Commit Graph

1246 Commits

Author SHA1 Message Date
Gnuxie 026de3b9cb Account for creators missing in synapse room table. (#905)
This really and deeply sucks
https://github.com/element-hq/synapse/issues/18563.
2025-06-17 17:13:41 +01:00
Gnuxie 8de924c852 Merge pull request #904 from the-draupnir-project/gnuxie/synapse-admin-room-discovery
This removes the need for synapse-http-antispam in order to reveal hashed literals for rooms. This is always available and by default runs a full scan every 30 minutes, or every time a policy changes. There is a configurable 5 minute cooldown between scans.
2025-06-17 12:34:06 +01:00
gnuxie bb8baaa473 Rigidity wrt disposing stores and protections. 2025-06-17 12:27:03 +01:00
gnuxie 96aaf072d5 Disable the room discovery notification room by default. 2025-06-17 12:27:03 +01:00
gnuxie c703dbb000 Update MPS for synapse admin room list and other goodies. 2025-06-17 12:27:03 +01:00
gnuxie a5a1bdd402 Support room discovery via the synapse admin room list. 2025-06-17 12:27:03 +01:00
Catalan Lover ec388467e4 Add the ability to customise the primary prefix for commands. (#899)
* Add the ability to customise the primary prefix for commands.

* Fix data structure error in config.yaml / harness.yaml

* Apply suggestions from code review

---------

Co-authored-by: Gnuxie <50846879+Gnuxie@users.noreply.github.com>
2025-06-16 20:39:01 +01:00
Gnuxie f46ff4dddd Implement synapse-http-antispam /ping. (#897)
https://github.com/maunium/synapse-http-antispam/commit/2a36ef305b5acf37293f5073b0914dcfcc2a775a
2025-06-09 11:43:19 +01:00
dependabot[bot] aa66056816 Bump tar-fs from 2.1.2 to 2.1.3 (#890)
Bumps [tar-fs](https://github.com/mafintosh/tar-fs) from 2.1.2 to 2.1.3.
- [Commits](https://github.com/mafintosh/tar-fs/commits)

---
updated-dependencies:
- dependency-name: tar-fs
  dependency-version: 2.1.3
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-06-03 18:49:25 +01:00
Gnuxie d8fc1fbb7a Merge pull request #891 from the-draupnir-project/gnuxie/mps-interface-adaptor
Extract out and depend upon @the-draupnir-project/mps-interface-adaptor

This is just a very simple PR to extract the contents of `src/command/interface-manager` and `src/capabilities/CommonRenderers.tsx` to a library that can be used by other bots that depend on the matrix-protection-suite and interface-manager. Since this is essentially glue code that hasn't made its way into abstractions yet that other bots would need to duplicate to get started.

And we're doing this because we're thinking of making a contributor bot for fun primarily, gathering feedback, and encouraging testing .
2025-06-03 18:33:55 +01:00
gnuxie 375d7ad916 Update to MPS 3.5.0 AND mps-interface-adaptor 0.4.1.
These are basically the dependencies to complete the make
mps-interface-adaptor extraction.
2025-06-03 18:25:29 +01:00
gnuxie 2e0b9dfb98 Extract out and depend upon @the-draupnir-project/mps-interface-adaptor. 2025-06-02 19:52:44 +01:00
Gnuxie 6fe9138655 changelog infos mention search and special thanks. (#887) 2025-05-30 14:10:45 +01:00
gnuxie ee76799ec9 v2.3.1 v2.3.1 2025-05-29 20:07:03 +01:00
Gnuxie ed9a14b84d Only invite joined members to the Notification Rooms. (#885)
* Only invite joined members to the Notification Rooms.

