R6 moderation: roles, silence and suspension, bans that write nothing on the personas, deletions, report actions

Roles (user, moderator, administrator) from the CLI and /clientapi/admin/roots/{id}/role, never one's own nor the last
administrator. Silence keeps an account's posts out of public timelines, hashtags, trends, search and relays while its
followers still get them; suspension refuses and revokes a local persona's tokens, answers 404 for its posts and
collections, holds back every delivery and tells other servers nothing new, its actor unchanged; a suspended remote
account's activities are dropped and nothing goes to its own inbox (a shared one still serves its server). A banned
login's personas are held back in memory alone (Restrictions), so nothing pairs them in stored data. Personas and groups
are deleted one at a time (PersonaRemoval, GroupRemoval), by their login or an administrator with the password. Reports
resolve with an action and a note; posts are taken down, a remote copy hidden. Warnings reach the persona as Mastodon's
moderation_warning. Every staff act goes to the staff's log. Migration _020 limits posts from servers already silenced;
a restore keeps the moderation made since the backup.

Verified: interop.sh moderation gts mastodon with SecureMode, 194 passed; restore.sh, 25 passed, now with a suspension,
a silence and a takedown made after the backup.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01WpVCoDeM1qUTRp4fXQdfof

PrivaPub/Domain/Moderation/ModerationLog.cs

@@ -15,7 +15,8 @@ namespace PrivaPub.Domain.Moderation
 
 	// The staff's log (completion program R5): administrators read all of it, moderators what isn't about a login
 	// (ModeratorController's /clientapi/moderator/log). An entry never holds an IP address, and never pairs a root with its
-	// own personas: an act on a persona that the acting root owns is kept without who acted.
+	// own personas: an act on a persona that the acting root owns, on a post of it, a group it owns or a report about it
+	// (R6), is kept without who acted.
 	public class ModerationLog : IModerationLog
 	{
 		const int MaxLabel = 200;
@@ -33,8 +34,7 @@ namespace PrivaPub.Domain.Moderation
 		{
 			try
 			{
-				if (targetKind == AdminTargets.Persona && byRootId != default && byRootId != AdminAction.Cli && targetId != default
-					&& await DB.Default.Find<RootToAvatar>().Match(r => r.RootId == byRootId && r.AvatarId == targetId).ExecuteAnyAsync(token))
+				if (byRootId != default && byRootId != AdminAction.Cli && await OwnPersona(byRootId, targetKind, targetId, reportId, token))
 					byRootId = default;
 				await DB.Default.SaveAsync(new AdminAction
 				{
@@ -53,6 +53,37 @@ namespace PrivaPub.Domain.Moderation
 			}
 		}
 
+		// whether what an entry is about is a persona of the acting login: the persona itself, a post of it, a group it owns,
+		// or a report about it (R6) — any of them would pair the login with that persona
+		static async Task<bool> OwnPersona(string rootId, string targetKind, string targetId, string reportId, CancellationToken token)
+		{
+			var personas = new List<string>();
+			if (targetId != default)
+				switch (targetKind)
+				{
+					case AdminTargets.Persona:
+						personas.Add(targetId);
+						break;
+					case AdminTargets.Post when MongoDB.Bson.ObjectId.TryParse(targetId, out _):
+						if (await DB.Default.Find<Models.Post.Post>().MatchID(targetId).Match(p => !p.IsFederatedCopy)
+							.Project(p => p.Include(x => x.GroupUserId)).ExecuteFirstAsync(token) is { GroupUserId: { } author })
+							personas.Add(author);
+						break;
+					case AdminTargets.Group when MongoDB.Bson.ObjectId.TryParse(targetId, out _):
+						if (await DB.Default.Find<Models.Group.Group>().MatchID(targetId).Project(g => g.Include(x => x.OwnerAvatarId))
+							.ExecuteFirstAsync(token) is { OwnerAvatarId: { } owner })
+							personas.Add(owner);
+						break;
+				}
+			var report = reportId ?? (targetKind == AdminTargets.Report ? targetId : default);
+			if (report != default && MongoDB.Bson.ObjectId.TryParse(report, out _)
+				&& await DB.Default.Find<Models.Social.Report>().MatchID(report).Project(r => r.Include(x => x.TargetAccountId)).ExecuteFirstAsync(token)
+					is { TargetAccountId: { } reported })
+				personas.Add(reported);
+			return personas.Count > 0
+				&& await DB.Default.Find<RootToAvatar>().Match(r => r.RootId == rootId && personas.Contains(r.AvatarId)).ExecuteAnyAsync(token);
+		}
+
 		static string Cut(string text, int max) =>
 			string.IsNullOrEmpty(text) ? text : text.Length <= max ? text : text[..(max - 1)] + "…";
 	}