serverless-ircd 0.7.0 → 0.8.0

package/packages/irc-core/src/commands/tagmsg.ts

@@ -202,13 +202,26 @@ export const tagmsgChannelReducer: Reducer<ChannelState> = (state, msg, ctx) =>
   // this channel. Persist the marker (advances the connection's in-memory
   // marker too); a valueless tag carries no msgid and is dropped here. The
   // TAGMSG still fans out below so the user's other connections learn it.
-  if (isReadMarkerTagmsg(msg.tags)) {
+  const isReadMarker = isReadMarkerTagmsg(msg.tags);
+  if (isReadMarker) {
     const msgid = readMarkerMsgid(msg.tags);
     if (msgid !== undefined) {
       persistReadMarker(ctx, state.nameLower, msgid);
     }
   }
 
+  // IRCv3 draft/read-marker spec compliance: a read marker is private to
+  // the originator's account and MUST NOT be disclosed to other users. The
+  // mark TAGMSG fans out ONLY to the originator's own account (account-
+  // scoped broadcast); dispatch restricts the recipient set to same-account
+  // channel members. An unidentified originator has no account to share the
+  // mark with, so the mark stays session-local — no fanout at all (the
+  // originator's own client still observes its mark via echo-message below).
+  // Every other TAGMSG (typing, generic) keeps the channel-wide fanout.
+  const originAccount = ctx.connection.account;
+  const suppressFanout = isReadMarker && originAccount === undefined;
+  const accountFilter = isReadMarker ? originAccount : undefined;
+
   // Broadcast the tag-bearing line to message-tags-enabled members only.
   // When the TAGMSG carries `+draft/typing` or `+draft/read-marker`, the
   // audience widens to also include members that announced the matching
@@ -217,11 +230,33 @@ export const tagmsgChannelReducer: Reducer<ChannelState> = (state, msg, ctx) =>
   // `caps` so dispatch applies OR semantics per recipient.
   const tagPrefix = serializeTags(msg.tags);
   const line: RawLine = { text: `${tagPrefix}:${hostmask} TAGMSG ${state.name}` };
-  const widenCaps = widenAudienceCaps(msg.tags);
-  if (widenCaps !== undefined) {
-    effects.push(Effect.broadcast(state.name, [line], ctx.connId, undefined, undefined, widenCaps));
-  } else {
-    effects.push(Effect.broadcast(state.name, [line], ctx.connId, MESSAGE_TAGS_CAP));
+  if (!suppressFanout) {
+    const widenCaps = widenAudienceCaps(msg.tags);
+    if (widenCaps !== undefined) {
+      effects.push(
+        Effect.broadcast(
+          state.name,
+          [line],
+          ctx.connId,
+          undefined,
+          undefined,
+          widenCaps,
+          accountFilter,
+        ),
+      );
+    } else {
+      effects.push(
+        Effect.broadcast(
+          state.name,
+          [line],
+          ctx.connId,
+          MESSAGE_TAGS_CAP,
+          undefined,
+          undefined,
+          accountFilter,
+        ),
+      );
+    }
   }
 
   // IRCv3 echo-message: echo the same line back to the sender, after

package/packages/irc-core/src/commands/topic.ts

@@ -20,6 +20,7 @@
 
 import { Effect } from '../effects.js';
 import type { Effect as EffectType, RawLine } from '../effects.js';
+import type { PersistedTopic } from '../ports.js';
 import { Numerics } from '../protocol/numerics.js';
 import type { ChannelState, ChannelTopic } from '../state/channel.js';
 import { hostmaskOf } from '../state/connection.js';
@@ -121,6 +122,10 @@ export const topicReducer: Reducer<ChannelState> = (state, msg, ctx) => {
     // path that persists the change, so subsequent reads by other
     // connections observe the cleared topic.
     effects.push(Effect.applyChannelDelta(state.name, { topic: null }));
+    // ChanServ KEEPTOPIC: clear the persisted snapshot when the channel has
+    // KEEPTOPIC enabled, so a subsequent empty-recreate does not restore a
+    // stale topic.
+    persistKeepTopic(ctx, state.nameLower, undefined);
   } else {
     const topic: ChannelTopic = {
       text: truncated,
@@ -130,6 +135,9 @@ export const topicReducer: Reducer<ChannelState> = (state, msg, ctx) => {
     state.topic = topic;
     // Mirror the topic set to the channel authority (see comment above).
     effects.push(Effect.applyChannelDelta(state.name, { topic }));
+    // ChanServ KEEPTOPIC: persist the snapshot when the channel has
+    // KEEPTOPIC enabled, so a subsequent empty-recreate restores it.
+    persistKeepTopic(ctx, state.nameLower, topic);
   }
 