* Make NotificationRoom creation invitations more resistant.
2025-05-29 19:49:22 +01:00
gnuxie 05d388da57 v2.3.0 v2.3.0 2025-05-29 18:49:21 +01:00
Gnuxie cee05901be CHANGELOG for 2.3.0. (#884) 2025-05-29 18:48:48 +01:00
Gnuxie 34680df995 Merge pull request #879 from the-draupnir-project/gnuxie/room-takedown-feedback
- Split out the room discovery notifications into their own matrix room.
- Ensure that information for room creator and the server (that the room create is signed with) are stored in the room info. And add ways to look those up in the future.
-  Stop content violation notifications appearing in takedown/shutdown
2025-05-29 15:29:09 +01:00
gnuxie 6f15fc27c6 Use room delete V2 for takedowns/shutdowns to not notify.
Seems i got it backwards?? or this is just totally random.
2025-05-29 15:20:36 +01:00
gnuxie f25b1f1361 Update to MPS 3.4.0 for room senders / creators. 2025-05-29 15:11:51 +01:00
gnuxie 1cb9899963 Stop taking down rooms by server and sender.
https://github.com/the-draupnir-project/Draupnir/issues/880.
Postpone takedown by creator for now.
We haven't got time to make sure everything's working and figure out
the UX.
2025-05-29 14:52:34 +01:00
gnuxie 80473155d9 Needs testing, added pathways to takedown rooms by server and sender. 2025-05-29 14:52:34 +01:00
gnuxie 804dfa0e33 Return the new protection instead of playing about. 2025-05-27 14:39:42 +01:00
gnuxie 11025f2ae5 Re-enable room discovery by default now that it creates a distinct room. 2025-05-27 11:57:23 +01:00
gnuxie 3d138d96df Remove seperate room for policy change notification protection.
I don't think we're ready for it yet.
2025-05-27 11:55:00 +01:00
gnuxie 0d00380c50 Update MPS for async protection factories. 2025-05-26 23:29:49 +01:00
gnuxie feb452e474 Figure out how to seperate some logs into their own rooms.
We still need to figure out whether we want to disable the room
discovery or enable it by default.
2025-05-26 23:14:29 +01:00
gnuxie 6649000552 Update all protection descriptions to use an async factory. 2025-05-26 19:13:08 +01:00
Gnuxie 120111f075 Merge pull request #871 from the-draupnir-project/gnuxie/takedown-improvements
- disable room discovery by default while we work out how to pipe it into a new room
- show status of takedown protections in the takedown command
- clarify a comment about the implementation of blocking invintations

We really need to figure out how to let protections put all their output into a room.
2025-05-25 19:58:25 +01:00
gnuxie 2a731bf66b Clarify a comment about the implementation of blocking invitations. 2025-05-23 18:08:47 +01:00
gnuxie dd3a50125d Show status of takedown protections in the takedown command.
This is in order to reinforce their use
Fixes https://github.com/the-draupnir-project/Draupnir/issues/862.
2025-05-23 18:03:23 +01:00
gnuxie 2ab9e37aa3 Disable room discovery by default.
It is too noisy and i don't think people have time to review it.  In a
moment i will try see if i can create a new room for the protection at
startup in a moment.
2025-05-23 16:53:08 +01:00
Catalan Lover ce926ed18f YEEET synapse_antispam (#866) 2025-05-23 01:24:21 +02:00
Gnuxie 39e4522c74 Improve room shutdown flows. (#858)
* Improve room shutdown flows.

- The shutdown command now has a `--notify` option for whether to send
  the violation notification.
- We use shutdown V1 because V2 doesn't propagate leave events to clients
  properly. Which sucks.

* Fix flakey shutdown test.

So this was never working it was just catching the original message
containing the command by speed of shutdown V2.
2025-05-20 18:25:08 +01:00
Gnuxie 5ad37c9b3c Update to MPS 3.1.2 for better ACL handling. (#856)
* Update to MPS 3.1.2 to help with ACL.

* Update ServerACLConsequencesRenderer for MPS update.
2025-05-20 15:17:36 +01:00
Gnuxie 8ccbe86d19 Add a command that can remove specific policies without other effects. (#853)
Can't find the issue but it exists.
2025-05-19 11:55:25 +01:00
Kim Brose 97e9c815f6 Typo (#854)
Signed-off-by: HarHarLinks <2803622+HarHarLinks@users.noreply.github.com>
2025-05-17 19:10:31 +01:00
Gnuxie 3d9d8abc43 update to interface-manager 4.1.0 (#847)
Fixes a tonne of shite mare.
Importantly https://github.com/the-draupnir-project/Draupnir/issues/845.
And something @ll-SKY-ll mentioned in the draupnir room regarding the new MentionLimitProtection.

