@oxy.so/federation 2.8.0 → 2.10.0

package/README.md

@@ -50,3 +50,18 @@ gone, the way Mastodon handles account deletion:
 
 The app's own content routes (outbox, posts) can answer the same way with
 `goneTombstone(id)`.
+
+## Community collections
+
+A local `Group` (an account whose kind is `community`, see
+`isGroupActorKind`) serves its outbox and followers in the shapes Lemmy
+deserializes, because Lemmy and PieFed read neither paging nor `first`:
+
+- **Outbox:** one `OrderedCollection` with its latest `GROUP_OUTBOX_SIZE` (50)
+  `Announce { Create }` activities inline in `orderedItems`. The outbox is an
+  app content route; build it with `groupOutboxCollection`.
+- **Followers:** `createActorRouter` serves a `Collection` with `totalItems` and
+  `items: []`, the count without the list, as Lemmy does
+  (`groupFollowersCollection`).
+
+Every other actor keeps the paged `OrderedCollection` that Mastodon walks.

package/dist/cjs/actorObject.js

@@ -287,11 +287,14 @@ function createLocalActorBuilder(config) {
         // `attributedTo` (Lemmy, PieFed; Mbin reads `moderators`) and says anybody
         // may post into it. PeerTube refuses a `Group` without `attributedTo`, and a
         // `Group` claiming `postingRestrictedToMods` is read as a channel by every
-        // implementation, ours included ({@link accountKindForActor}).
+        // implementation, ours included ({@link accountKindForActor}). `sensitive`
+        // is Lemmy's NSFW flag on a community, sent as Lemmy sends it; an Oxy
+        // community has no NSFW setting.
         if (actorObject.type === exports.LOCAL_ACTOR_TYPE_BY_ACCOUNT_KIND.community) {
             actorObject.attributedTo = config.urls.moderators(username);
             actorObject.moderators = config.urls.moderators(username);
             actorObject.postingRestrictedToMods = false;
+            actorObject.sensitive = false;
         }
         const aliases = normalizeAlsoKnownAs(params.alsoKnownAs);
         if (aliases.length > 0) {

package/dist/cjs/groupCollections.js

@@ -0,0 +1,61 @@
+"use strict";
+/**
+ * How a local `Group` (an Oxy community) publishes its outbox and followers:
+ * the shapes Lemmy itself serves and reads back, not the paged
+ * `OrderedCollection` + `first` link every other local actor serves.
+ *
+ * Lemmy deserializes a community's collections into fixed structs that know
+ * nothing of paging (`crates/apub/apub/src/protocol/collections/`):
+ *  - outbox → `GroupOutbox { orderedItems: Vec<Announce> }`, `orderedItems`
+ *    REQUIRED inline. A summary with only `first` fails to parse, so a server
+ *    discovering the community backfills nothing. PieFed reads the same inline
+ *    `orderedItems` and nothing else.
+ *  - followers → `GroupFollowers { type: "Collection", totalItems, items }`,
+ *    read for the subscriber count. Lemmy serves `items: []`, so the follower
+ *    list stays private; this does the same.
+ *
+ * Mastodon reads `totalItems` from either shape, so a `Group` followed from
+ * Mastodon keeps its counts. `Person`, `Organization` and `Service` actors keep
+ * the paged shape Mastodon walks.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GROUP_OUTBOX_SIZE = void 0;
+exports.isGroupActorKind = isGroupActorKind;
+exports.groupOutboxCollection = groupOutboxCollection;
+exports.groupFollowersCollection = groupFollowersCollection;
+const actorObject_1 = require("./actorObject");
+const apContext_1 = require("./apContext");
+/** How many of its latest `Announce`s a `Group`'s outbox lists inline (Lemmy's own size). */
+exports.GROUP_OUTBOX_SIZE = 50;
+/**
+ * Whether a local account of this kind is announced as a `Group`
+ * ({@link LOCAL_ACTOR_TYPE_BY_ACCOUNT_KIND}) and so serves the Group
+ * collections: moderators, and the outbox and followers in the shapes above.
+ */
+function isGroupActorKind(kind) {
+    return (0, actorObject_1.localActorTypeForAccountKind)(kind) === actorObject_1.LOCAL_ACTOR_TYPE_BY_ACCOUNT_KIND.community;
+}
+/**
+ * A `Group`'s outbox: one unpaged `OrderedCollection` of its latest
+ * `Announce { Create }` activities, newest first. Each item's own `@context` is
+ * dropped; the collection's covers it.
+ */
+function groupOutboxCollection(params) {
+    return {
+        '@context': apContext_1.AP_CONTEXT,
+        id: params.id,
+        type: 'OrderedCollection',
+        totalItems: params.totalItems,
+        orderedItems: params.orderedItems.map(({ '@context': _context, ...item }) => item),
+    };
+}
+/** A `Group`'s followers: the count, and an empty `items` list. */
+function groupFollowersCollection(params) {
+    return {
+        '@context': apContext_1.AP_CONTEXT,
+        id: params.id,
+        type: 'Collection',
+        totalItems: params.totalItems,
+        items: [],
+    };
+}

