360 commits

Author	SHA1	Message	Date
Jean	8f19a94928	operserv: NOTIFY honours a config exclude list so relay/pylinked clients cannot flood the feed	2026-07-18 16:47:25 +00:00
Jean	c415117ec5	operserv: add NOTIFY oper watch list emitting matched-user events to the staff feed	2026-07-18 16:16:06 +00:00
Jean	86b1aae686	engine: rate-limit anonymous service commands so a bot cannot spam a service in a loop	2026-07-18 05:02:40 +00:00
Jean	321e03ac48	link: set TCP_NODELAY on the uplink so an off-box services link never holds a reply tail	2026-07-18 04:39:57 +00:00
Jean	ce9c802d0a	nickserv: SNOTICE names the service once per reply then uses plain *** continuations, so a long HELP is not the service name on every line	2026-07-18 03:46:10 +00:00
Jean	6429b82fc4	nickserv: SET SNOTICE — opt-in server-notice-style service replies (*** NickServ: ...) sourced from the server instead of the pseudoclient	2026-07-18 03:40:22 +00:00
Jean	db3e818089	db: a gossiped re-home of an account is only a takeover when the credential also changed, so an authority re-provision or migration re-home no longer spuriously logs the user out	2026-07-18 03:04:50 +00:00
Jean	c64c3820a7	protocol: verify echos pseudoclients request servprotect (+k, by name from CAPAB USERMODES) so they cannot be killed by operators; warn if service_modes lacks it	2026-07-18 02:41:03 +00:00
Jean	2f70b0c133	protocol: verify echo ircd module dependencies from CAPAB MODULES at link, warning per-feature if one is missing rather than failing silently	2026-07-18 02:22:43 +00:00
Jean	0ca06247f8	protocol: read CASEMAPPING from CAPAB and verify it matches echos ascii identity folding, warning on mismatch instead of silently desyncing	2026-07-18 01:58:49 +00:00
Jean	e6f05a3ede	protocol: learn channel-mode arity + prefix modes (incl custom Y/ojoin) from CAPAB CHANMODES; services MODE uses the authoritative set	2026-07-18 01:15:23 +00:00
Jean	d313ca3523	chanserv: LEVELS grants a capability (op/topic/invite/access) to an access tier and above, additive so it never locks anyone out	2026-07-18 01:05:58 +00:00
Jean	0c3e09ea00	operserv: SPAMFILTER — persisted content filters pushed to the ircd m_filter via metadata, re-asserted at burst	2026-07-18 00:04:24 +00:00
Jean	8c77016aed	helpserv: HELP EXTBANS lists the network live extban set with a friendly example for each	2026-07-17 22:23:54 +00:00
Jean	7f5b37efd6	log the extban policy at startup (all offered, or the restricted set)	2026-07-17 22:07:54 +00:00
Jean	77d09c4bdc	akick: accept a matching extban only the ircd knows (ircd-enforced +b), reject acting extbans with a clear reason	2026-07-17 22:01:32 +00:00
Jean	c990eb1e1e	extban: learn the ircd live set from CAPAB EXTBANS and validate AKICK/MODE against what it actually offers	2026-07-17 21:47:02 +00:00
Jean	74a983467c	akick: match the server and fingerprint extbans from the SERVER name and ssl_cert metadata the s2s stream carries	2026-07-17 21:23:25 +00:00
Jean	f7c38cedad	chanserv: full AKICK extban registry, [extban] enabled gate, passive extbans pushed as channel bans for the ircd to enforce	2026-07-17 21:06:14 +00:00
Jean	9a197fca3d	db: one timestamp for a ban/account's logged event and in-memory record, so a peer replaying it converges (two now() calls could straddle a second)	2026-07-17 20:38:50 +00:00
Jean	47dfa76fd5	engine: a takeover keeps the account's founded channels (the account still exists) — only a genuine drop or expiry releases them	2026-07-17 20:23:51 +00:00
