thepraandClaude Opus 5.5
9f68ca3ed0
Roles (user, moderator, administrator) from the CLI and /clientapi/admin/roots/{id}/role, never one's own nor the last
administrator. Silence keeps an account's posts out of public timelines, hashtags, trends, search and relays while its
followers still get them; suspension refuses and revokes a local persona's tokens, answers 404 for its posts and
collections, holds back every delivery and tells other servers nothing new, its actor unchanged; a suspended remote
account's activities are dropped and nothing goes to its own inbox (a shared one still serves its server). A banned
login's personas are held back in memory alone (Restrictions), so nothing pairs them in stored data. Personas and groups
are deleted one at a time (PersonaRemoval, GroupRemoval), by their login or an administrator with the password. Reports
resolve with an action and a note; posts are taken down, a remote copy hidden. Warnings reach the persona as Mastodon's
moderation_warning. Every staff act goes to the staff's log. Migration _020 limits posts from servers already silenced;
a restore keeps the moderation made since the backup.
Verified: interop.sh moderation gts mastodon with SecureMode, 194 passed; restore.sh, 25 passed, now with a suspension,
a silence and a takedown made after the backup.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01WpVCoDeM1qUTRp4fXQdfof
79 lines
3.4 KiB
C#
79 lines
3.4 KiB
C#
using MongoDB.Driver;
|
|
using MongoDB.Entities;
|
|
|
|
using PrivaPub.Models.Social;
|
|
|
|
namespace PrivaPub.Domain.Social
|
|
{
|
|
public static class Notifications
|
|
{
|
|
public static async Task Add(string avatarId, NotificationType type, string fromAccountId, string fromActorUri, string postId,
|
|
CancellationToken token, string emoji = default, string emojiUrl = default, string text = default)
|
|
{
|
|
if (string.IsNullOrEmpty(avatarId) || avatarId == fromAccountId && type != NotificationType.Poll)
|
|
return;
|
|
if ((await Relationships.Hidden.AuthorsHiddenFrom(avatarId, new[] { fromActorUri }, forNotifications: true, token)).Count > 0)
|
|
return;
|
|
var action = await NotificationPolicies.Judge(avatarId, type, fromAccountId, fromActorUri, postId, token);
|
|
if (action == NotificationAction.Drop)
|
|
return;
|
|
try
|
|
{
|
|
var notification = new Notification
|
|
{
|
|
AvatarId = avatarId,
|
|
Type = type,
|
|
FromAccountId = fromAccountId,
|
|
FromActorURI = fromActorUri,
|
|
PostId = postId,
|
|
Emoji = emoji,
|
|
EmojiURL = emojiUrl,
|
|
Text = text,
|
|
DedupeKey = emoji == default ? $"{type}|{avatarId}|{fromActorUri}|{postId}" : $"{type}|{avatarId}|{fromActorUri}|{postId}|{emoji}",
|
|
Filtered = action == NotificationAction.Filter
|
|
};
|
|
await DB.Default.SaveAsync(notification, token);
|
|
// filtered: in its account's request, told to no stream
|
|
if (notification.Filtered)
|
|
{
|
|
await NotificationPolicies.Requested(notification, token);
|
|
return;
|
|
}
|
|
var told = new Timelines.Streams.Event("notification", notification.ID);
|
|
Timelines.Streams.ToPersona(avatarId, new Timelines.Streams.Key(Timelines.Streams.User), told);
|
|
Timelines.Streams.ToPersona(avatarId, new Timelines.Streams.Key(Timelines.Streams.UserNotification), told);
|
|
}
|
|
catch (MongoWriteException ex) when (ex.WriteError?.Category == ServerErrorCategory.DuplicateKey)
|
|
{
|
|
}
|
|
}
|
|
|
|
// A warning from this server's staff (completion program R6): Mastodon's moderation_warning, from the persona itself as
|
|
// Mastodon's are (an AccountWarning has no account behind it), never judged by the notification policy, one for each
|
|
// act. A suspended persona reads it once its suspension is lifted; until then its login sees it suspended in its list
|
|
// of personas (/clientapi/avatar/private/list).
|
|
public static async Task Warn(string avatarId, string personaUri, string action, string text, IReadOnlyList<string> postIds, CancellationToken token)
|
|
{
|
|
if (string.IsNullOrEmpty(avatarId))
|
|
return;
|
|
var ids = postIds?.Where(id => !string.IsNullOrEmpty(id)).Distinct().ToList() ?? new List<string>();
|
|
var notification = new Notification
|
|
{
|
|
AvatarId = avatarId,
|
|
Type = NotificationType.ModerationWarning,
|
|
FromAccountId = avatarId,
|
|
FromActorURI = personaUri,
|
|
PostId = ids.FirstOrDefault(),
|
|
StatusIds = ids.Count > 1 ? ids : null,
|
|
Text = string.IsNullOrWhiteSpace(text) ? default : text.Trim(),
|
|
WarningAction = action,
|
|
DedupeKey = $"{NotificationType.ModerationWarning}|{avatarId}|staff|{MongoDB.Bson.ObjectId.GenerateNewId()}"
|
|
};
|
|
await DB.Default.SaveAsync(notification, CancellationToken.None);//an act that was done is told even when its request went away
|
|
var told = new Timelines.Streams.Event("notification", notification.ID);
|
|
Timelines.Streams.ToPersona(avatarId, new Timelines.Streams.Key(Timelines.Streams.User), told);
|
|
Timelines.Streams.ToPersona(avatarId, new Timelines.Streams.Key(Timelines.Streams.UserNotification), told);
|
|
}
|
|
}
|
|
}
|