Filters: words and posts a persona would rather not see

Mastodon's v2 filters replace the empty stubs: a filter's title, contexts,
action (warn, hide, blur) and expiry, its keywords (whole words or not,
taken as JSON objects, listed or numbered form fields, with id and _destroy
on update) and its statuses, each with their own endpoints; the v1 API is
the same filters seen keyword by keyword. Every status a persona reads
carries the filters it matches in `filtered` (a boost as what it boosts),
matched as Mastodon matches: warning, title, text, poll options and media
descriptions. Clients apply context and action. Filters never federate, and
go with a deleted persona.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01LsXgEaXee4GCU1hwYgPJXw

PrivaPub/Api/Mastodon/Controllers/FiltersController.cs

@@ -0,0 +1,362 @@
+using System.Text.RegularExpressions;
+
+using Microsoft.AspNetCore.Mvc;
+
+using MongoDB.Bson;
+using MongoDB.Entities;
+
+using PrivaPub.Api.Mastodon.Entities;
+using PrivaPub.Api.Mastodon.Infrastructure;
+using PrivaPub.Domain.Social;
+using PrivaPub.Models.Social;
+using PrivaPub.StaticServices;
+
+namespace PrivaPub.Api.Mastodon.Controllers
+{
+	// Mastodon's filters (owner decision 2026-10-04, back from the cut list): v2 filters with their keywords and statuses,
+	// and the v1 API, whose filter is one keyword of a v2 filter. Statuses carry what they match in `filtered`; clients
+	// apply the context and the action. Nothing here leaves the server.
+	public class FiltersController : MastodonController
+	{
+		const int MaxFilters = 100;
+		const int MaxEntries = 100;
+		const int MaxKeywordLength = 100;
+		static readonly Regex Attribute = new(@"^keywords_attributes\[(\d*)\]\[(\w+)\]$", RegexOptions.Compiled);
+
+		readonly DbEntities _dbEntities;
+
+		public FiltersController(DbEntities dbEntities)
+		{
+			_dbEntities = dbEntities;
+		}
+
+		static string NewId() => ObjectId.GenerateNewId().ToString();
+
+		Task<PersonaFilter> Mine(string id, CancellationToken token) =>
+			DB.Default.Find<PersonaFilter>().Match(f => f.ID == id && f.AvatarId == MyId).ExecuteFirstAsync(token);
+
+		Task<PersonaFilter> WithKeyword(string keywordId, CancellationToken token) =>
+			DB.Default.Find<PersonaFilter>().Match(f => f.AvatarId == MyId && f.Keywords.Any(k => k.Id == keywordId)).ExecuteFirstAsync(token);
+
+		Task<PersonaFilter> WithStatus(string statusFilterId, CancellationToken token) =>
+			DB.Default.Find<PersonaFilter>().Match(f => f.AvatarId == MyId && f.Statuses.Any(s => s.Id == statusFilterId)).ExecuteFirstAsync(token);
+
+		static JsonResult Invalid(string message) => Error(StatusCodes.Status422UnprocessableEntity, "Validation failed: " + message);
+
+		// title, context[], filter_action, expires_in: what a create or an update sets; an error message when one is wrong
+		string Apply(PersonaFilter filter, bool creating)
+		{
+			var title = Params.Get("title")?.Trim();
+			if (title != default || creating)
+			{
+				if (string.IsNullOrEmpty(title) || title.Length > 200)
+					return "Title can't be blank";
+				filter.Title = title;
+			}
+			if (Params.Has("context") || creating)
+			{
+				var context = Params.List("context").Distinct().ToList();
+				if (context.Count == 0 || context.Any(c => !FilterContexts.IsValid(c)))
+					return "Context can't be blank";
+				filter.Context = context;
+			}
+			if (Params.Get("filter_action") is { } action)
+			{
+				if (!FilterActions.IsValid(action))
+					return "Filter action is not included in the list";
+				filter.Action = action;
+			}
+			if (Params.Has("expires_in"))
+				filter.ExpiresAt = Params.Int("expires_in") is > 0 and var seconds ? DateTime.UtcNow.AddSeconds(seconds) : default;
+			return default;
+		}
+
+		// keywords_attributes, as Rails takes them: a JSON array of objects, or form fields [][keyword], [][whole_word], [][id],
+		// [][_destroy], or numbered [0][keyword]
+		List<Dictionary<string, string>> KeywordAttributes()
+		{
+			if (Params.Json is { ValueKind: System.Text.Json.JsonValueKind.Object } body
+				&& body.TryGetProperty("keywords_attributes", out var array) && array.ValueKind == System.Text.Json.JsonValueKind.Array)
