Skip to content

Conversation

@MrLenin
Copy link
Contributor

@MrLenin MrLenin commented Jan 1, 2026

Note: This PR depends on #82 (security-hardening) being merged first.

Summary

Comprehensive IRCv3.2+ capability implementations including ratified specs and draft extensions. This is a major feature branch with 86 commits across 88 files (~26,700 lines added).

IRCv3 Capabilities Implemented

Ratified Specifications

Capability Description
cap-302 CAP LS 302, CAP NEW/DEL, SASL re-authentication
server-time Message timestamps via time tag
echo-message Echo sent messages back to client
account-tag Account info in message tags
chghost Host change notifications to channel members
invite-notify Invite notifications to channel members
labeled-response Request/response correlation via label tag
batch Message batching for netjoin/netsplit, chathistory
message-tags Client-only tags, TAGMSG command, msgid generation
standard-replies FAIL/WARN/NOTE response format
setname Real name changes (SETNAME command, P10 SE token)

Draft Extensions

Capability Description
draft/chathistory LMDB-backed message history with BEFORE/AFTER/AROUND/LATEST/BETWEEN
draft/message-redaction Message deletion with chathistory integration
draft/account-registration Pre-connection account registration via REGISTER command
draft/multiline Multi-line message support with configurable batch timeout
draft/read-marker Read position tracking (MARKREAD command)
draft/channel-rename Channel rename support
draft/event-playback Event replay for chathistory (JOIN/PART/QUIT/etc)
draft/metadata-2 User/channel metadata with LMDB persistence and visibility controls
draft/pre-away AWAY command before registration completes
draft/extended-isupport Extended ISUPPORT tokens
draft/no-implicit-names Suppress automatic NAMES reply on JOIN
draft/webpush Web push notifications for mobile/web clients

P10 Protocol Extensions

Token Description
SE SETNAME - propagate real name changes
BT BATCH - batch markers for netjoin/netsplit
ML MULTILINE - multi-line message propagation
MDQ METADATAQUERY - on-demand metadata sync between servers

Storage & Performance

LMDB Persistence

  • Chathistory: Persistent message storage with configurable retention
  • Metadata: Key-value storage for user/channel metadata
  • Zstd Compression: Transparent compression for stored data
  • TTL-based Expiry: Automatic cleanup of expired entries
  • ISO 8601 timestamps for clients, Unix internally

S2S Federation

  • Cross-server chathistory queries with numeric-based routing
  • Metadata synchronization via MDQ protocol
  • Multi-hop routing support for disconnected servers

X3 Integration

  • MARKREAD routing through X3 for authoritative storage
  • Metadata cache-through for X3-managed data
  • Account metadata loading on login
  • (Pre-)Away presence aggregation

Additional Features

CMocka Unit Testing Framework

  • make test target for automated testing
  • Test suites for: ircd_string, ircd_match, ircd_chattr, numnicks, ircd_in_addr, ircd_compress, ircd_cloaking, dbuf, ircd_crypt, crule, history

WebSocket Support

  • Native WebSocket transport (draft spec)
  • Binary and text frame support

Private Message History

  • Per-user opt-in consent system (FEAT_CHATHISTORY_PM_REQUIRE_CONSENT)
  • Normalized PM target handling for consistent storage

Operational Features

  • /STATS chathistory - Storage statistics
  • /STATS metadata - Metadata queue statistics
  • FEAT_AWAY_THROTTLE - Rate limiting for AWAY changes
  • FEAT_REGISTER_SERVER - Configurable registration target

Configuration

New features in ircd.conf:

FEAT_CHATHISTORY = TRUE
FEAT_CHATHISTORY_MAXLIMIT = 1000
FEAT_CHATHISTORY_PM = TRUE
FEAT_CHATHISTORY_PM_REQUIRE_CONSENT = TRUE
FEAT_METADATA = TRUE
FEAT_METADATA_MAXSUBS = 100
FEAT_AWAY_THROTTLE = 60

Build Requirements

  • LMDB library (liblmdb-dev)
  • Zstd library (libzstd-dev)
  • CMocka for tests (libcmocka-dev)

Test Plan

  • CAP 302 negotiation and capability advertisement
  • Message tag propagation (client-only and S2S)
  • Chathistory storage, retrieval, and federation
  • Metadata storage, sync, and visibility
  • Multiline batching with timeout
  • Standard-replies backwards compatibility
  • CMocka unit tests pass (legacy + new)
  • LMDB persistence across restarts
  • Full integration testing on live network
  • WebSocket client connectivity

Breaking Changes

None - all features are additive and backward compatible.

