If Toyota wants to modify A/GPL code and use it on, eg, their manufacturing line robots, they're 100% allowed to do it without providing the source.
Now if Toyota wants to sell those robots... that's now a violation.
Some people seem to think that the GPL means "no private modifications can ever exist" which is not true at all.
So in this case, if it's a single user instance the only person that needs to have access to the source is the person using the software. Your ability to send and receive posts to/from this modified Mastodon server does not matter. You are not an injured party by not having access to the source code. But if you get an account on that server, you can absolutely demand the source.
@Moon I don't think that qualifies. That's like saying "I made a private modification to Exim, now I have to share my changes because people can send and receive email from my server"
@Moon although there is one difference here: even if you had paying customers hosting their email with your modified Exim you wouldn't have to share those change because it's GPLv2, not AGPL
@Moon nope, not unless you were providing a *service* to users. Being able to reach you is not a "service". Hosting their fedi accounts / email would be a "service" -- that turns it into SAAS and they are your "customers".
@Moon consider that by your logic any developer working on a new Mastodon feature and has their test server on the public internet is in violation of the license for not yet having published the changes yet
@feld that is correct and in fact this argument was used by mastodon when gab had a test server accessible on the public internet to argue they had to release all their source code.
@Moon in my scenario nobody can "use it" without an account. No public timelines, no AGPL'd assets are ever served to unauthorized users. Only the activitypub API endpoints reachable
@feld my position (and I will try to confirm it with license wording later) is that the intent of AGPL was to avoid where you were interacting with networked services and you don't get the source because it was GPL2. In a world where there are many thousands of private mail servers, if they didn't have to make source public the source would just be corralled again which I believe goes against the goal of preventing that from happening.
@feld I checked the AGPL wording and it frustratingly is not clear, it mentions users one time and not directly other access. However if we were talking about a web server offering HTTP, everyone accessing content via http would be entitled to the source or again AGPL just wouldn't work for a web server and that seems untrue.
I doubt the developers of Mastodon or Firefish are going to pursue legal action or publicly shame a one user instance not sharing their code, regardless of what the AGPL says.
@fantasia@feld I don't share the source code of my in-progress work on my test server. but if someone asked, I would. I admit that is really inconvenient.