+				return array.EnumerateArray().Where(o => o.ValueKind == System.Text.Json.JsonValueKind.Object)
+					.Select(o => o.EnumerateObject().ToDictionary(p => p.Name, p => p.Value.ValueKind switch
+					{
+						System.Text.Json.JsonValueKind.String => p.Value.GetString(),
+						System.Text.Json.JsonValueKind.True => "true",
+						System.Text.Json.JsonValueKind.False => "false",
+						_ => p.Value.ToString()
+					}))
+					.ToList();
+			var numbered = new SortedDictionary<int, Dictionary<string, string>>();
+			var listed = new Dictionary<string, IReadOnlyList<string>>();
+			foreach (var name in Params.Names)
+			{
+				var match = Attribute.Match(name);
+				if (!match.Success)
+					continue;
+				if (match.Groups[1].Value.Length == 0)
+					listed[match.Groups[2].Value] = Params.List(name);
+				else
+				{
+					var index = int.Parse(match.Groups[1].Value);
+					if (!numbered.TryGetValue(index, out var item))
+						numbered[index] = item = new Dictionary<string, string>();
+					item[match.Groups[2].Value] = Params.Get(name);
+				}
+			}
+			var items = numbered.Values.ToList();
+			var count = listed.Count == 0 ? 0 : listed.Values.Max(v => v.Count);
+			for (var i = 0; i < count; i++)
+				items.Add(listed.Where(kv => i < kv.Value.Count).ToDictionary(kv => kv.Key, kv => kv.Value[i]));
+			return items;
+		}
+
+		static bool IsTrue(string value) => value?.ToLowerInvariant() is "true" or "1" or "on" or "yes";
+
+		// adds, changes or removes keywords; an error message when one is wrong
+		static string ApplyKeywords(PersonaFilter filter, List<Dictionary<string, string>> items)
+		{
+			foreach (var item in items)
+			{
+				var id = item.GetValueOrDefault("id");
+				var existing = id == default ? default : filter.Keywords.FirstOrDefault(k => k.Id == id);
+				if (existing != default && IsTrue(item.GetValueOrDefault("_destroy")))
+				{
+					filter.Keywords.Remove(existing);
+					continue;
+				}
+				var keyword = item.GetValueOrDefault("keyword")?.Trim();
+				if (existing == default && string.IsNullOrEmpty(keyword))
+					return "Keyword can't be blank";
+				if (keyword?.Length > MaxKeywordLength)
+					return "Keyword is too long";
+				var target = existing ?? new FilterKeyword { Id = NewId() };
+				if (!string.IsNullOrEmpty(keyword))
+					target.Keyword = keyword;
+				if (item.ContainsKey("whole_word"))
+					target.WholeWord = IsTrue(item["whole_word"]);
+				else if (existing == default)
+					target.WholeWord = true;
+				if (existing == default)
+					filter.Keywords.Add(target);
+			}
+			return filter.Keywords.Count > MaxEntries ? "Too many keywords" : default;
+		}
+
+		// -- v2
+
+		[HttpGet("/api/v2/filters"), Scope("read:filters")]
+		public async Task<IActionResult> All(CancellationToken token) =>
+			Json((await DB.Default.Find<PersonaFilter>().Match(f => f.AvatarId == MyId).Sort(f => f.ID, Order.Ascending).ExecuteAsync(token))
+				.Select(Filters.View).ToList());
+
+		[HttpGet("/api/v2/filters/{id}"), Scope("read:filters")]
+		public async Task<IActionResult> One(string id, CancellationToken token) =>
+			await Mine(id, token) is { } filter ? Json(Filters.View(filter)) : NotFoundError();
+
+		[HttpPost("/api/v2/filters"), Scope("write:filters")]
+		public async Task<IActionResult> Create(CancellationToken token)
+		{
+			if (await DB.Default.CountAsync<PersonaFilter>(f => f.AvatarId == MyId, token) >= MaxFilters)
+				return Invalid("Too many filters");
+			var filter = new PersonaFilter { AvatarId = MyId };
+			if ((Apply(filter, creating: true) ?? ApplyKeywords(filter, KeywordAttributes())) is { } problem)
+				return Invalid(problem);
+			await DB.Default.SaveAsync(filter, token);
+			return Json(Filters.View(filter));
+		}
+
+		[HttpPut("/api/v2/filters/{id}"), Scope("write:filters")]
+		public async Task<IActionResult> Update(string id, CancellationToken token)
+		{
+			if (await Mine(id, token) is not { } filter)
+				return NotFoundError();
+			if ((Apply(filter, creating: false) ?? ApplyKeywords(filter, KeywordAttributes())) is { } problem)
+				return Invalid(problem);
+			await DB.Default.SaveAsync(filter, token);
+			return Json(Filters.View(filter));
+		}
+