package/dist/cjs/index.js

@@ -22,7 +22,7 @@
  * knowledge of any app's post shape.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.LOCAL_ACTOR_TYPE_BY_ACCOUNT_KIND = exports.AP_ACTOR_TYPES = exports.isApActorType = exports.accountKindForActor = exports.localActorTypeForAccountKind = exports.normalizeAlsoKnownAs = exports.createLocalActorBuilder = exports.createDomainPolicy = exports.extractActorUriFromActivityId = exports.isSameFederationHost = exports.canonicalFederationHost = exports.AP_CONTEXT = exports.readProxyDeclarations = exports.upstreamHandleFromProxyOf = exports.upstreamHandleFromPreferredUsername = exports.upstreamHandleFromAutomatedActor = exports.upstreamHandleFromAlsoKnownAs = exports.upstreamHandleFromProfileField = exports.federatedUsernameFromUpstreamUrl = exports.parseUpstreamProfileUrl = exports.upstreamProfileUrl = exports.stripBridgeBoilerplate = exports.createBridgeRelabeller = exports.blueskyUsernameFromHandle = exports.BSKY_NETWORK_DOMAIN = exports.FEDERATION_NETWORKS = exports.INSTANCE_ACTOR_USERNAME = exports.normalizeActorUsername = exports.createUrlBuilders = exports.DEFAULT_SIGNED_CONTENT_TYPE = exports.HTTP_SIGNATURE_ALGORITHM = exports.verifyHttpSignature = exports.signRequest = void 0;
+exports.groupFollowersCollection = exports.groupOutboxCollection = exports.isGroupActorKind = exports.GROUP_OUTBOX_SIZE = exports.LOCAL_ACTOR_TYPE_BY_ACCOUNT_KIND = exports.AP_ACTOR_TYPES = exports.isApActorType = exports.accountKindForActor = exports.localActorTypeForAccountKind = exports.normalizeAlsoKnownAs = exports.createLocalActorBuilder = exports.createDomainPolicy = exports.extractActorUriFromActivityId = exports.isSameFederationHost = exports.canonicalFederationHost = exports.AP_CONTEXT = exports.readProxyDeclarations = exports.upstreamHandleFromProxyOf = exports.upstreamHandleFromPreferredUsername = exports.upstreamHandleFromAutomatedActor = exports.upstreamHandleFromAlsoKnownAs = exports.upstreamHandleFromProfileField = exports.federatedUsernameFromUpstreamUrl = exports.parseUpstreamProfileUrl = exports.upstreamProfileUrl = exports.stripBridgeBoilerplate = exports.createBridgeRelabeller = exports.blueskyUsernameFromHandle = exports.BSKY_NETWORK_DOMAIN = exports.FEDERATION_NETWORKS = exports.INSTANCE_ACTOR_USERNAME = exports.normalizeActorUsername = exports.createUrlBuilders = exports.DEFAULT_SIGNED_CONTENT_TYPE = exports.HTTP_SIGNATURE_ALGORITHM = exports.verifyHttpSignature = exports.signRequest = void 0;
 /**
  * HTTP Signatures (draft-cavage) — the pure sign/verify crypto every Oxy app's
  * ActivityPub federation shares. Private-key custody is injected; the key never
@@ -99,3 +99,12 @@ Object.defineProperty(exports, "accountKindForActor", { enumerable: true, get: f
 Object.defineProperty(exports, "isApActorType", { enumerable: true, get: function () { return actorObject_1.isApActorType; } });
 Object.defineProperty(exports, "AP_ACTOR_TYPES", { enumerable: true, get: function () { return actorObject_1.AP_ACTOR_TYPES; } });
 Object.defineProperty(exports, "LOCAL_ACTOR_TYPE_BY_ACCOUNT_KIND", { enumerable: true, get: function () { return actorObject_1.LOCAL_ACTOR_TYPE_BY_ACCOUNT_KIND; } });
+/**
+ * A local `Group`'s outbox and followers, in the shapes Lemmy serves and reads
+ * back; every other actor keeps the paged collections.
+ */
+var groupCollections_1 = require("./groupCollections");
+Object.defineProperty(exports, "GROUP_OUTBOX_SIZE", { enumerable: true, get: function () { return groupCollections_1.GROUP_OUTBOX_SIZE; } });
+Object.defineProperty(exports, "isGroupActorKind", { enumerable: true, get: function () { return groupCollections_1.isGroupActorKind; } });
+Object.defineProperty(exports, "groupOutboxCollection", { enumerable: true, get: function () { return groupCollections_1.groupOutboxCollection; } });
+Object.defineProperty(exports, "groupFollowersCollection", { enumerable: true, get: function () { return groupCollections_1.groupFollowersCollection; } });

