Owner decision (2026-10-03, "A remote account deletes itself"): its posts are kept but
hidden everywhere.
- Post.AuthorGone (additive bool). DeleteHandler's actor-delete branch sets it on every
post whose ActorURI is the actor (one update-many), besides dropping its follows and
timeline rows as before. RemotePosts.Build sets it on a post stored later for an
account already marked Deleted.
- One rule in VisibilityPolicy: IsShown (not deleted, author not gone), IsPublic and
CanSee exclude AuthorGone, plus Shown(post) for loaded posts.
- Lookups by id answer 404 through CanSee (statuses/:id and every sub-route, context,
bookmarks, favourites, polls, reactions, search); provenance, account statuses,
home/public/tag timelines, notifications, conversations, reblogged_by, the clientapi
home and post/DM lists, a community's outbox and our Announces filter on IsShown or
IsPublic; the Mastodon mapper never renders a hidden post or a boost of one.
Tests (30 new):
- AuthorGoneTests: the rule, the handler (posts kept, boosts included, follows and rows
gone), a post fetched after the delete, and 20 Mastodon/ActivityPub lookups over HTTP
seen before and hidden after.
- InboxGapTests: actor Update refresh (name, sanitised summary, key rotation in place
and to a new key id) even with an older `updated`; Undo{Follow} by activity id and by
object; Reject of our QuoteRequest (and a stranger's ignored); group-wrapped
Announce{Like} and Announce{Undo{Like}}; a locked persona's pending follow,
FollowRequest notification, and Decide accepting and rejecting with the original Follow.
- JobHandlerTests: AncestorsJobHandler up to its depth limit; PollRefreshJob and
PollCloseJob (local and remote polls); InstanceDescriber from a peer's NodeInfo and
the weekly dedupe through ObjectRecords; LinkPreviews for public posts only;
DeliveryJobHandler outcomes (2xx, 404/410, 429/503 with Retry-After in seconds and as
a date, 5xx) and a signature and Digest the peer can verify; MediaJanitor.Sweep;
OAuthPruner.Prune.
- MigrationTests: _003, _004, _006 and _007 on seeded rows.
- PublicPagesTests: /@user and /@user/{id} (visibility, junk ids, exact CSP,
Referrer-Policy and nosniff), circle 404, community page, the instance actor,
ActivityPub redirects, and markup escaped in posts, titles and bios.
Production changes besides the rule:
- LinkPreviews.Handle re-checks that a post is still shown and public (the rule
Wanted applies) before fetching anything; before, only enqueueing checked it.
- The legacy /clientapi post and DM lists no longer return soft-deleted posts.
- MediaJanitor.Sweep and OAuthPruner.Prune are the loop bodies, now public and tested.
- InstanceDescriber.Address: a protected virtual identity seam so a test can point
the https NodeInfo addresses at a plain-http peer; production behaviour unchanged.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01ELjqpznMFMNrJoJUj6K5p2
123 lines
4.6 KiB
C#
123 lines
4.6 KiB
C#
using MongoDB.Bson.Serialization.Attributes;
|
|
using MongoDB.Entities;
|
|
|
|
namespace PrivaPub.Models.Post
|
|
{
|
|
public class Post : Entity
|
|
{
|
|
public string GroupUserId { get; set; }//local author's Avatar.ID
|
|
public string AuthorAccountId { get; set; }//Avatar.ID or ForeignAvatar.ID
|
|
public string AnsweringToPostId { get; set; }//the parent's Post.ID when we hold it
|
|
public string InReplyToURI { get; set; }
|
|
public string InReplyToAccountId { get; set; }
|
|
public string GroupId { get; set; }
|
|
public string ConversationId { get; set; }//DmGroup.ID of a direct post
|
|
public string AudienceURI { get; set; }//a remote community the post was made in
|
|
public string ReblogOfPostId { get; set; }
|
|
public PostVisibility Visibility { get; set; }
|
|
public string Title { get; set; }
|
|
public string SpoilerText { get; set; }
|
|
public string Excerpt { get; set; }//a non-Note's summary: a teaser, a description, an event's date and place
|
|
public string Text { get; set; }