+		[HttpDelete("/api/v2/filters/{id}"), Scope("write:filters")]
+		public async Task<IActionResult> Delete(string id, CancellationToken token)
+		{
+			if (await Mine(id, token) is not { } filter)
+				return NotFoundError();
+			await DB.Default.DeleteAsync<PersonaFilter>(filter.ID);
+			return Json(new { });
+		}
+
+		[HttpGet("/api/v2/filters/{id}/keywords"), Scope("read:filters")]
+		public async Task<IActionResult> Keywords(string id, CancellationToken token) =>
+			await Mine(id, token) is { } filter ? Json(filter.Keywords.Select(Filters.Keyword).ToList()) : NotFoundError();
+
+		[HttpPost("/api/v2/filters/{id}/keywords"), Scope("write:filters")]
+		public async Task<IActionResult> AddKeyword(string id, CancellationToken token)
+		{
+			if (await Mine(id, token) is not { } filter)
+				return NotFoundError();
+			var item = new Dictionary<string, string> { ["keyword"] = Params.Get("keyword") };
+			if (Params.Has("whole_word"))
+				item["whole_word"] = Params.Get("whole_word");
+			if (ApplyKeywords(filter, new List<Dictionary<string, string>> { item }) is { } problem)
+				return Invalid(problem);
+			await DB.Default.SaveAsync(filter, token);
+			return Json(Filters.Keyword(filter.Keywords[^1]));
+		}
+
+		[HttpGet("/api/v2/filters/keywords/{id}"), Scope("read:filters")]
+		public async Task<IActionResult> Keyword(string id, CancellationToken token) =>
+			await WithKeyword(id, token) is { } filter ? Json(Filters.Keyword(filter.Keywords.First(k => k.Id == id))) : NotFoundError();
+
+		[HttpPut("/api/v2/filters/keywords/{id}"), Scope("write:filters")]
+		public async Task<IActionResult> UpdateKeyword(string id, CancellationToken token)
+		{
+			if (await WithKeyword(id, token) is not { } filter)
+				return NotFoundError();
+			var item = new Dictionary<string, string> { ["id"] = id, ["keyword"] = Params.Get("keyword") };
+			if (Params.Has("whole_word"))
+				item["whole_word"] = Params.Get("whole_word");
+			if (ApplyKeywords(filter, new List<Dictionary<string, string>> { item }) is { } problem)
+				return Invalid(problem);
+			await DB.Default.SaveAsync(filter, token);
+			return Json(Filters.Keyword(filter.Keywords.First(k => k.Id == id)));
+		}
+
+		[HttpDelete("/api/v2/filters/keywords/{id}"), Scope("write:filters")]
+		public async Task<IActionResult> DeleteKeyword(string id, CancellationToken token)
+		{
+			if (await WithKeyword(id, token) is not { } filter)
+				return NotFoundError();
+			filter.Keywords.RemoveAll(k => k.Id == id);
+			await DB.Default.SaveAsync(filter, token);
+			return Json(new { });
+		}
+
+		[HttpGet("/api/v2/filters/{id}/statuses"), Scope("read:filters")]
+		public async Task<IActionResult> Statuses(string id, CancellationToken token) =>
+			await Mine(id, token) is { } filter ? Json(filter.Statuses.Select(Filters.Status).ToList()) : NotFoundError();
+
+		// a status the persona can see, once per filter
+		[HttpPost("/api/v2/filters/{id}/statuses"), Scope("write:filters")]
+		public async Task<IActionResult> AddStatus(string id, CancellationToken token)
+		{
+			if (await Mine(id, token) is not { } filter)
+				return NotFoundError();
+			var statusId = Params.Get("status_id");
+			var post = string.IsNullOrEmpty(statusId) ? default : await _dbEntities.Posts.Match(p => p.ID == statusId).ExecuteFirstAsync(token);
+			if (post == default || !await Domain.Privacy.VisibilityPolicy.CanSee(post, MyId, token))
+				return NotFoundError();
+			if (filter.Statuses.FirstOrDefault(s => s.PostId == statusId) is { } present)
+				return Json(Filters.Status(present));
+			if (filter.Statuses.Count >= MaxEntries)
+				return Invalid("Too many statuses");
+			var added = new FilterStatus { Id = NewId(), PostId = statusId };
+			filter.Statuses.Add(added);
+			await DB.Default.SaveAsync(filter, token);
+			return Json(Filters.Status(added));
+		}
+
+		[HttpGet("/api/v2/filters/statuses/{id}"), Scope("read:filters")]
+		public async Task<IActionResult> Status(string id, CancellationToken token) =>
+			await WithStatus(id, token) is { } filter ? Json(Filters.Status(filter.Statuses.First(s => s.Id == id))) : NotFoundError();
+
+		[HttpDelete("/api/v2/filters/statuses/{id}"), Scope("write:filters")]