   const hostmask = callerHostmask(ctx.connection);
@@ -167,3 +175,32 @@ function readTopic(
   );
   return { state, effects };
 }
+
+// ============================================================================
+// ChanServ KEEPTOPIC persistence
+// ============================================================================
+
+/**
+ * Persists the topic snapshot for a ChanServ-registered channel with
+ * KEEPTOPIC enabled. Called by the topic reducer on every topic change
+ * (set or clear) so a subsequent empty-recreate can restore the snapshot.
+ *
+ * No-op when:
+ *   - no services store is bound,
+ *   - the channel is not registered,
+ *   - KEEPTOPIC is off.
+ *
+ * `topic === undefined` clears the persisted snapshot; a {@link ChannelTopic}
+ * replaces it.
+ */
+function persistKeepTopic(ctx: Ctx, nameLower: string, topic: ChannelTopic | undefined): void {
+  const services = ctx.services;
+  if (services === undefined) return;
+  const rec = services.getChannel(nameLower);
+  if (rec === undefined || !rec.keepTopic) return;
+  const persisted: PersistedTopic | undefined =
+    topic === undefined
+      ? undefined
+      : { text: topic.text, setter: topic.setter, setAt: topic.setAt };
+  services.setChannelTopic(nameLower, persisted);
+}

package/packages/irc-core/src/config.ts

@@ -17,7 +17,7 @@
  */
 
 import { z } from 'zod';
-import { BUILD_DATE } from './build-info.js';
+import { BUILD_DATE, PACKAGE_VERSION } from './build-info.js';
 import { DEFAULT_MULTILINE_MAX_BYTES } from './caps/capabilities.js';
 
 /**
@@ -144,11 +144,14 @@ export const DEFAULT_FLOOD_CONTROL_CONFIG: {
 
 /**
  * Default server version surfaced in `002`/`004`/`351`/`371` when a deployment
- * does not supply one. Kept in sync with `irc-core/package.json` `version`;
- * adapters inject the deploy-time version via the `serverVersion` config
- * knob (see the per-adapter config loaders).
+ * does not supply one. Sourced from `irc-core/package.json` at build time via
+ * `scripts/generate-build-info.mjs`, so a deployment that omits the
+ * `serverVersion` knob advertises the version of the package it was shipped
+ * with — no manual sync required. Adapters may still inject a deploy-time
+ * version via the `serverVersion` config knob (see the per-adapter config
+ * loaders).
  */
-export const DEFAULT_SERVER_VERSION = '0.3.0';
+export const DEFAULT_SERVER_VERSION: string = PACKAGE_VERSION;
 
 /**
  * Default "created" text for `003 RPL_CREATED` when a deployment does not
@@ -162,6 +165,14 @@ export const DEFAULT_SERVER_VERSION = '0.3.0';
  */
 export const DEFAULT_CREATED_TEXT: string = BUILD_DATE;
 
+/**
+ * Default grace period (ms) NickServ applies before force-disconnecting a
+ * client using a `ghost`-enforced registered nick without identifying.
+ * Matches the Atheme/Anope convention (~30s); overridable per deployment
+ * via `ServerConfig.nickEnforceGraceMs`.
+ */
+export const DEFAULT_NICK_ENFORCE_GRACE_MS = 30_000;
+
 /**
  * The full server-config schema. Optional fields default to deployment-
  * sensible values so a minimal `{ serverName, networkName }` config is
@@ -337,6 +348,26 @@ export const ServerConfigSchema = z.object({
    * nicks make them meaningless.
    */
   servicesEnabled: z.boolean().optional(),
+
+  /**
+   * Grace period (ms) NickServ applies before force-disconnecting a client
+   * using a `ghost`-enforced registered nick without identifying. See
+   * `ServerConfig.nickEnforceGraceMs`. `0` disables the grace (ghost
+   * behaves like kill). Omit for the 30s default.
+   */
+  nickEnforceGraceMs: z.number().int().nonnegative().optional(),
+
+  /**
+   * HostServ approval mode for `REQUEST <vhost>`. `true` (the default)
+   * preserves the legacy auto-approve behaviour — the requested vhost is
+   * recorded against the account immediately (no oper review). `false`
+   * switches HostServ into oper-queue mode: `REQUEST` records a pending
+   * request that an oper must `APPROVE` (or `REJECT`) via HostServ. The
+   * queue + the `APPROVE` / `REJECT` / `LIST` (oper-only) commands are
+   * available in either mode, but only `false` routes `REQUEST` through
+   * them.
+   */
+  hostservAutoApproveVhosts: z.boolean().default(false),
 });
 