package/dist/cjs/node/actorRouter.js

@@ -9,7 +9,8 @@
  *    signature verification (Phase 2, `trustForwardedHost`) and actor-match, then
  *    202 + async dispatch to the injected inbound dispatcher,
  *  - `GET /users/:username/followers` + `/following` — the OXY follow graph
- *    (local + bridged federated edges) as paginated `OrderedCollection`s,
+ *    (local + bridged federated edges) as paginated `OrderedCollection`s; a
+ *    community `Group`'s followers are only counted (`groupCollections.ts`),
  *  - `GET /users/:username/moderators` — a community `Group`'s moderators.
  *
  * The CONTENT routes (`outbox`, `featured`, per-post dereference) stay in the app,
@@ -27,7 +28,7 @@ const apContext_1 = require("../apContext");
 const httpCacheControl_1 = require("./httpCacheControl");
 const httpSignature_1 = require("../httpSignature");
 const urls_1 = require("../urls");
-const actorObject_1 = require("../actorObject");
+const groupCollections_1 = require("../groupCollections");
 const goneActor_1 = require("./goneActor");
 /** Page size for the paginated followers/following collections (mirrors the outbox). */
 const FOLLOW_PAGE_SIZE = 20;
@@ -134,7 +135,8 @@ function createActorRouter(config) {
     }
     /**
      * Serve a user's followers OR following as a paginated `OrderedCollection` over
-     * the authoritative Oxy follow graph (local + bridged federated edges).
+     * the authoritative Oxy follow graph (local + bridged federated edges). A
+     * `Group`'s followers are the unpaged, itemless `Collection` Lemmy reads.
      */
     async function serveFollowCollection(req, res, direction, collectionUrl) {
         if (!config.federationEnabled)
@@ -151,7 +153,8 @@ function createActorRouter(config) {
             const userId = String(user._id || user.id);
             const rawCount = direction === 'followers' ? user._count?.followers : user._count?.following;
             const profileTotal = typeof rawCount === 'number' ? rawCount : undefined;
-            if (!page) {
+            const groupFollowers = direction === 'followers' && (0, groupCollections_1.isGroupActorKind)(user.kind);
+            if (!page || groupFollowers) {
                 // Prefer the profile `_count`; only when absent (the rare search fallback)
                 // fetch the authoritative total from a minimal graph list call. Fail-soft
                 // to 0 — never 500 the summary.
@@ -169,6 +172,9 @@ function createActorRouter(config) {
                     }
                 }
                 res.set('Content-Type', apContentType);
+                if (groupFollowers) {
+                    return res.json((0, groupCollections_1.groupFollowersCollection)({ id: collectionUrl(username), totalItems }));
+                }
                 return res.json({
                     '@context': apContext_1.AP_CONTEXT,
                     id: collectionUrl(username),
@@ -346,8 +352,7 @@ function createActorRouter(config) {
                 const user = await config.resolveUser(username);
                 if (!user)
                     return userMissing(res, username);
-                if (!config.consent.isSharingEnabledFromUser(user) ||
-                    (0, actorObject_1.localActorTypeForAccountKind)(user.kind) !== actorObject_1.LOCAL_ACTOR_TYPE_BY_ACCOUNT_KIND.community) {
+                if (!config.consent.isSharingEnabledFromUser(user) || !(0, groupCollections_1.isGroupActorKind)(user.kind)) {
                     return res.status(404).json({ error: 'User not found' });
                 }
                 const moderators = await fetchModerators(String(user._id || user.id));

package/dist/esm/actorObject.js

@@ -279,11 +279,14 @@ export function createLocalActorBuilder(config) {
         // `attributedTo` (Lemmy, PieFed; Mbin reads `moderators`) and says anybody
         // may post into it. PeerTube refuses a `Group` without `attributedTo`, and a
         // `Group` claiming `postingRestrictedToMods` is read as a channel by every
-        // implementation, ours included ({@link accountKindForActor}).
+        // implementation, ours included ({@link accountKindForActor}). `sensitive`
+        // is Lemmy's NSFW flag on a community, sent as Lemmy sends it; an Oxy
+        // community has no NSFW setting.
         if (actorObject.type === LOCAL_ACTOR_TYPE_BY_ACCOUNT_KIND.community) {
             actorObject.attributedTo = config.urls.moderators(username);
             actorObject.moderators = config.urls.moderators(username);
             actorObject.postingRestrictedToMods = false;
+            actorObject.sensitive = false;
         }
         const aliases = normalizeAlsoKnownAs(params.alsoKnownAs);
         if (aliases.length > 0) {