🤖 Generated with Claude Code

MrLenin and others added 30 commits January 1, 2026 03:32
Phase 1 - CAP 302 Foundation:
- Add cli_capab_version to track CAP negotiation version (0, 301, 302)
- Parse version parameter in CAP LS (e.g., "CAP LS 302")
- Support capability values for CAP 302+ clients
- Add multi-line CAP LS with '*' continuation for long capability lists

Phase 2 - SASL 3.2 Enhancements:
- Add cap-notify capability (CAP_CAPNOTIFY) with FEAT_CAP_cap_notify
- Advertise SASL mechanisms: sasl=PLAIN,EXTERNAL,OAUTHBEARER
- Allow post-registration AUTHENTICATE for OAuth token refresh:
  - Remove IsSASLComplete blocker, add ClearSASLComplete macro
  - Reset SASL state (agent, cookie, timer) for new auth attempt
- Send AC (ACCOUNT) after successful reauth for registered users:
  - Notify channel members with account-notify capability
  - Propagate to other servers using correct format based on
    FEAT_EXTENDED_ACCOUNTS setting (R/M subtype vs plain format)

This enables OAUTHBEARER token refresh without new P10 protocol commands -
reuses existing SASL 'S' (Start) subcmd for backwards compatibility.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Implement the server-time capability (IRCv3.2) that adds @time= tags
to messages for clients that request it. Timestamps are ISO 8601 format
with millisecond precision.

Changes:
- Add CAP_SERVERTIME capability to capab.h
- Add FEAT_CAP_server_time feature flag (default: TRUE)
- Add format_server_time() helper for ISO 8601 timestamps
- Update sendcmdto_channel_* functions to build dual message buffers
  (with and without @time tag) based on client capability
- Update sendcmdto_common_channels_* functions similarly

Functions updated:
- sendcmdto_channel_butserv_butone() - Channel messages
- sendcmdto_channel_capab_butserv_butone() - Capability-filtered channel
- sendcmdto_common_channels_butone() - Common channel notifications
- sendcmdto_common_channels_capab_butone() - Filtered common channels
- sendcmdto_channel_butone() - PRIVMSG/NOTICE to channels

Example output for server-time clients:
@time=2025-12-23T12:30:00.123Z :nick!user@host PRIVMSG #chan :message

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Implements the IRCv3 echo-message capability which echoes PRIVMSG and
NOTICE messages back to the sender. This is useful for clients to
confirm message delivery and maintain consistent message display.

Changes:
- Add CAP_ECHOMSG to capab.h
- Add FEAT_CAP_echo_message feature flag (default TRUE)
- Register echo-message in capability list in m_cap.c
- Modify relay functions in ircd_relay.c to echo back:
  - relay_channel_message() - channel PRIVMSG
  - relay_channel_notice() - channel NOTICE
  - relay_private_message() - private PRIVMSG
  - relay_private_notice() - private NOTICE

Private message echoes include sptr != acptr check to avoid
duplicate when messaging self.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Implements the IRCv3 account-tag capability which includes the sender's
account name in message tags (@account=accountname or @account=* for
not logged in).

Changes:
- Add CAP_ACCOUNTTAG to capab.h
- Add FEAT_CAP_account_tag feature flag (default TRUE)
- Register account-tag in capability list in m_cap.c
- Refactor send.c message tag handling:
  - Add format_message_tags() to build combined @time;@account tags
  - Add wants_message_tags() helper for capability checks
  - Rename mb_st to mb_tags for clarity
  - Update 5 send functions to use combined tag handling

The implementation combines server-time and account-tag into a single
tag string, sending both to clients that request either capability
(per IRCv3 spec, clients ignore unknown tags).

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Implements the IRCv3 chghost capability which notifies clients
when a user's hostname or username changes, instead of showing
QUIT/JOIN messages.

Changes:
- Add CAP_CHGHOST capability and FEAT_CAP_chghost feature flag
- Add CMD_CHGHOST to msg.h
- Add SKIP_CHGHOST flag for send functions to skip chghost clients
- Modify hide_hostmask() and unhide_hostmask() in s_user.c to:
  * Send CHGHOST to clients with the capability
  * Skip chghost clients when doing QUIT+JOIN workaround
- Update send.c to handle SKIP_CHGHOST flag

Format: :nick!olduser@old.host CHGHOST newuser new.host

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Implements the invite-notify capability that notifies channel members
when someone is invited to the channel.

Changes:
- Add CAP_INVITENOTIFY to capab.h
- Add FEAT_CAP_invite_notify feature flag (default: TRUE)
- Register capability in m_cap.c
- Send INVITE notification to channel members with capability
  in both m_invite() (local) and ms_invite() (server) handlers

Format: :inviter!user@host INVITE invitee #channel

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Implement IRCv3.2 labeled-response capability that allows clients to
correlate commands with server responses using @Label tags.

Changes:
- Add CAP_LABELEDRESP capability and FEAT_CAP_labeled_response feature
- Store label per-connection in con_label[64] field
- Parse @Label=value from client message tags in parse_client()
- Add format_message_tags_for() for recipient-specific tag generation
- Add sendcmdto_one_tags() for sending messages with tags
- Modify send_reply() to include @Label and @time tags
- Update echo-message calls to use sendcmdto_one_tags()

The label is cleared at the start of each command and included in all
responses to that command. Labels are client-side only (no P10 changes).