|
|
public string ContentHtml { get; set; }
|
|
public ContentFormat ContentFormat { get; set; }
|
|
public string Language { get; set; }
|
|
public List<PostMention> Mentions { get; set; } = new();
|
|
public List<string> Tags { get; set; } = new();
|
|
public List<PostMedia> Media { get; set; } = new();
|
|
public List<CustomEmoji> Emojis { get; set; } = new();
|
|
[BsonIgnoreIfNull]
|
|
public PostSource Source { get; set; }//the remote author's own text (Markdown, MFM, BBCode)
|
|
[BsonIgnoreIfNull]
|
|
public string CoverURL { get; set; }//a remote object's own image: article cover, video poster, event banner
|
|
[BsonIgnoreIfNull]
|
|
public PostLink Link { get; set; }
|
|
[BsonIgnoreIfNull]
|
|
public VideoDetails Video { get; set; }
|
|
[BsonIgnoreIfNull]
|
|
public AudioDetails Audio { get; set; }
|
|
[BsonIgnoreIfNull]
|
|
public EventDetails Event { get; set; }
|
|
[BsonIgnoreIfNull]
|
|
public PostPoll Poll { get; set; }
|
|
public List<float> Location { get; set; } = new();
|
|
public float RangeKm { get; set; } = 5.0f;
|
|
[BsonIgnoreIfNull]
|
|
public Coordinates2D Geo { get; set; }
|
|
[BsonIgnoreIfNull]
|
|
public double? Distance { get; set; }
|
|
public bool HasContentWarning { get; set; } = false;
|
|
public bool IsLocalOnly { get; set; }
|
|
public bool AuthorGone { get; set; }//its remote author deleted their account: kept, but hidden everywhere (VisibilityPolicy)
|
|
|
|
public bool IsFederatedCopy { get; set; }
|
|
public string ObjectURI { get; set; }//the Note's id
|
|
public string ObjectType { get; set; }//the remote object's type: Note, Article, Page, Video, Event…; null for local posts
|
|
public string ActivityURI { get; set; }//the Create's id
|
|
public string ActorURI { get; set; }//attributedTo
|
|
public string Url { get; set; }
|
|
public string ContextURI { get; set; }
|
|
public string QuoteURI { get; set; }
|
|
public string QuotedPostId { get; set; }//our copy of the quoted post, once fetched
|
|
public QuoteState QuoteState { get; set; }
|
|
public string QuoteAuthorizationURI { get; set; }//FEP-044f: the quoted author's stamp
|
|
public bool QuoteByConsent { get; set; }
|
|
public string LocalQuotePolicy { get; set; }//who may quote this local post: QuotePolicies.Public, Followers or Nobody//our quote of a post whose server asks for consent (FEP-044f), so `quote` is sent
|
|
public int QuotesCount { get; set; }
|
|
[BsonIgnoreIfNull]
|
|
public InteractionRule QuotePolicy { get; set; }//a remote post's interactionPolicy.canQuote; null when it states none
|
|
public List<string> To { get; set; } = new();
|
|
public List<string> Cc { get; set; } = new();
|
|
|
|
public int RepliesCount { get; set; }
|
|
public int FavouritesCount { get; set; }
|
|
public int DownvotesCount { get; set; }//Lemmy, PieFed, Mbin and Friendica Dislikes
|
|
public int ReblogsCount { get; set; }
|
|
public List<PostRevision> Revisions { get; set; } = new();
|
|
|
|
public DateTime CreationDate { get; set; } = DateTime.UtcNow;
|
|
public DateTime? UpdateDate { get; set; } = DateTime.UtcNow;
|
|
public DateTime? EditedAt { get; set; }
|
|
public DateTime? DeletedAt { get; set; }
|
|
public string UpdateReason { get; set; }
|
|
}
|
|
|
|
public enum QuoteState
|
|
{
|
|
None,
|
|
Pending,
|
|
Accepted,
|
|
Rejected,
|
|
Revoked,
|
|
Deleted,
|
|
Unauthorized
|
|
}
|
|
|
|
public enum PostVisibility
|
|
{
|
|
Public,
|
|
Unlisted,
|
|
FollowersOnly,
|
|
Direct,
|
|
Circle,
|
|
LocalGeo
|
|
}
|
|
|
|
public class PostMention
|
|
{
|
|
public string ActorURI { get; set; }
|
|
public string AccountId { get; set; }
|
|
public string Handle { get; set; }
|
|
public bool IsLocal { get; set; }
|
|
}
|
|
|
|
public class PostRevision
|
|
{
|
|
public string Title { get; set; }
|
|
public string SpoilerText { get; set; }
|
|
public string ContentHtml { get; set; }
|
|
public bool HasContentWarning { get; set; }
|
|
public DateTime EditedAt { get; set; }
|
|
}
|
|
}
|