+		public async Task<IActionResult> DeleteStatus(string id, CancellationToken token)
+		{
+			if (await WithStatus(id, token) is not { } filter)
+				return NotFoundError();
+			filter.Statuses.RemoveAll(s => s.Id == id);
+			await DB.Default.SaveAsync(filter, token);
+			return Json(new { });
+		}
+
+		// -- v1: each keyword is a filter of its own, with its parent's context, action and expiry
+
+		static FilterV1Entity V1(PersonaFilter filter, FilterKeyword keyword) => new()
+		{
+			Id = keyword.Id,
+			Phrase = keyword.Keyword,
+			Context = filter.Context,
+			WholeWord = keyword.WholeWord,
+			ExpiresAt = filter.ExpiresAt.HasValue ? MastodonJson.Time(filter.ExpiresAt.Value) : default,
+			Irreversible = filter.Action == FilterActions.Hide
+		};
+
+		[HttpGet("/api/v1/filters"), Scope("read:filters")]
+		public async Task<IActionResult> AllV1(CancellationToken token) =>
+			Json((await DB.Default.Find<PersonaFilter>().Match(f => f.AvatarId == MyId).Sort(f => f.ID, Order.Ascending).ExecuteAsync(token))
+				.SelectMany(f => f.Keywords.Select(k => V1(f, k))).ToList());
+
+		[HttpGet("/api/v1/filters/{id}"), Scope("read:filters")]
+		public async Task<IActionResult> OneV1(string id, CancellationToken token) =>
+			await WithKeyword(id, token) is { } filter ? Json(V1(filter, filter.Keywords.First(k => k.Id == id))) : NotFoundError();
+
+		// phrase, context[], irreversible, whole_word, expires_in
+		string ApplyV1(PersonaFilter filter, FilterKeyword keyword, bool creating)
+		{
+			var phrase = Params.Get("phrase")?.Trim();
+			if (phrase != default || creating)
+			{
+				if (string.IsNullOrEmpty(phrase))
+					return "Phrase can't be blank";
+				if (phrase.Length > MaxKeywordLength)
+					return "Phrase is too long";
+				keyword.Keyword = phrase;
+				if (creating)
+					filter.Title = phrase;
+			}
+			if (Params.Has("context") || creating)
+			{
+				var context = Params.List("context").Distinct().ToList();
+				if (context.Count == 0 || context.Any(c => !FilterContexts.IsValid(c)))
+					return "Context can't be blank";
+				filter.Context = context;
+			}
+			if (Params.Bool("whole_word") is { } wholeWord)
+				keyword.WholeWord = wholeWord;
+			if (Params.Bool("irreversible") is { } irreversible)
+				filter.Action = irreversible ? FilterActions.Hide : FilterActions.Warn;
+			if (Params.Has("expires_in"))
+				filter.ExpiresAt = Params.Int("expires_in") is > 0 and var seconds ? DateTime.UtcNow.AddSeconds(seconds) : default;
+			return default;
+		}
+
+		[HttpPost("/api/v1/filters"), Scope("write:filters")]
+		public async Task<IActionResult> CreateV1(CancellationToken token)
+		{
+			if (await DB.Default.CountAsync<PersonaFilter>(f => f.AvatarId == MyId, token) >= MaxFilters)
+				return Invalid("Too many filters");
+			var keyword = new FilterKeyword { Id = NewId(), WholeWord = true };
+			var filter = new PersonaFilter { AvatarId = MyId, Keywords = new List<FilterKeyword> { keyword } };
+			if (ApplyV1(filter, keyword, creating: true) is { } problem)
+				return Invalid(problem);
+			await DB.Default.SaveAsync(filter, token);
+			return Json(V1(filter, keyword));
+		}
+
+		[HttpPut("/api/v1/filters/{id}"), Scope("write:filters")]
+		public async Task<IActionResult> UpdateV1(string id, CancellationToken token)
+		{
+			if (await WithKeyword(id, token) is not { } filter)
+				return NotFoundError();
+			var keyword = filter.Keywords.First(k => k.Id == id);
+			if (ApplyV1(filter, keyword, creating: false) is { } problem)
+				return Invalid(problem);
+			await DB.Default.SaveAsync(filter, token);
+			return Json(V1(filter, keyword));
+		}
+
+		// the keyword goes, and its filter with it when nothing else is left in it
+		[HttpDelete("/api/v1/filters/{id}"), Scope("write:filters")]
+		public async Task<IActionResult> DeleteV1(string id, CancellationToken token)
+		{
+			if (await WithKeyword(id, token) is not { } filter)
+				return NotFoundError();
+			filter.Keywords.RemoveAll(k => k.Id == id);
+			if (filter.Keywords.Count == 0 && filter.Statuses.Count == 0)
+				await DB.Default.DeleteAsync<PersonaFilter>(filter.ID);
+			else
+				await DB.Default.SaveAsync(filter, token);
+			return Json(new { });
+		}
+	}
+}