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Implement IRCv3.2 batch capability for grouping related server responses.
This is required for proper labeled-response support on multi-response
commands.

Changes:
- Add CAP_BATCH capability and FEAT_CAP_batch feature flag
- Add batch state fields to connection (con_batch_id, con_batch_seq)
- Add MSG_BATCH command definition
- Implement send_batch_start() to start a batch with label tag
- Implement send_batch_end() to end an active batch
- Implement has_active_batch() helper function
- Update format_message_tags_for() to use @Batch tag when active
- Update send_reply() to use @Batch instead of @Label when batched

The batch BATCH +id type message includes @Label tag for labeled-response
integration. Messages within a batch use @Batch=id instead of @Label.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Implement setname capability allowing users to change their realname
(GECOS field) mid-session per IRCv3 specification.

Changes:
- Add CAP_SETNAME capability and FEAT_CAP_setname feature flag
- New P10 token: SE (SN was taken by SVSNICK)
- New m_setname.c with m_setname() and ms_setname() handlers
- P10 format: [USER_NUMERIC] SE :[NEW_REALNAME]
- Notify channel members with setname capability
- Propagate changes S2S

IRCv3 spec: https://ircv3.net/specs/extensions/setname

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Phase 14: Add @bot message tag for users with +B mode
Phase 15: Implement standard-replies capability (FAIL/WARN/NOTE)
Phase 16: Add msgid tag with unique ID generation
Phase 17: Implement TAGMSG command (P10 token: TM)
Phase 13a: Add S2S tag parser foundation (backward compatible)

Features:
- @bot tag added to messages from bot-mode users
- send_fail/warn/note() functions for structured error responses
- Message IDs: <server_numeric>-<startup_ts>-<counter> format
- TAGMSG command for tag-only messages (typing indicators)
- S2S parser silently skips @tags prefix for compatibility

New files:
- ircd/m_tagmsg.c: TAGMSG command handlers

New capabilities:
- standard-replies (CAP_STANDARDREPLIES)

New feature flags:
- FEAT_CAP_standard_replies (default: TRUE)
- FEAT_MSGID (default: TRUE)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Add full support for client-only tags (+typing, +reply, etc.) in TAGMSG:

Infrastructure:
- Add con_client_tags[512] field to Connection struct for temp storage
- Extract client-only tags (prefixed with +) in parse_client()
- Add format_message_tags_with_client() for formatting tags to clients
- Add sendcmdto_one_client_tags() for user-targeted TAGMSG
- Add sendcmdto_channel_client_tags() for channel TAGMSG relay

TAGMSG changes:
- m_tagmsg: Extract client tags from cli_client_tags(sptr)
- m_tagmsg: Use new send functions for local delivery with tags
- m_tagmsg: Propagate tags S2S via P10 format: TM @+tag=val #channel
- ms_tagmsg: Parse incoming S2S tags from @+tag=val first parameter
- ms_tagmsg: Relay to local clients and propagate to other servers

P10 Format:
  NUMERIC TM @+typing=active #channel
  NUMERIC TM @+typing=active;+reply=msgid ABAAB

This enables typing indicators and other client-only tags to work
across server boundaries.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
…OTICE

Add server-to-server message tag support (FEAT_P10_MESSAGE_TAGS):

Parser changes (parse.c):
- Modified parse_server() to extract @time and @msgid tags from incoming
  S2S messages and store them in cli_s2s_time() and cli_s2s_msgid()
- Tags are preserved during message relay for consistency across network

Client storage (client.h):
- Added con_s2s_time[32] and con_s2s_msgid[64] fields to Connection struct
- Added accessor macros cli_s2s_time() and cli_s2s_msgid()

Send functions (send.c):
- Added format_s2s_tags() function to generate/preserve @time;@msgid tags
- Modified sendcmdto_channel_butone() to include S2S tags in server buffers
- Modified sendcmdto_one() to add S2S tags for PRIVMSG/NOTICE to servers

Build fixes:
- Fixed circular dependency between capab.h and client.h by making capab.h
  self-contained with its own FLAGSET macros and forward declaration
- Renamed MSG_BATCH to MSG_BATCH_CMD to avoid conflict with system socket.h
- Fixed m_tagmsg.c function calls to use MSG_TAGMSG instead of CMD_TAGMSG
  for functions that don't take a token parameter

Feature flag:
- FEAT_P10_MESSAGE_TAGS (default: FALSE) controls S2S tag propagation
- When enabled, all PRIVMSG/NOTICE messages between servers include tags
- Tags are preserved from incoming messages or generated fresh if absent

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
…netsplit

Add server-to-server BATCH coordination for netjoin and netsplit events:

- Add ms_batch() handler for BT P10 command (m_batch.c)
- Register BATCH command for servers in parse.c
- Add S2S batch tracking fields to client.h:
  - con_s2s_batch_id: active batch ID from server
  - con_s2s_batch_type: batch type (netjoin, netsplit)
- Add send_s2s_batch_start() and send_s2s_batch_end() to send.c
- Propagate batch markers to local clients with batch capability
- Fix FLAGSET_NBITS redefinition warnings in client.h