package/dist/esm/groupCollections.js

@@ -0,0 +1,55 @@
+/**
+ * How a local `Group` (an Oxy community) publishes its outbox and followers:
+ * the shapes Lemmy itself serves and reads back, not the paged
+ * `OrderedCollection` + `first` link every other local actor serves.
+ *
+ * Lemmy deserializes a community's collections into fixed structs that know
+ * nothing of paging (`crates/apub/apub/src/protocol/collections/`):
+ *  - outbox → `GroupOutbox { orderedItems: Vec<Announce> }`, `orderedItems`
+ *    REQUIRED inline. A summary with only `first` fails to parse, so a server
+ *    discovering the community backfills nothing. PieFed reads the same inline
+ *    `orderedItems` and nothing else.
+ *  - followers → `GroupFollowers { type: "Collection", totalItems, items }`,
+ *    read for the subscriber count. Lemmy serves `items: []`, so the follower
+ *    list stays private; this does the same.
+ *
+ * Mastodon reads `totalItems` from either shape, so a `Group` followed from
+ * Mastodon keeps its counts. `Person`, `Organization` and `Service` actors keep
+ * the paged shape Mastodon walks.
+ */
+import { LOCAL_ACTOR_TYPE_BY_ACCOUNT_KIND, localActorTypeForAccountKind } from './actorObject.js';
+import { AP_CONTEXT } from './apContext.js';
+/** How many of its latest `Announce`s a `Group`'s outbox lists inline (Lemmy's own size). */
+export const GROUP_OUTBOX_SIZE = 50;
+/**
+ * Whether a local account of this kind is announced as a `Group`
+ * ({@link LOCAL_ACTOR_TYPE_BY_ACCOUNT_KIND}) and so serves the Group
+ * collections: moderators, and the outbox and followers in the shapes above.
+ */
+export function isGroupActorKind(kind) {
+    return localActorTypeForAccountKind(kind) === LOCAL_ACTOR_TYPE_BY_ACCOUNT_KIND.community;
+}
+/**
+ * A `Group`'s outbox: one unpaged `OrderedCollection` of its latest
+ * `Announce { Create }` activities, newest first. Each item's own `@context` is
+ * dropped; the collection's covers it.
+ */
+export function groupOutboxCollection(params) {
+    return {
+        '@context': AP_CONTEXT,
+        id: params.id,
+        type: 'OrderedCollection',
+        totalItems: params.totalItems,
+        orderedItems: params.orderedItems.map(({ '@context': _context, ...item }) => item),
+    };
+}
+/** A `Group`'s followers: the count, and an empty `items` list. */
+export function groupFollowersCollection(params) {
+    return {
+        '@context': AP_CONTEXT,
+        id: params.id,
+        type: 'Collection',
+        totalItems: params.totalItems,
+        items: [],
+    };
+}

package/dist/esm/index.js

@@ -63,3 +63,8 @@ export { canonicalFederationHost, isSameFederationHost, extractActorUriFromActiv
  * follows the Oxy account kind ({@link LOCAL_ACTOR_TYPE_BY_ACCOUNT_KIND}).
  */
 export { createLocalActorBuilder, normalizeAlsoKnownAs, localActorTypeForAccountKind, accountKindForActor, isApActorType, AP_ACTOR_TYPES, LOCAL_ACTOR_TYPE_BY_ACCOUNT_KIND, } from './actorObject.js';
+/**
+ * A local `Group`'s outbox and followers, in the shapes Lemmy serves and reads
+ * back; every other actor keeps the paged collections.
+ */
+export { GROUP_OUTBOX_SIZE, isGroupActorKind, groupOutboxCollection, groupFollowersCollection, } from './groupCollections.js';

package/dist/esm/node/actorRouter.js

@@ -8,7 +8,8 @@
  *    signature verification (Phase 2, `trustForwardedHost`) and actor-match, then
  *    202 + async dispatch to the injected inbound dispatcher,
  *  - `GET /users/:username/followers` + `/following` — the OXY follow graph
- *    (local + bridged federated edges) as paginated `OrderedCollection`s,
+ *    (local + bridged federated edges) as paginated `OrderedCollection`s; a
+ *    community `Group`'s followers are only counted (`groupCollections.ts`),
  *  - `GET /users/:username/moderators` — a community `Group`'s moderators.
  *
  * The CONTENT routes (`outbox`, `featured`, per-post dereference) stay in the app,
@@ -24,7 +25,7 @@ import { AP_CONTEXT } from '../apContext.js';
 import { discoveryCacheControl } from './httpCacheControl.js';
 import { verifyHttpSignature } from '../httpSignature.js';
 import { INSTANCE_ACTOR_USERNAME, normalizeActorUsername } from '../urls.js';
-import { LOCAL_ACTOR_TYPE_BY_ACCOUNT_KIND, localActorTypeForAccountKind, } from '../actorObject.js';
+import { groupFollowersCollection, isGroupActorKind } from '../groupCollections.js';
 import { goneTombstone } from './goneActor.js';
 /** Page size for the paginated followers/following collections (mirrors the outbox). */
 const FOLLOW_PAGE_SIZE = 20;
@@ -131,7 +132,8 @@ export function createActorRouter(config) {
     }
     /**
      * Serve a user's followers OR following as a paginated `OrderedCollection` over
-     * the authoritative Oxy follow graph (local + bridged federated edges).
+     * the authoritative Oxy follow graph (local + bridged federated edges). A
+     * `Group`'s followers are the unpaged, itemless `Collection` Lemmy reads.
      */
     async function serveFollowCollection(req, res, direction, collectionUrl) {
         if (!config.federationEnabled)
@@ -148,7 +150,8 @@ export function createActorRouter(config) {
             const userId = String(user._id || user.id);
             const rawCount = direction === 'followers' ? user._count?.followers : user._count?.following;
             const profileTotal = typeof rawCount === 'number' ? rawCount : undefined;
-            if (!page) {
+            const groupFollowers = direction === 'followers' && isGroupActorKind(user.kind);
+            if (!page || groupFollowers) {
                 // Prefer the profile `_count`; only when absent (the rare search fallback)
                 // fetch the authoritative total from a minimal graph list call. Fail-soft
                 // to 0 — never 500 the summary.
@@ -166,6 +169,9 @@ export function createActorRouter(config) {
                     }
                 }
                 res.set('Content-Type', apContentType);
+                if (groupFollowers) {
+                    return res.json(groupFollowersCollection({ id: collectionUrl(username), totalItems }));
+                }
                 return res.json({
                     '@context': AP_CONTEXT,
                     id: collectionUrl(username),
@@ -343,8 +349,7 @@ export function createActorRouter(config) {
                 const user = await config.resolveUser(username);
                 if (!user)
                     return userMissing(res, username);
-                if (!config.consent.isSharingEnabledFromUser(user) ||
-                    localActorTypeForAccountKind(user.kind) !== LOCAL_ACTOR_TYPE_BY_ACCOUNT_KIND.community) {
+                if (!config.consent.isSharingEnabledFromUser(user) || !isGroupActorKind(user.kind)) {
                     return res.status(404).json({ error: 'User not found' });
                 }
                 const moderators = await fetchModerators(String(user._id || user.id));