PrivaPub/Api/Mastodon/Controllers/SearchController.cs

@@ -84,12 +84,6 @@ namespace PrivaPub.Api.Mastodon.Controllers
 		[HttpGet("/api/v1/custom_emojis"), Microsoft.AspNetCore.Authorization.AllowAnonymous]
 		public IActionResult CustomEmojis() => Json(Array.Empty<object>());
 
-		[HttpGet("/api/v1/filters"), Scope("read:filters")]
-		public IActionResult FiltersV1() => Json(Array.Empty<object>());
-
-		[HttpGet("/api/v2/filters"), Scope("read:filters")]
-		public IActionResult FiltersV2() => Json(Array.Empty<object>());
-
 		[HttpGet("/api/v1/announcements"), Microsoft.AspNetCore.Authorization.AllowAnonymous]
 		public IActionResult Announcements() => Json(Array.Empty<object>());
 

PrivaPub/Api/Mastodon/Entities/Entities.cs

@@ -178,6 +178,48 @@
 		public string CurrentUser { get; set; } = "denied";
 	}
 
+	public class FilterEntity
+	{
+		public string Id { get; set; }
+		public string Title { get; set; }
+		public List<string> Context { get; set; } = new();
+		public string ExpiresAt { get; set; }
+		public string FilterAction { get; set; }
+		public List<FilterKeywordEntity> Keywords { get; set; } = new();
+		public List<FilterStatusEntity> Statuses { get; set; } = new();
+	}
+
+	public class FilterKeywordEntity
+	{
+		public string Id { get; set; }
+		public string Keyword { get; set; }
+		public bool WholeWord { get; set; }
+	}
+
+	public class FilterStatusEntity
+	{
+		public string Id { get; set; }
+		public string StatusId { get; set; }
+	}
+
+	public class FilterResultEntity
+	{
+		public FilterEntity Filter { get; set; }
+		public List<string> KeywordMatches { get; set; }
+		public List<string> StatusMatches { get; set; }
+	}
+
+	// the v1 filter, which is one keyword of a v2 filter
+	public class FilterV1Entity
+	{
+		public string Id { get; set; }
+		public string Phrase { get; set; }
+		public List<string> Context { get; set; } = new();
+		public bool WholeWord { get; set; }
+		public string ExpiresAt { get; set; }
+		public bool Irreversible { get; set; }
+	}
+
 	public class EmojiReactionEntity
 	{
 		public string Name { get; set; }
@@ -266,7 +308,7 @@
 		public Application Application { get; set; }
 		public string Language { get; set; }
 		public string Text { get; set; }
-		public List<object> Filtered { get; set; } = new();
+		public List<FilterResultEntity> Filtered { get; set; } = new();
 		public PrivaPubStatus Privapub { get; set; }
 		public List<EmojiReactionEntity> EmojiReactions { get; set; } = new();
 		public PleromaStatus Pleroma { get; set; }

