/chess referee with ranked ladder	2026-07-17 11:24:13 +00:00
Jean	64b675e61f	operserv: REHASH reloads config live without a restart	2026-07-17 10:46:12 +00:00
Jean	75c6537532	standard replies: emit IRCv3 FAIL/WARN/NOTE for service errors, config-gated	2026-07-17 02:53:48 +00:00
Jean	fcca7ac12b	chanserv: channel seen checks channel membership, not global presence	2026-07-17 01:54:55 +00:00
Jean	66eb644a07	chanserv: channel-scoped seen with last message, replied in-channel	2026-07-17 01:41:47 +00:00
Jean	96654b5e5a	groupserv: gate channel access on the c flag, document !group	2026-07-17 01:00:27 +00:00
Jean	b87a0c56a2	services: label as network service in whois	2026-07-17 00:30:51 +00:00
Jean	952078aa7e	services: configurable pseudo-client umodes	2026-07-17 00:01:24 +00:00