P10 format:
  [SERVER] BT +batchid type [server1 server2]  # Start batch
  [SERVER] BT -batchid                          # End batch

Batch types: netjoin, netsplit

Future work: Hook into END_OF_BURST and SQUIT handlers to automatically
trigger batches during net events.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Automatically send IRCv3 batch markers to local clients when:
- Netjoin: Server reconnects (junction detected in m_server.c)
  - Batch start on SetBurst/SetJunction
  - Batch end on END_OF_BURST
- Netsplit: Server disconnects (exit_client in s_misc.c)
  - Batch start/end wraps exit_downlinks

New functions:
- send_netjoin_batch_start/end: Track batch on server struct
- send_netsplit_batch_start/end: Use caller-provided batch ID

Batch ID stored on struct Server for netjoin (persists across burst).
Netsplit uses local variable since it's immediate.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Per IRCv3 spec, all messages inside a batch MUST include the @Batch=id
tag. This commit adds:

- Global active_network_batch_id tracking for network events
- set_active_network_batch() and get_active_network_batch() functions
- format_message_tags_with_network_batch() for @Batch tag formatting
- Modified sendcmdto_common_channels_butone() to use batch tags for
  clients with CAP_BATCH capability during network events

Netsplit: set_active_network_batch() called before exit_downlinks()
Netjoin: set in send_netjoin_batch_start(), cleared in send_netjoin_batch_end()

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Add send_fail() calls with CAP_STANDARDREPLIES check to TAGMSG, SETNAME,
and AUTHENTICATE error paths. Clients with standard-replies capability
receive structured FAIL messages in addition to traditional numerics.

Error codes added:
- TAGMSG: NEED_MORE_PARAMS, INVALID_TARGET, CANNOT_SEND
- SETNAME: DISABLED, NEED_MORE_PARAMS
- AUTHENTICATE: TOO_LONG, SASL_FAIL

IRCv3 spec: https://ircv3.net/specs/extensions/standard-replies

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Add sasl_server_available() check to CAP LS handling. SASL is now only
advertised when:
- FEAT_SASL_SERVER="*" and at least one server is connected, OR
- The specific configured SASL server is connected

This prevents clients from attempting SASL authentication when X3/services
are not available, improving the connection experience.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
- Add SaslMechanisms global to store mechanism list received from services
- Add set_sasl_mechanisms() and get_sasl_mechanisms() functions
- Handle SASL * * M :mechanisms broadcast in ms_sasl()
- Use dynamic mechanism list in CAP LS 302 instead of hardcoded value
- Falls back to static value if no broadcast received

This allows X3 to announce which SASL mechanisms it actually supports
(PLAIN, EXTERNAL, OAUTHBEARER) based on its configuration.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Previously, broadcast functions like sendcmdto_common_channels_butone()
and sendcmdto_channel_butone() built a single tagged message with all
available tags (server-time, account-tag, bot) and sent it to any client
that requested any tag capability.

This meant a client requesting only server-time would also receive
@account tags, and vice versa. While technically compliant (clients must
ignore unknown tags per IRCv3 spec), it was wasteful and imprecise.

New implementation:
- Added format_message_tags_ex() with explicit TAGS_* flags control
- Added get_client_tag_flags() to determine which tags each client wants
- Updated broadcast functions to use per-capability message buffer cache
- Each unique combination of capabilities gets its own cached message
- Only tags the client actually requested are included

Functions updated:
- sendcmdto_common_channels_butone()
- sendcmdto_common_channels_capab_butone()
- sendcmdto_channel_butserv_butone()
- sendcmdto_channel_capab_butserv_butone()
- sendcmdto_channel_butone()

Performance: Uses lazy caching - message buffers are only built when
first needed for a given tag combination, then reused for all clients
with the same capabilities.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Remove unused format_message_tags() and format_message_tags_with_network_batch()
functions that were replaced by the per-capability message buffer caching.

The new implementation uses format_message_tags_ex() with TAGS_* flags and
get_client_tag_flags() to build per-client message buffers.

Update wants_message_tags() comment to clarify it's now only used for
TAGMSG filtering.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Add support for the IRCv3 draft/no-implicit-names extension which allows
clients to suppress automatic NAMES replies after JOIN. This reduces
bandwidth for mobile clients and clients joining many channels.

Changes:
- Add CAP_DRAFT_NOIMPLICITNAMES to capab.h
- Add FEAT_CAP_draft_no_implicit_names feature flag (default: TRUE)
- Add capability to m_cap.c negotiation list
- Skip do_names() in m_join.c when capability is negotiated
- Skip do_names() in m_svsjoin.c when capability is negotiated

Spec: https://ircv3.net/specs/extensions/no-implicit-names

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Add support for the IRCv3 draft/extended-isupport extension which allows
clients to request ISUPPORT (005) tokens before completing registration.
This enables early feature discovery during capability negotiation.