PrivaPub/Api/Mastodon/Infrastructure/MastodonParams.cs

@@ -8,14 +8,19 @@ namespace PrivaPub.Api.Mastodon.Infrastructure
 	{
 		readonly Dictionary<string, List<string>> _values;
 
-		MastodonParams(Dictionary<string, List<string>> values)
+		MastodonParams(Dictionary<string, List<string>> values, JsonElement? json = default)
 		{
 			_values = values;
+			Json = json;
 		}
 
+		// a JSON body as it came, for what flattening loses: which fields belong to the same object of an array
+		public JsonElement? Json { get; }
+
 		public static async Task<MastodonParams> Read(HttpRequest request, CancellationToken token)
 		{
 			var values = new Dictionary<string, List<string>>(StringComparer.Ordinal);
+			JsonElement? json = default;
 			foreach (var pair in request.Query)
 				foreach (var value in pair.Value)
 					Add(values, pair.Key, value);
@@ -33,12 +38,13 @@ namespace PrivaPub.Api.Mastodon.Infrastructure
 				{
 					using var document = await JsonDocument.ParseAsync(request.Body, cancellationToken: token);
 					Flatten(values, default, document.RootElement);
+					json = document.RootElement.Clone();
 				}
 				catch (JsonException)
 				{
 				}
 			}
-			return new MastodonParams(values);
+			return new MastodonParams(values, json);
 		}
 
 		public static MastodonParams From(IEnumerable<KeyValuePair<string, string>> pairs)
@@ -51,6 +57,8 @@ namespace PrivaPub.Api.Mastodon.Infrastructure
 
 		public bool Has(string name) => _values.ContainsKey(name);
 
+		public IEnumerable<string> Names => _values.Keys;
+
 		public string Get(string name) => _values.TryGetValue(name, out var list) && list.Count > 0 ? list[^1] : default;
 
 		public IReadOnlyList<string> List(string name) => _values.TryGetValue(name, out var list) ? list : (IReadOnlyList<string>)Array.Empty<string>();

PrivaPub/Api/Mastodon/Mappers/MastodonMapper.cs

@@ -197,6 +197,7 @@ namespace PrivaPub.Api.Mastodon.Mappers
 			var hidden = viewerId == default || !hideFromViewer
 				? new HashSet<string>()
 				: await Domain.Relationships.Hidden.AuthorsHiddenFrom(viewerId, all.Select(p => p.ActorURI), forNotifications: false, token);
+			var filters = await Domain.Social.Filters.Of(viewerId, token);
 			var reblogged = viewerId == default
 				? new HashSet<string>()
 				: (await _dbEntities.Posts.Match(p => p.AuthorAccountId == viewerId && ids.Contains(p.ReblogOfPostId) && !p.DeletedAt.HasValue).ExecuteAsync(token))
@@ -238,7 +239,8 @@ namespace PrivaPub.Api.Mastodon.Mappers
 					EmojiReactions = reactions.GetValueOrDefault(post.ID) ?? new(),
 					Pleroma = new PleromaStatus { EmojiReactions = reactions.GetValueOrDefault(post.ID) ?? new() },
 					Mentions = post.Mentions.Where(m => !m.Silent).Select(m => Mention(m, mentionAccounts)).Where(m => m != default).ToList(),
-					Tags = post.Tags.Select(t => new StatusTag { Name = t, Url = ActivityPubRenderer.TagUrl(_localActors.BaseAddress, t) }).ToList()
+					Tags = post.Tags.Select(t => new StatusTag { Name = t, Url = ActivityPubRenderer.TagUrl(_localActors.BaseAddress, t) }).ToList(),
+					Filtered = filters.Of(post)
 				};
 				return status;
 			}
@@ -287,6 +289,7 @@ namespace PrivaPub.Api.Mastodon.Mappers
 						continue;
 					Quote(inner, original);
 					status.Reblog = inner;
+					status.Filtered = inner.Filtered;//a boost is filtered as what it boosts
 					status.Url = inner.Url;//a boost has no page of its own; /grunts would answer JSON to a browser
 					status.Content = string.Empty;
 					status.Reblogged = reblogged.Contains(original.ID);