package/dist/types/groupCollections.d.ts

@@ -0,0 +1,42 @@
+/**
+ * How a local `Group` (an Oxy community) publishes its outbox and followers:
+ * the shapes Lemmy itself serves and reads back, not the paged
+ * `OrderedCollection` + `first` link every other local actor serves.
+ *
+ * Lemmy deserializes a community's collections into fixed structs that know
+ * nothing of paging (`crates/apub/apub/src/protocol/collections/`):
+ *  - outbox → `GroupOutbox { orderedItems: Vec<Announce> }`, `orderedItems`
+ *    REQUIRED inline. A summary with only `first` fails to parse, so a server
+ *    discovering the community backfills nothing. PieFed reads the same inline
+ *    `orderedItems` and nothing else.
+ *  - followers → `GroupFollowers { type: "Collection", totalItems, items }`,
+ *    read for the subscriber count. Lemmy serves `items: []`, so the follower
+ *    list stays private; this does the same.
+ *
+ * Mastodon reads `totalItems` from either shape, so a `Group` followed from
+ * Mastodon keeps its counts. `Person`, `Organization` and `Service` actors keep
+ * the paged shape Mastodon walks.
+ */
+/** How many of its latest `Announce`s a `Group`'s outbox lists inline (Lemmy's own size). */
+export declare const GROUP_OUTBOX_SIZE = 50;
+/**
+ * Whether a local account of this kind is announced as a `Group`
+ * ({@link LOCAL_ACTOR_TYPE_BY_ACCOUNT_KIND}) and so serves the Group
+ * collections: moderators, and the outbox and followers in the shapes above.
+ */
+export declare function isGroupActorKind(kind: unknown): boolean;
+/**
+ * A `Group`'s outbox: one unpaged `OrderedCollection` of its latest
+ * `Announce { Create }` activities, newest first. Each item's own `@context` is
+ * dropped; the collection's covers it.
+ */
+export declare function groupOutboxCollection(params: {
+    id: string;
+    totalItems: number;
+    orderedItems: readonly Record<string, unknown>[];
+}): Record<string, unknown>;
+/** A `Group`'s followers: the count, and an empty `items` list. */
+export declare function groupFollowersCollection(params: {
+    id: string;
+    totalItems: number;
+}): Record<string, unknown>;

package/dist/types/index.d.ts

@@ -63,6 +63,11 @@ export { canonicalFederationHost, isSameFederationHost, extractActorUriFromActiv
  * follows the Oxy account kind ({@link LOCAL_ACTOR_TYPE_BY_ACCOUNT_KIND}).
  */
 export { createLocalActorBuilder, normalizeAlsoKnownAs, localActorTypeForAccountKind, accountKindForActor, type ActorKindSignals, isApActorType, AP_ACTOR_TYPES, LOCAL_ACTOR_TYPE_BY_ACCOUNT_KIND, type ApActorType, type LocalActorType, type LocalActorBuilder, type LocalActorBuilderConfig, type BuildLocalActorParams, type ActorMediaResolver, } from './actorObject';
+/**
+ * A local `Group`'s outbox and followers, in the shapes Lemmy serves and reads
+ * back; every other actor keeps the paged collections.
+ */
+export { GROUP_OUTBOX_SIZE, isGroupActorKind, groupOutboxCollection, groupFollowersCollection, } from './groupCollections';
 /**
  * Supported external networks, keyed by the transport a connector speaks.
  * `instagram-graph` is Meta's Graph API Business Discovery: a read-only