Changes:
- Add CAP_DRAFT_EXTISUPPORT to capab.h
- Add FEAT_CAP_draft_extended_isupport feature flag (default: TRUE)
- Add MSG_ISUPPORT/TOK_ISUPPORT/CMD_ISUPPORT to msg.h
- Add m_isupport declaration to handlers.h
- Create new ircd/m_isupport.c command handler
- Register ISUPPORT command in parse.c with MFLG_UNREG
- Add m_isupport.c to Makefile.in

The handler reuses send_supported() from s_user.c. Requires the
draft/extended-isupport capability to be negotiated; otherwise
returns ERR_UNKNOWNCOMMAND.

Spec: https://ircv3.net/specs/extensions/extended-isupport

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Implements IRCv3 draft/pre-away extension which allows clients to set
their away status before completing connection registration. Useful for
bouncers and mobile clients that connect in the background.

Changes:
- Added CAP_DRAFT_PREAWAY to capab.h
- Added FEAT_CAP_draft_pre_away feature flag (default: TRUE)
- Added con_pre_away and con_pre_away_msg fields to Connection struct
- Added mu_away handler for unregistered clients
- Apply pre-away state in register_user() after connection completes
- AWAY * sets away without message (hidden connection - not broadcast)
- Normal AWAY :message is broadcast to servers after registration

Specification: https://ircv3.net/specs/extensions/pre-away

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Implement the draft/multiline IRCv3 extension which allows clients to
send multi-line messages as a single unit, solving the code pasting
problem that drives users to Discord/Slack/Matrix.

Features:
- Capability with dynamic value: draft/multiline=max-bytes=4096,max-lines=24
- Client BATCH command handling for draft/multiline type
- Message collection with @Batch= tag interception in PRIVMSG
- Support for draft/multiline-concat tag for line joining
- Batch delivery to supporting clients with proper tags
- Fallback delivery as individual messages for non-supporting clients
- Echo-message support for multiline batches
- IRCv3 standard-replies (FAIL) for error handling
- Configurable limits via MULTILINE_MAX_BYTES and MULTILINE_MAX_LINES

Files modified:
- include/capab.h: Added CAP_DRAFT_MULTILINE
- include/ircd_features.h/c: Added multiline feature flags
- include/client.h: Added batch state fields to Connection struct
- include/handlers.h: Added m_batch declaration
- ircd/m_cap.c: Added capability with dynamic value generation
- ircd/parse.c: Added @Batch and draft/multiline-concat tag parsing
- ircd/m_batch.c: Added client batch handler and delivery logic
- ircd/m_privmsg.c: Added batch interception for multiline messages

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Adds native WebSocket (RFC 6455) support directly in Nefarious, achieving
feature parity with Ergo, InspIRCd, and UnrealIRCd for browser-based clients.

Implementation details:
- New websocket.c with handshake, frame encode/decode functions
- Supports binary.ircv3.net and text.ircv3.net subprotocols
- Integrates with existing event loop (no threading required)
- Uses OpenSSL for SHA1/Base64 (no new dependencies)
- Works with existing SSL/TLS infrastructure
- Gated by FEAT_DRAFT_WEBSOCKET feature flag (enabled by default)

Configuration:
  Port { port = 8080; websocket = yes; ssl = yes; };

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Add Makefile dependency rules for files added during the IRCv3 upgrade:
- m_batch.o (draft/multiline)
- m_isupport.o (draft/extended-isupport)
- m_setname.o (setname capability)
- m_tagmsg.o (message-tags)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Implements IRCv3 draft/chathistory extension for message history:
- LMDB backend for zero-copy reads and MVCC concurrency
- All CHATHISTORY subcommands: LATEST, BEFORE, AFTER, AROUND, BETWEEN, TARGETS
- Channel message storage (enabled by default)
- Private message storage (opt-in via CHATHISTORY_PRIVATE feature)
- Message reference formats: timestamp= and msgid=
- Proper batch responses with server-time and msgid tags
- ISUPPORT tokens: CHATHISTORY, MSGREFTYPES

Configuration:
  CAP_draft_chathistory = TRUE     # Enable capability
  CHATHISTORY_MAX = 100            # Max messages per query
  CHATHISTORY_DB = "history"       # LMDB database directory
  CHATHISTORY_PRIVATE = FALSE      # Enable DM history

Build requires: liblmdb-dev (--with-lmdb or --disable-lmdb)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
- Add REDACT command (P10 token: RD) for message deletion
- Integrate with LMDB chathistory for message lookup/deletion
- Authorization: own messages (time-limited), chanops, opers
- Configurable time windows: REDACT_WINDOW (300s default), REDACT_OPER_WINDOW
- Disabled by default (draft spec) - enable with CAP_draft_message_redaction
- Propagate to channel members with capability and to other servers

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Implement IRCv3 draft/account-registration extension for direct account
registration via IRC protocol. Uses XQUERY/XREPLY as fallback mechanism
for backward compatibility with older X3 versions.