Jean	426fc694a2	akick: match extbans (account/realname/realmask/unauthed) using the ident, real host and real name the UID carries but was discarding	2026-07-17 19:47:34 +00:00
Jean	bc4fada354	api: type GroupServ flags (GroupFlag/GroupFlags via a shared flag_set! macro); delete the stringly apply_flags	2026-07-17 18:47:08 +00:00
Jean	65323caaeb	chanserv: FLAGS maps sop/halfop presets to flag letters (oa=+ao), fixing privilege escalation when editing a HOP/SOP entry	2026-07-17 18:14:58 +00:00
Jean	5dcd216eeb	api: ordered Rank enum (founder>admin>op>halfop>voice) replaces the coarse u8 access rank, so PEACE distinguishes every tier	2026-07-17 17:33:53 +00:00
Jean	f2ba876ce4	botserv: bots join +ao (protected admin + op), keeping op alongside protect	2026-07-17 17:11:25 +00:00
Jean	73467b91ca	botserv: bots join channels as protected admins (+a) so ordinary ops can't kick or deop them	2026-07-17 16:52:00 +00:00
Jean	e2330c56ff	chanserv: SOP protect (+ao) and founder owner (+qo) with standard ~ & @ prefix tiers	2026-07-17 16:10:36 +00:00
Jean	b5aef650f2	chanserv: all op-and-above tiers grant +o for a single @ prefix; tier distinction stays in the access list	2026-07-17 15:58:11 +00:00
Jean	2f6fd41465	chanserv: SOP protect tier over AOP (+ao), founder owner (+qo); resolve op access by capability not mode string	2026-07-17 15:43:16 +00:00
Jean	f5c976eb56	api/gameserv: type email ExpiryTarget and chess Ending as enums (drop stringly returns)	2026-07-17 14:15:39 +00:00
Jean	7a5f1502a4	infoserv: type the news kind as an enum at the store boundary	2026-07-17 13:53:53 +00:00
Jean	ef34c04c8d	operserv: type the X-line kind as an enum at the command/store boundary, wire token in storage	2026-07-17 13:47:10 +00:00
Jean	2c8ba4460d	forbid: type the FORBID kind as an enum at the store boundary, string only in storage	2026-07-17 13:26:16 +00:00
Jean	1fb3615b7e	auth: warn on unknown [[oper]] privilege names instead of silently dropping them	2026-07-17 12:45:41 +00:00
Jean	a7a37d1277	gameserv: server-authoritative ttt/c4/chess referee with ranked ladder	2026-07-17 11:24:13 +00:00
Jean	e3b83f4a92	operserv: REHASH announces the reload in the log channel via DebugServ	2026-07-17 11:02:29 +00:00
Jean	64b675e61f	operserv: REHASH reloads config live without a restart	2026-07-17 10:46:12 +00:00
Jean	e112b8737c	auth: deferred login is authoritative in the account map, not just ircd metadata	2026-07-17 03:30:47 +00:00
Jean	75c6537532	standard replies: emit IRCv3 FAIL/WARN/NOTE for service errors, config-gated	2026-07-17 02:53:48 +00:00
Jean	fcca7ac12b	chanserv: channel seen checks channel membership, not global presence	2026-07-17 01:54:55 +00:00
Jean	66eb644a07	chanserv: channel-scoped seen with last message, replied in-channel	2026-07-17 01:41:47 +00:00
Jean	f2774f13fe	services: all pseudo-clients join a configurable channel (default #services)	2026-07-17 01:23:18 +00:00
Jean	657154e268	services: assigned bot fronts channel modes, not chanserv	2026-07-17 01:17:29 +00:00
Jean	96654b5e5a	groupserv: gate channel access on the c flag, document !group	2026-07-17 01:00:27 +00:00
Jean	b87a0c56a2	services: label as network service in whois	2026-07-17 00:30:51 +00:00
Jean	952078aa7e	services: configurable pseudo-client umodes	2026-07-17 00:01:24 +00:00
Jean	eaf3111917	whois: answer IDLE for pseudo-clients	2026-07-16 23:22:35 +00:00
Jean	a60a6df19d	debugserv: sourced auth feed, drop icons	2026-07-16 23:08:30 +00:00
Jean	9bdda721f3	keycard: redeem website login keycards over SASL	2026-07-16 22:27:59 +00:00