package/dist/types/node/actorRouter.d.ts

@@ -8,7 +8,8 @@
  *    signature verification (Phase 2, `trustForwardedHost`) and actor-match, then
  *    202 + async dispatch to the injected inbound dispatcher,
  *  - `GET /users/:username/followers` + `/following` — the OXY follow graph
- *    (local + bridged federated edges) as paginated `OrderedCollection`s,
+ *    (local + bridged federated edges) as paginated `OrderedCollection`s; a
+ *    community `Group`'s followers are only counted (`groupCollections.ts`),
  *  - `GET /users/:username/moderators` — a community `Group`'s moderators.
  *
  * The CONTENT routes (`outbox`, `featured`, per-post dereference) stay in the app,
@@ -23,7 +24,7 @@ import { Router } from 'express';
 import type { AccountKind } from '@oxy.so/contracts';
 import type { User } from '@oxy.so/core';
 import type { UrlBuilders } from '../urls';
-import { type LocalActorBuilder } from '../actorObject';
+import type { LocalActorBuilder } from '../actorObject';
 import { type IsActorGone } from './goneActor';
 /** The resolved-user fields the actor + collection routes read. */
 export interface ActorRouteUser {

package/dist/types/node/identityBridge.d.ts

@@ -16,11 +16,17 @@
  * pipeline). The banner mirror is best-effort: a failure there must never discard
  * an already-successful user resolution.
  */
+import { type ResponsePayload } from '@oxy.so/core';
 import type { NormalizedExternalActor } from '../index';
 /** The HTTP methods the service-scoped oxy-api transport is invoked with. */
 export type ServiceRequestMethod = 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE';
-/** The service-scoped request transport oxy-api calls go through (`{ data }`-unwrapped). */
-export type ServiceRequest = <T>(method: ServiceRequestMethod, path: string, body?: unknown) => Promise<T>;
+/**
+ * The service-scoped request transport oxy-api calls go through: core's
+ * `serviceRequest`, whose `T` is the `{ data }`-unwrapped payload. Typed as core
+ * types it, so an app passes `serviceRequest` straight through and a `T` naming
+ * the envelope fails to compile here as it does there.
+ */
+export type ServiceRequest = <T>(method: ServiceRequestMethod, path: string, body?: unknown) => Promise<ResponsePayload<T>>;
 /** Minimal logging sink the identity bridge writes to. */
 export interface IdentityBridgeLogger {
     info(message: string, meta?: unknown): void;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxy.so/federation",
-  "version": "2.8.0",
+  "version": "2.10.0",
   "description": "Oxy Federation — the app-agnostic ActivityPub identity + follow engine substrate: the network-connector contract, normalized cross-network DTOs, HTTP signatures, actor resolution, the outbound delivery transport + follow lifecycle, the inbound dispatcher, and the webfinger/actor/inbox Express routers. Domain-parameterized so every Oxy app backend federates under its own domain.",
   "main": "dist/cjs/index.js",
   "module": "dist/esm/index.js",
@@ -80,7 +80,7 @@
   },
   "dependencies": {
     "@oxy.so/contracts": "^1.0.0 || ^2.0.0 || ^3.0.0 || ^4.0.0 || ^5.0.0 || 4.11.0-oxy-one.0",
-    "@oxy.so/core": "^1.0.0 || ^2.0.0 || ^3.0.0 || ^4.0.0 || ^5.0.0 || ^6.0.0"
+    "@oxy.so/core": "^6.14.0"
   },
   "peerDependencies": {
     "express": "^4.18.0 || ^5.0.0"

package/src/__tests__/actorObject.test.ts

@@ -222,6 +222,7 @@ describe('actor type by Oxy account kind', () => {
     expect(community.attributedTo).toBe('https://mention.earth/ap/users/nate/moderators');
     expect(community.moderators).toBe(community.attributedTo);
     expect(community.postingRestrictedToMods).toBe(false);
+    expect(community.sensitive).toBe(false);
     // Read back by the same table: an open Group is a community, not a channel.
     expect(accountKindForActor(community)).toBe('community');
     const person = buildActor(PARAMS);

package/src/__tests__/routers.test.ts

@@ -6,6 +6,8 @@ import { createInboundDispatcher } from '../node/inboundDispatch';
 import { createWebfingerRouter, type WebfingerRouterConfig } from '../node/webfingerRouter';
 import { createActorRouter, type ActorRouterConfig } from '../node/actorRouter';
 import { createUrlBuilders } from '../urls';
+import { AP_CONTEXT } from '../apContext';
+import { groupOutboxCollection } from '../groupCollections';
 import { signRequest, type HttpSignatureSigner } from '../httpSignature';
 
 /**
@@ -668,4 +670,35 @@ describe('community moderators collection', () => {
     const res = await request(moderatorsApp()).get('/ap/users/alice/moderators');
     expect(res.status).toBe(404);
   });
+
+  // Lemmy's `GroupFollowers { type: Collection, totalItems, items }` and
+  // `GroupOutbox { type: OrderedCollection, totalItems, orderedItems }`: no
+  // paging, items inline. A Person keeps the paged shape Mastodon walks.
+  it("serves a Group's followers and outbox in the shapes Lemmy deserializes", async () => {
+    const followers = await request(moderatorsApp()).get('/ap/users/forum/followers?page=true');
+    expect(followers.body).toEqual({
+      '@context': AP_CONTEXT,
+      id: urls.followers('forum'),
+      type: 'Collection',
+      totalItems: 3,
+      items: [],
+    });
+    const announce = { id: `${urls.actor('forum')}/relays/1`, type: 'Announce' };
+    expect(
+      groupOutboxCollection({
+        id: urls.outbox('forum'),
+        totalItems: 1,
+        orderedItems: [{ '@context': AP_CONTEXT, ...announce }],
+      }),
+    ).toEqual({
+      '@context': AP_CONTEXT,
+      id: urls.outbox('forum'),
+      type: 'OrderedCollection',
+      totalItems: 1,
+      orderedItems: [announce],
+    });
+
+    const person = await request(moderatorsApp()).get('/ap/users/alice/followers');
+    expect(person.body).toMatchObject({ type: 'OrderedCollection', first: expect.any(String) });
+  });
 });