Added

- Quote syntax to quote strings.
- Boolean presentation type and translator to string.

Fixed

- Added a pathway to create negative integers.
2025-05-14 23:51:19 +01:00
Gnuxie 32124edc5d Improve and stabalise the mention limit protection. (#844)
- Send a warning message when the event gets removed.
- Ban on the second infraction.
- Make it an option as to whether the message gets split.
- The config file won't work anymore can't fix that because wuh we can't have both as the source of truth........ unless we differentiate based on the timestamp but that requires infrastructure changes.
2025-05-13 21:47:53 +01:00
Rory& 62163a4afa Support loading http antispam token from file (#833)
* Support loading http antispam token from file

* Empty commit for signoff

Signed-off-by: Rory& <root@rory.gay>

---------

Signed-off-by: Rory& <root@rory.gay>
2025-05-12 12:12:19 +01:00
ll-SKY-ll 0bad7b29b0 Update HomeserverUserPolicyProtection.ts (#835)
Fix description for protection
2025-05-10 13:16:54 +01:00
gnuxie 656b8decb8 v2.3.0-beta.2 v2.3.0-beta.2 2025-04-14 18:36:42 +01:00
gnuxie 2f0f2fc026 --no-confirm was backwards in the Deactivate commands smh. 2025-04-14 18:33:40 +01:00
gnuxie 70a00e82e1 Update MPS4BotSDK to fix bugs in user redaction API. 2025-04-14 18:33:40 +01:00
gnuxie 720d703ca8 v2.3.0-beta.1 v2.3.0-beta.1 2025-04-14 16:30:44 +01:00
Gnuxie 92be1e6522 Exclude the bot from mention limit protection. (#815)
Fixes https://github.com/the-draupnir-project/Draupnir/issues/812.

Co-authored-by: nexy7574 <git@nexy7574.co.uk>
2025-04-14 15:53:29 +01:00
Gnuxie 98cf7bad8b Merge pull request #799 from the-draupnir-project/gnuxie/server-user-bans
Homeserver Admin: Restrict resident users automatically based on watched policy rooms

We introduce a new concept "restriction" which basically means "can a user send events from this account". Which is important when purging the messages sent from a user while deactivating their account.

We introduce a new protection, the `HomeserverUserPolicyApplication` protection which suspends users automatically when resident users match a policy from watched policy rooms. If the policy contains a reason for `config.automaticallyRedactForReasons`, then we prompt to do a purging deactivate (redact -> deactivate).

Users are also unsuspended as policies are removed.

We also introduce a `--purge-messages` and `--no-confirm` option to the `deactivate` command. This means that the command can now use the user redaction endpoint to redact messages and will shadowban the user while it does this if their account isn't already restricted. The addition of `--no-confirm` means that we now show a preview every time you run the deactivate command where you can review the user details before confirming the deactivation.

  

Follow up 1: https://github.com/the-draupnir-project/Draupnir/issues/813
Follow up 2: https://github.com/the-draupnir-project/Draupnir/issues/814
2025-04-14 15:36:31 +01:00
gnuxie 85574bce21 Add indexes to SqliteUserRestrictionAuditLog.
Should help with isUserRestricted.

Co-authored-by: Bea <20361868+enbea@users.noreply.github.com>
2025-04-14 15:09:39 +01:00
gnuxie a09798cde8 Only unrestrict users when there are no more matching policies. 2025-04-14 10:56:47 +01:00
gnuxie 6e833db927 Simplify isUserRestrictied in SqliteUserRestrictionAuditLog.
Co-authored-by: Bea <20361868+enbea@users.noreply.github.com>
2025-04-13 20:38:03 +01:00