 /** Input type: what adapters supply (fields with defaults may be omitted). */

package/packages/irc-core/src/effects.ts

@@ -55,6 +55,17 @@ export interface BroadcastEffect {
    * path.
    */
   caps?: readonly string[];
+  /**
+   * Account-scoped recipient filter (IRCv3 `draft/read-marker` privacy).
+   * When set, dispatch restricts the recipient set to channel members
+   * authenticated as this account — a read marker is private to the
+   * originator's own account and MUST NOT be disclosed to other users.
+   * Comparison is case-insensitive (RFC 1459 fold). Recipients still must
+   * satisfy the {@link cap} / {@link caps} filter; the {@link except}
+   * originator skip still applies. Used only by the read-marker mark
+   * TAGMSG path; every other broadcast leaves this unset (channel-wide).
+   */
+  account?: string;
 }
 
 export interface DisconnectEffect {
@@ -121,6 +132,39 @@ export interface BroadcastWallopsEffect {
   except?: ConnId;
 }
 
+/**
+ * NickServ nick-enforcement directive.
+ *
+ * Emitted by the NICK path when a client takes a registered nick they are
+ * not identified as, and the registered account's
+ * {@link NickEnforcePolicy} is `ghost` or `kill`. The actor layer (via
+ * `dispatch`) interprets the policy:
+ *
+ *   - `none`  — never emitted (the reducer sends the warning NOTICE only).
+ *   - `kill`  — `disconnect("Nick enforced by NickServ")` immediately.
+ *   - `ghost` — schedule the same disconnect after {@link EnforceNickEffect.graceMs};
+ *     when `graceMs === 0` the disconnect is immediate (matches `kill`).
+ *
+ * The grace duration is stamped by the reducer from the deployment's
+ * `nickEnforceGraceMs` config so `dispatch` stays free of clock access and
+ * the in-memory tests stay deterministic (the scheduler is injectable via
+ * {@link DispatchOptions.scheduler}).
+ */
+export interface EnforceNickEffect {
+  tag: 'EnforceNick';
+  /** Connection using the enforced nick. */
+  conn: ConnId;
+  /** Display spelling of the enforced nick. */
+  nick: Nick;
+  /** Per-account enforcement policy. */
+  policy: import('./ports.js').NickEnforcePolicy;
+  /**
+   * Grace period in ms before the disconnect fires (`ghost` only).
+   * `0` for `kill` and for `ghost` when the deployment disables the grace.
+   */
+  graceMs: number;
+}
+
 /** Discriminated union of every effect the dispatch interpreter knows. */
 export type Effect =
   | SendEffect
@@ -131,7 +175,8 @@ export type Effect =
   | ReleaseNickEffect
   | ApplyChannelDeltaEffect
   | SendToNickEffect
-  | BroadcastWallopsEffect;
+  | BroadcastWallopsEffect
+  | EnforceNickEffect;
 
 /** Literal string tag of every {@link Effect} variant. */
 export type EffectTag = Effect['tag'];
@@ -163,12 +208,14 @@ export const Effect = {
     cap?: string,
     capLines?: RawLine[],
     caps?: readonly string[],
+    account?: string,
   ): Effect {
     const e: BroadcastEffect = { tag: 'Broadcast', chan, lines };
     if (except !== undefined) e.except = except;
     if (cap !== undefined) e.cap = cap;
     if (capLines !== undefined) e.capLines = capLines;
     if (caps !== undefined) e.caps = caps;
+    if (account !== undefined) e.account = account;
     return e;
   },
   disconnect(conn: ConnId, reason?: string): Effect {
@@ -198,4 +245,12 @@ export const Effect = {
     if (except !== undefined) e.except = except;
     return e;
   },
+  enforceNick(
+    conn: ConnId,
+    nick: Nick,
+    policy: import('./ports.js').NickEnforcePolicy,
+    graceMs: number,
+  ): Effect {
+    return { tag: 'EnforceNick', conn, nick, policy, graceMs };
+  },
 } as const;