NodeBB / NodeBB / 29114861970 / 2

85%

master: 85%

push

github

refactor(activitypub): privilege-filter outbox via category-driven post sets

Replace overshoot+filter with structurally correct category-driven approach:
- Posts drawn from cid:<cid>:uid:<uid>:pids after filtering uid:<uid>:cids
  via privileges.categories.filterCids('topics:read', ...)
- Votes/shares still use overshoot fetch + privileges.posts.filter (no per-category index)
- Uses req.uid || 0 for caller privileges (respects signed request identity)
- Switch to getSortedSetRevRangeWithScores for correct newest-first ordering
- Fix sortedSetsCard array return (reduce to sum for totalItems)
- Fix flaky test assertion: String(pid) substring → /post/${pid} URL match

Assisted-by: unsloth/Qwen3.6-27B-GGUF

12967 of 17948 branches covered (72.25%)

27450 of 32314 relevant lines covered (84.95%)

1520.48 hits per line