package/src/actorObject.ts

@@ -400,11 +400,14 @@ export function createLocalActorBuilder(config: LocalActorBuilderConfig): LocalA
     // `attributedTo` (Lemmy, PieFed; Mbin reads `moderators`) and says anybody
     // may post into it. PeerTube refuses a `Group` without `attributedTo`, and a
     // `Group` claiming `postingRestrictedToMods` is read as a channel by every
-    // implementation, ours included ({@link accountKindForActor}).
+    // implementation, ours included ({@link accountKindForActor}). `sensitive`
+    // is Lemmy's NSFW flag on a community, sent as Lemmy sends it; an Oxy
+    // community has no NSFW setting.
     if (actorObject.type === LOCAL_ACTOR_TYPE_BY_ACCOUNT_KIND.community) {
       actorObject.attributedTo = config.urls.moderators(username);
       actorObject.moderators = config.urls.moderators(username);
       actorObject.postingRestrictedToMods = false;
+      actorObject.sensitive = false;
     }
 
     const aliases = normalizeAlsoKnownAs(params.alsoKnownAs);

package/src/groupCollections.ts

@@ -0,0 +1,67 @@
+/**
+ * How a local `Group` (an Oxy community) publishes its outbox and followers:
+ * the shapes Lemmy itself serves and reads back, not the paged
+ * `OrderedCollection` + `first` link every other local actor serves.
+ *
+ * Lemmy deserializes a community's collections into fixed structs that know
+ * nothing of paging (`crates/apub/apub/src/protocol/collections/`):
+ *  - outbox → `GroupOutbox { orderedItems: Vec<Announce> }`, `orderedItems`
+ *    REQUIRED inline. A summary with only `first` fails to parse, so a server
+ *    discovering the community backfills nothing. PieFed reads the same inline
+ *    `orderedItems` and nothing else.
+ *  - followers → `GroupFollowers { type: "Collection", totalItems, items }`,
+ *    read for the subscriber count. Lemmy serves `items: []`, so the follower
+ *    list stays private; this does the same.
+ *
+ * Mastodon reads `totalItems` from either shape, so a `Group` followed from
+ * Mastodon keeps its counts. `Person`, `Organization` and `Service` actors keep
+ * the paged shape Mastodon walks.
+ */
+
+import { LOCAL_ACTOR_TYPE_BY_ACCOUNT_KIND, localActorTypeForAccountKind } from './actorObject';
+import { AP_CONTEXT } from './apContext';
+
+/** How many of its latest `Announce`s a `Group`'s outbox lists inline (Lemmy's own size). */
+export const GROUP_OUTBOX_SIZE = 50;
+
+/**
+ * Whether a local account of this kind is announced as a `Group`
+ * ({@link LOCAL_ACTOR_TYPE_BY_ACCOUNT_KIND}) and so serves the Group
+ * collections: moderators, and the outbox and followers in the shapes above.
+ */
+export function isGroupActorKind(kind: unknown): boolean {
+  return localActorTypeForAccountKind(kind) === LOCAL_ACTOR_TYPE_BY_ACCOUNT_KIND.community;
+}
+
+/**
+ * A `Group`'s outbox: one unpaged `OrderedCollection` of its latest
+ * `Announce { Create }` activities, newest first. Each item's own `@context` is
+ * dropped; the collection's covers it.
+ */
+export function groupOutboxCollection(params: {
+  id: string;
+  totalItems: number;
+  orderedItems: readonly Record<string, unknown>[];
+}): Record<string, unknown> {
+  return {
+    '@context': AP_CONTEXT,
+    id: params.id,
+    type: 'OrderedCollection',
+    totalItems: params.totalItems,
+    orderedItems: params.orderedItems.map(({ '@context': _context, ...item }) => item),
+  };
+}
+
+/** A `Group`'s followers: the count, and an empty `items` list. */
+export function groupFollowersCollection(params: {
+  id: string;
+  totalItems: number;
+}): Record<string, unknown> {
+  return {
+    '@context': AP_CONTEXT,
+    id: params.id,
+    type: 'Collection',
+    totalItems: params.totalItems,
+    items: [],
+  };
+}

package/src/index.ts

@@ -132,6 +132,17 @@ export {
   type ActorMediaResolver,
 } from './actorObject';
 
