0 Fork 0

T

thepraandClaude Opus 5.5 128ff89426 Followers and circle members may like, react, vote and downvote

LikeHandler.MaySee let a remote account interact with a followers-only
post only when the post named it in to, cc or its mentions. Our own
followers-only posts are addressed to the followers collection, never to
each follower, and circle posts were not considered at all, so every
like, reaction, downvote and poll vote from a follower on a
followers-only post, and from a member on a circle post, was dropped as
"not-visible". Likes, dislikes, reactions and poll votes now ask
VisibilityPolicy.RemoteCanSee: anyone for public and unlisted posts, an
addressed account for a DM, an accepted follower or an addressed account
for followers-only, a foreign member for a circle post, and never a
server's instance actor (SignedFetchAuthorizer's alias is for refetches
only).

Found by planning the town's multi-server interaction checks (G-0001).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01LsXgEaXee4GCU1hwYgPJXw

2026-10-04 23:05:22 +02:00

.gitea/workflows

Everything on, phase 2 completed: SecureMode on in production, checked by the deploy

2026-10-04 03:34:48 +02:00

deploy

Everything on, phase 1: geolocation fetches itself, the deploy signs in as @thepra , the crawler is on, sign-up by invitation

2026-10-04 02:37:38 +02:00

docs

CDNs found by themselves, and servers followed through time

2026-10-04 11:33:39 +02:00

PrivaPub

Followers and circle members may like, react, vote and downvote

2026-10-04 23:05:22 +02:00

PrivaPub.ClientModels

Everything on, phase 3: sign-in and recovery tell nothing, recovered passwords end sessions, deleted roots are gone everywhere

2026-10-04 03:16:59 +02:00

PrivaPub.Tests

Followers and circle members may like, react, vote and downvote

2026-10-04 23:05:22 +02:00

tools

docs: FEDERATION.md tested against six peers with signed fetches, the shipped FEPs; v1.19.1 and v1.20.0 in ROADMAP

2026-10-04 04:16:16 +02:00

.gitignore

T9: the pasture as plugins

2026-10-03 11:42:03 +02:00

CLAUDE.md

CDNs found by themselves, and servers followed through time

2026-10-04 11:33:39 +02:00

Directory.Build.props

net10, the refactor finished, and federation that works

2026-10-01 08:05:56 +02:00

FEDERATION.md

docs: FEDERATION.md tested against six peers with signed fetches, the shipped FEPs; v1.19.1 and v1.20.0 in ROADMAP

2026-10-04 04:16:16 +02:00

global.json

net10, the refactor finished, and federation that works

2026-10-01 08:05:56 +02:00

LICENSE

Initial commit

2023-02-18 08:50:05 +01:00

PrivaPub.sln

Every outbound federation request goes through one guarded client

2026-10-01 10:46:09 +02:00

README.md

CLAUDE.md, a README, and the roadmap to full ActivityPub interop

2026-10-01 10:38:35 +02:00

README.md

PrivaPub

A self-hosted ActivityPub server in C# (.NET 10, MongoDB) where one private login owns several unlinkable public personas. It federates with Mastodon, GoToSocial, Pleroma/Akkoma, Misskey and Lemmy.

Live: https://privapub.thepra.dev
Client: decePubClient, https://decepub.thepra.dev
Architecture, conventions and deploy: CLAUDE.md
Decisions and the plan to full ActivityPub interop: docs/ROADMAP.md

dotnet build PrivaPub.sln -c Release