New commands:
- REGISTER <account> <email|*> <password> - Register an account
- VERIFY <account> <code> - Verify registration with code
- REGREPLY (S2S) - Response from services

P10 tokens: RG (REGISTER), VF (VERIFY), RR (REGREPLY)

Feature flag CAP_draft_account_registration disabled by default since
this is a draft specification.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Add batch timeout handling per IRCv3 client-batch specification:

- Add con_ml_batch_start timestamp to track when batch started
- Add FEAT_CLIENT_BATCH_TIMEOUT (default 30 seconds)
- Add check_client_batch_timeout() called from check_pings()
- Send FAIL BATCH TIMEOUT when batch exceeds timeout

When a client opens a batch and doesn't close it within the timeout,
the server sends FAIL BATCH TIMEOUT and discards collected messages.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
MrLenin and others added 30 commits January 1, 2026 03:37
- Add libcmocka-dev to Dockerfile build dependencies
- Create ircd_chattr_cmocka.c as example CMocka test with proper assertions
- Update Makefile.in with separate targets:
  - `make test` - runs legacy tests (used in Docker build)
  - `make cmocka` - builds CMocka test binaries
  - `make test-cmocka` - runs CMocka tests
  - `make test-all` - runs both legacy and CMocka tests

CMocka tests demonstrate proper assertion-based testing vs the legacy
print-based tests. New unit tests should use CMocka for better failure
diagnostics and CI integration.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
New test files with proper CMocka assertions:

- ircd_match_cmocka.c: IRC glob/wildcard matching (18 tests)
  - Literal matching, ?, *, escape sequences
  - IRC hostmask patterns, channel patterns
  - Edge cases and mmatch()

- ircd_string_cmocka.c: String utilities (25 tests)
  - ircd_strncpy, ircd_strcmp (case-insensitive)
  - IRC special char handling ({}|^ vs []\~)
  - unique_name_vector, token_vector
  - ParseInterval, is_timestamp
  - Username/hostname validation
  - strIsDigit, strIsAlpha, strIsAlnum

- numnicks_cmocka.c: Base64 encoding (12 tests)
  - base64toint, inttobase64
  - Round-trip consistency
  - iptobase64, base64toip

- ircd_in_addr_cmocka.c: IP address handling (19 tests)
  - IPv4 and IPv6 parsing
  - Address formatting, comparison
  - Loopback detection, validation
  - IP mask parsing with wildcards and CIDR

Total: 74 new unit tests with proper assertions.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
- IsCntrl: DEL (0x7F) is not a control character in IRC
- IsEol: '\0' is not an end-of-line character
- IsIPChar: Only digits and '.' for IPv4; add IsIP6Char test for IPv6
- match(): IRC matching is case-insensitive
- is_timestamp/valid_username: Empty strings return true (vacuously valid)
- base64toint: Empty string behavior is undefined, just verify no crash
- Add test_stub.o and missing dependencies to CMocka test builds

All 81 CMocka tests now pass (10+18+22+12+19) across 5 test files.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Add explanatory comments documenting that certain test assertions reflect
intentional ircu design decisions, not bugs:

- IsCntrl: 0x00-0x1F only, DEL (0x7F) excluded (differs from C iscntrl)
- IsEol: Only \r\n, NUL excluded (it's the string terminator)
- match(): Case-insensitive per RFC 1459 section 2.2
- is_timestamp/valid_username: Empty strings return true (vacuous truth)
- base64toint: Empty string behavior undefined (shouldn't occur in P10)

These behaviors are preserved from the original ircu codebase. The tests
now serve as regression tests documenting expected behavior.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Add 15 tests for zstd compression utilities used in LMDB-backed storage
(chathistory, metadata). Tests cover:
- is_compressed() magic byte detection
- compress_data() threshold and compression behavior
- decompress_data() for compressed and passthrough data
- Round-trip compression/decompression verification
- Threshold and compression level accessor functions

Requires libzstd for linking (-lzstd).

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Add 21 tests for IP/hostname cloaking functions. Tests cover:
- downsample() - 128-bit to 32-bit hash reduction
- downsample24() - 128-bit to 24-bit hash reduction
- hidehost_ipv4() - IPv4 address cloaking with format verification
- hidehost_ipv6() - IPv6 address cloaking with format verification
- hidehost_normalhost() - hostname cloaking with component preservation

Tests verify deterministic output, format correctness, and that different
inputs produce different cloaked outputs. Uses inline copy of cloaking
functions with fixed test keys to avoid feature_str() dependencies.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Add 22 tests for dynamic buffer (DBuf) data structure used for queuing
data to clients. Tests cover:

- Empty buffer initialization and DBufLength macro
- dbuf_put() - single, multiple, exact buffer size, cross-buffer writes
- dbuf_map() - mapping data for reading without consuming
- dbuf_delete() - partial, full, over-delete, cross-buffer deletion
- dbuf_get() - extracting and consuming data
- dbuf_getmsg() - extracting complete IRC lines (EOL-delimited)
- DBufClear macro - clearing entire buffer
- Memory accounting - dbuf_count_memory()
- Round-trip tests for small and large (multi-buffer) data

Uses fixture-based testing with setup/teardown for proper cleanup.
Inlines dbuf.c code with stubs for feature_int/bool dependencies.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Add 17 unit tests for password hashing mechanisms:
- PLAIN mechanism (returns key unchanged)
- SMD5 mechanism (salted MD5 hashing)
- ircd_crypt dispatcher (mechanism selection)
- oper_password_match (password verification)
- Mechanism registration and token handling

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Add 27 unit tests for the connection rule parser (crule.c):
- Basic function parsing (connected, directcon, via, directop)
- NOT operator (!), including double negation
- AND operator (&&) with chaining
- OR operator (||) with chaining
- Operator precedence (AND binds tighter than OR)
- Parentheses for precedence override
- Error handling (unknown function, wrong arg count, unclosed parens)
- Whitespace and tab handling
- Colon terminator support (config file format)
- Wildcard and hostname patterns in arguments
- Expression evaluation with stub functions

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Add 28 unit tests for history/chathistory serialization functions:

Key construction and parsing (build_key, parse_key):
- Target-only keys, with timestamp, with msgid
- Buffer overflow protection
- DM target format ($nick1,nick2)
- Round-trip consistency

Message serialization (serialize_message, deserialize_message):
- All message types (PRIVMSG, NOTICE, JOIN, PART, etc.)
- Null/empty account and content handling
- Invalid type detection
- Missing field detection
- Round-trip consistency

Reference parsing (parse_reference from m_chathistory.c):
- timestamp=, msgid=, and * formats
- Null/empty input handling
- Invalid format rejection
- Case sensitivity

These pure functions are tested without requiring LMDB.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
P10/IRC standard: S2S and storage use integer Unix timestamps.
IRCv3 client protocol: @time= tags stay ISO 8601 per spec.

Changes:
- Add history_format_timestamp(), history_unix_to_iso(), history_iso_to_unix()
- Update history_store_message callers to generate Unix timestamps
- Update LMDB storage to use Unix timestamp keys (still sorts correctly)
- Update MARKREAD to convert ISO<->Unix at client boundary
- Update sendcmdto_one_tags_msgid to return Unix for storage
- Remove unused struct tm variables after refactoring

Note: X3 will need matching updates for S2S protocol.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
- history_query_before/after/latest: Convert ISO to Unix for lookups
- history_query_between: Convert both reference timestamps
- history_query_targets: Convert range timestamps from client
- send_history_batch: Convert Unix to ISO for @time= tags
- chathistory_targets: Convert Unix to ISO for TARGETS response
- Use Unix "far future" timestamp in history_query_latest

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Per P10's design philosophy of network/CPU efficiency:
- Single-char subcmds: L=LATEST, B=BEFORE, A=AFTER, R=AROUND, W=BETWEEN, T=TARGETS
- Compact reference format: T<timestamp>, M<msgid>, * (instead of timestamp=, msgid=)
- Saves ~10 bytes per federated query

Added helper functions for bidirectional conversion between client
and efficient S2S formats.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Optimize CHATHISTORY S2S federation by removing the T/M prefixes from
reference format. Timestamps and msgids can be unambiguously distinguished:

- Timestamps always start with a digit (0-9)
- Msgids always start with a server numeric (A-Za-z)

Before: T1735689600.123 or MAB-1234-5
After:  1735689600.123 or AB-1234-5

Saves 1 byte per reference in S2S queries.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Add stats reporting functions for both subsystems accessible via
/STATS chathistory and /STATS metadata (oper-only, word-based access).

CHATHISTORY stats include:
- LMDB backend availability and status
- Database map size
- Entry counts for messages, msgid index, targets, and read markers
- B-tree depth information

METADATA stats include:
- LMDB backend availability and status
- Account metadata database entry count
- X3 services availability status
- Write queue pending count
- MDQ request pending count

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Implements cache expiry for metadata stored in LMDB to prevent stale
entries from accumulating indefinitely.

Changes:
- Add FEAT_METADATA_CACHE_TTL (default: 4 hours) and
  FEAT_METADATA_PURGE_FREQUENCY (default: 1 hour) feature flags
- Modify LMDB storage format to include timestamp: T<timestamp>|<value>
- Check TTL on read in metadata_account_get() - expired entries return
  "not found"
- Add metadata_account_purge_expired() to periodically clean stale entries
- Add metadata_purge_timer in ircd.c for automatic periodic purging
- Backwards compatible: legacy entries without TTL prefix still work

