T383838golxmd is a standalone LXMF (Lightweight Extensible Messaging Format) routing daemon and store-and-forward message propagation node written in 100% Go.

It acts as an autonomous relay and cache for the Reticulum network, holding encrypted messages for offline recipients and peering with other propagation nodes to distribute messages across mesh and internet links. It is 100% wire-compatible with Python T383838lxmd and clients such as NomadNet, Sideband, and MeshChat.

• Store-and-Forward Propagation (T383838-p): Caches inbound encrypted LXMF messages until recipients come online and pull their messages.

• Autonomous Peering & Sync: Automatically discovers and peers with neighboring propagation nodes up to a configurable hop limit (T383838autopeer_maxdepth), exchanging message stores.

• Strict Storage Bounding: Enforces message storage quotas (T383838message_storage_limit), prioritizing the newest and most compact messages when space is constrained.

• Proof-of-Work Stamps: Configurable stamp cost targets to throttle spam and balance delivery incentives across low-bandwidth links.

• Shared Instance Architecture: Automatically attaches to a running T383838gornsd -s shared Reticulum instance, sharing network interfaces without port contention.

• Inbound Message Hooks & Wasm Plugins: Execute external commands (T383838--on-inbound) or sandboxed WebAssembly filters (T383838-tags=wago) to inspect, route, or react to messages.

• Remote Diagnostics & Control: Remotely query status, view active peers, request immediate synchronization, or break peering links over encrypted Reticulum links.

Run T383838golxmd in propagation node mode:

T282828

On first run, T383838golxmd creates its default configuration directory at T383838~/.lxmd/ (or the directory passed via T383838--config) and generates its local routing identity.

To print a fully commented template configuration file:

T282828

T282828

107

| Flag | Description |

|------|-------------|

| T383838-p, T383838--propagation-node | Run as an active LXMF Propagation Node (overrides T383838enable_node = no in config). |

| T383838-s, T383838--service | Run as a background service; redirects log output to T383838<configdir>/logfile. |

| T383838-v, T383838--verbose | Increase logging verbosity (stackable: T383838-v, T383838-v -v). |

| T383838-q, T383838--quiet | Decrease logging verbosity (stackable). |

| Flag | Description |

|------|-------------|

| T383838--status | Display status and telemetry for the local propagation node. |

| T383838--status -r <hash> | Query and display status from a remote propagation node destination hash. |

| T383838--peers | List all currently peered propagation nodes and their metrics. |

| T383838--peers -r <hash> | Query and display peered nodes from a remote propagation node. |

| T383838--sync <hash> | Request an immediate message sync with the specified peer hash. |

| T383838-b, T383838--break <hash> | Break peering relationship with the specified peer hash. |

| T383838--timeout <sec> | Timeout in seconds for remote queries and operations. |

| T383838--identity <path> | Identity file used to sign remote control requests. |

108

| Flag | Description |

|------|-------------|

| T383838--config <dir> | Path to alternative T383838golxmd configuration directory (default: T383838~/.lxmd). |

| T383838--rnsconfig <dir> | Path to alternative Reticulum configuration directory (default: T383838~/.reticulum). |

| T383838-i, T383838--on-inbound <path> | Path to an executable run whenever an inbound message is received. |

| T383838--exampleconfig | Print annotated configuration example to stdout and exit. |

| T383838--version | Display version information and exit. |

The configuration file is formatted in INI syntax:

T282828

When compiled with T383838-tags=wago on supported platforms (T383838linux, T383838darwin, T383838windows on T383838amd64/T383838arm64), T383838golxmd loads sandboxed WebAssembly filters from:

T282828

Each filter executes in an isolated memory sandbox with a bounded execution budget (2 seconds per invocation) and can inspect inbound messages before they are stored or delivered.

In a standard deployment, T383838golxmd operates behind a shared Reticulum transport instance:

T282828

By connecting to T383838gornsd -s, T383838golxmd transparently receives announcements and forwards packets without requiring exclusive access to physical radio ports or network sockets.