+/**
+ * A local `Group`'s outbox and followers, in the shapes Lemmy serves and reads
+ * back; every other actor keeps the paged collections.
+ */
+export {
+  GROUP_OUTBOX_SIZE,
+  isGroupActorKind,
+  groupOutboxCollection,
+  groupFollowersCollection,
+} from './groupCollections';
+
 /**
  * Supported external networks, keyed by the transport a connector speaks.
  * `instagram-graph` is Meta's Graph API Business Discovery: a read-only

package/src/node/actorRouter.ts

@@ -8,7 +8,8 @@
  *    signature verification (Phase 2, `trustForwardedHost`) and actor-match, then
  *    202 + async dispatch to the injected inbound dispatcher,
  *  - `GET /users/:username/followers` + `/following` — the OXY follow graph
- *    (local + bridged federated edges) as paginated `OrderedCollection`s,
+ *    (local + bridged federated edges) as paginated `OrderedCollection`s; a
+ *    community `Group`'s followers are only counted (`groupCollections.ts`),
  *  - `GET /users/:username/moderators` — a community `Group`'s moderators.
  *
  * The CONTENT routes (`outbox`, `featured`, per-post dereference) stay in the app,
@@ -28,11 +29,8 @@ import { discoveryCacheControl } from './httpCacheControl';
 import { verifyHttpSignature } from '../httpSignature';
 import type { UrlBuilders } from '../urls';
 import { INSTANCE_ACTOR_USERNAME, normalizeActorUsername } from '../urls';
-import {
-  LOCAL_ACTOR_TYPE_BY_ACCOUNT_KIND,
-  localActorTypeForAccountKind,
-  type LocalActorBuilder,
-} from '../actorObject';
+import type { LocalActorBuilder } from '../actorObject';
+import { groupFollowersCollection, isGroupActorKind } from '../groupCollections';
 import { goneTombstone, type IsActorGone } from './goneActor';
 
 /** Page size for the paginated followers/following collections (mirrors the outbox). */
@@ -270,7 +268,8 @@ export function createActorRouter(config: ActorRouterConfig): Router {
 
   /**
    * Serve a user's followers OR following as a paginated `OrderedCollection` over
-   * the authoritative Oxy follow graph (local + bridged federated edges).
+   * the authoritative Oxy follow graph (local + bridged federated edges). A
+   * `Group`'s followers are the unpaged, itemless `Collection` Lemmy reads.
    */
   async function serveFollowCollection(
     req: Request,
@@ -297,7 +296,8 @@ export function createActorRouter(config: ActorRouterConfig): Router {
         direction === 'followers' ? user._count?.followers : user._count?.following;
       const profileTotal = typeof rawCount === 'number' ? rawCount : undefined;
 
-      if (!page) {
+      const groupFollowers = direction === 'followers' && isGroupActorKind(user.kind);
+      if (!page || groupFollowers) {
         // Prefer the profile `_count`; only when absent (the rare search fallback)
         // fetch the authoritative total from a minimal graph list call. Fail-soft
         // to 0 — never 500 the summary.
@@ -315,6 +315,9 @@ export function createActorRouter(config: ActorRouterConfig): Router {
         }
 
         res.set('Content-Type', apContentType);
+        if (groupFollowers) {
+          return res.json(groupFollowersCollection({ id: collectionUrl(username), totalItems }));
+        }
         return res.json({
           '@context': AP_CONTEXT,
           id: collectionUrl(username),
@@ -517,10 +520,7 @@ export function createActorRouter(config: ActorRouterConfig): Router {
       try {
         const user = await config.resolveUser(username);
         if (!user) return userMissing(res, username);
-        if (
-          !config.consent.isSharingEnabledFromUser(user) ||
-          localActorTypeForAccountKind(user.kind) !== LOCAL_ACTOR_TYPE_BY_ACCOUNT_KIND.community
-        ) {
+        if (!config.consent.isSharingEnabledFromUser(user) || !isGroupActorKind(user.kind)) {
           return res.status(404).json({ error: 'User not found' });
         }
         const moderators = await fetchModerators(String(user._id || user.id));

package/src/node/identityBridge.ts

@@ -17,18 +17,23 @@
  * an already-successful user resolution.
  */
 
-import { getErrorMessage, getErrorStatus } from '@oxy.so/core';
+import { getErrorMessage, getErrorStatus, type ResponsePayload } from '@oxy.so/core';
 import type { NormalizedExternalActor } from '../index';
 
 /** The HTTP methods the service-scoped oxy-api transport is invoked with. */
 export type ServiceRequestMethod = 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE';
 
-/** The service-scoped request transport oxy-api calls go through (`{ data }`-unwrapped). */
+/**
+ * The service-scoped request transport oxy-api calls go through: core's
+ * `serviceRequest`, whose `T` is the `{ data }`-unwrapped payload. Typed as core
+ * types it, so an app passes `serviceRequest` straight through and a `T` naming
+ * the envelope fails to compile here as it does there.
+ */
 export type ServiceRequest = <T>(
   method: ServiceRequestMethod,
   path: string,
   body?: unknown,
-) => Promise<T>;
+) => Promise<ResponsePayload<T>>;
 
 /** Minimal logging sink the identity bridge writes to. */
 export interface IdentityBridgeLogger {