This complements X3's authoritative metadata TTL handling by ensuring
Nefarious's cache doesn't retain stale entries indefinitely.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Add all CMocka test binaries to .gitignore:
- ircd_chattr_cmocka, ircd_string_cmocka, numnicks_cmocka
- ircd_in_addr_cmocka, ircd_compress_cmocka, ircd_cloaking_cmocka
- dbuf_cmocka, ircd_crypt_cmocka, crule_cmocka
- history_cmocka, dnsbl_cmocka, ircd_match_cmocka

Also ignore Makefile.in.tmp and *.o object files.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Implement configurable consent modes for private message history storage:
- FEAT_CHATHISTORY_PRIVATE_CONSENT: Controls consent model
  - 0 = Global (store unless either party opts out)
  - 1 = Single-party (store if either opts in, opt-out overrides)
  - 2 = Multi-party (store only if both opt in) - DEFAULT
- FEAT_CHATHISTORY_ADVERTISE_PM: Include pm= in capability value
- FEAT_CHATHISTORY_PM_NOTICE: Send policy notice on connect

Users control preference via METADATA:
  METADATA * SET chathistory.pm * :1  (opt-in)
  METADATA * SET chathistory.pm * :0  (opt-out)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
When a client doesn't have the standard-replies capability enabled,
the server now falls back to traditional IRC numerics or NOTICE:

- NEED_MORE_PARAMS -> 461 numeric (ERR_NEEDMOREPARAMS)
- ALREADY_AUTHENTICATED -> 462 numeric (ERR_ALREADYREGISTRED)
- Other codes -> NOTICE with FAIL/WARN/NOTE prefix

Also exports generate_msgid() for use by m_batch.c.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Touch ircd.pem before make install to skip the interactive SSL certificate
generator, then remove it so the entrypoint can generate a fresh one.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
When clients support message-tags capability, include proper msgid and
server-time tags in each PRIVMSG within a multiline batch. This ensures
messages can be properly tracked and stored in chat history.

- Add format_time_tag() helper for ISO 8601 timestamps
- Generate unique msgid for each message in the batch
- Conditionally include tags based on CAP_MSGTAGS capability
- Apply to channel messages, echo messages, and private messages

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Add normalize_pm_target() function to handle PM history lookups per
the IRCv3 spec where clients can query with just a nickname rather
than the full nick1:nick2 format.

- Parse both plain nick and nick:nick format inputs
- Validate sender is party to the conversation
- Sort nicks alphabetically for consistent LMDB key lookup
- Update check_history_access() to return normalized target

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
…nfig

Update base.conf-dist to enable:
- draft/chathistory and draft/metadata-2 capabilities
- PM chathistory with multi-party consent mode (both users must opt in)
- Policy notice on connect informing users about PM logging
- Disable fakelag for testing (fakelagminimum=0, fakelagfactor=0)

Add ircd.conf that includes base.conf, local.conf, and linesync.conf.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
- Add per-connection WebSocket state buffers in client.h:
  - con_ws_frame_buf/len for partial frame buffering
  - con_ws_frag_buf/len/opcode for fragment reassembly
- Update websocket_decode_frame() to return FIN bit status via is_fin param
- Fix SSL_write usage in handshake response
- Add partial frame recovery in s_bsd.c read_packet()
- Add message fragment reassembly for FIN=0 frames
- Initialize WebSocket state in list.c make_connection()
- Clear WebSocket state in packet.c on connection close

This enables proper handling of:
- TCP reads that split WebSocket frames mid-frame
- Fragmented WebSocket messages (multiple frames with FIN=0)
- Interleaved control frames during fragmentation

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
…quests

Don't send Sec-WebSocket-Protocol header unless the client included
one in the handshake request. This completes full RFC 6455 compliance.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Add FEAT_TCP_NODELAY_C2S and FEAT_TCP_NODELAY_S2S feature flags to
optionally disable Nagle's algorithm on client and server connections
for lower latency messaging. Both default to FALSE.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
- Add cli_saslstart timestamp field for FD reuse protection
- Reject stale SASL responses older than FEAT_SASL_TIMEOUT
- Reorder metadata loading before account flag in m_sasl.c and m_account.c
- Add error logging for silent failures:
  - Token prefix mismatch (debug)
  - Malformed tokens (protocol_violation)
  - Cookie mismatches (debug)
  - Agent mismatches (warning)
  - metadata_load_account() failures (debug)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Prevents use-after-free when SASL agent server disconnects during auth:
- Validate sender is not dead before storing as agent in ms_sasl()
- Check IsDead() before using agent in abort_sasl()
- Auto-recover to new agent if existing agent becomes dead
- Validate agent in m_authenticate() with fallback to find new agent

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
When the SASL agent server (X3) disconnects, immediately abort all
pending SASL sessions instead of letting them wait for SASL_TIMEOUT.
This provides faster feedback to clients during netsplits or services
restarts.

Changes:
- Modified free_client() to call abort_sasl() for each session using
  the disconnecting server as its agent
- Clients receive ERR_SASLFAIL immediately instead of waiting 90s
- Logs summary count of aborted sessions at INFO level
- Rate-limits DEBUG logging to avoid spam during large netsplits

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant