user('web'); abort_unless($actor instanceof User, 403); $input = $request->validate(['cursor' => 'nullable|string|max:4096', 'limit' => 'sometimes|integer|min:1|max:100']); return response()->json($exchange->page($actor, $input['cursor'] ?? null, (int) ($input['limit'] ?? 50))) ->header('Cache-Control', 'private, no-store, max-age=0'); } }