feat(chat): @everyone mention

Rides the existing `<@id>` token: `everyone` already matches the parser's `[a-zA-Z0-9_-]+`, so the markdown pre-processor, the inline renderer and the badge pick it up with no second syntax. User ids are snowflakes, so the literal `everyone` cannot collide with one. Gated on a new MENTION_EVERYONE permission rather than being open to all — otherwise a role can never take it away. Granted to @everyone by default: on a small instance the ping is a convenience, not a weapon, and an owner who disagrees can deny it and grant it to a role instead. Two things that would each have made the gate a no-op: - DEFAULT_EVERYONE_PERMISSIONS only applies at space creation, so spaces that predate the bit would have had every @everyone mention silently stripped. A boot-time backfill ORs the bit into @everyone roles only (`id = space_id`), leaving other roles alone so a later denial is not overruled on the next restart. Verified against a copy of the production database: three roles moved by exactly 2^15, non-@everyone roles untouched, second pass a no-op. - Enforcement covers edit as well as create; without that, posting a plain message and editing it is the way around the permission. A message that lacks the permission is not rejected — losing what someone wrote over one token is worse than posting it. The token is demoted to the literal `@everyone` text they typed: the message reads the same and rings nobody. Code spans and fences never ping. People paste payloads and snippets into chat, and a paste should not ring everyone's client. The same rule decides the row highlight and the notification sound, so the three cannot disagree. Verified: web build, server typecheck, 504 web tests, 804 server tests. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-09-02 22:10:56 -03:00
parent 1ec5d88fa2
commit a41a944742
16 changed files with 364 additions and 29 deletions
@@ -29,6 +29,7 @@ código e os commits seguem em inglês, como o resto do repositório.
 | Busca: filtros embutidos e tradução | `50a8f12c` | Os filtros já existiam; faltava `de:fulano` e descoberta |
 | Emojis e figurinhas do servidor | `7d003021` | `:nome:` no markdown sem plugin; figurinha como mensagem inteira |
 | Fundação de i18n (en + pt-BR) | `688a1335` | `src/i18n/`; pt-BR é parcial e cai para inglês. Aba Idioma nas configurações |
+| Menção `@everyone` | (ver git log) | Reusa o token `<@id>`; permissão `MENTION_EVERYONE` nova, concedida ao `@everyone` por padrão e retroativa via backfill no boot. Servidor neutraliza o token de quem não tem a permissão, no envio **e** na edição |
 | Renomear canal (nome e tópico) | (ver git log) | Rota `PATCH /api/channels/:id` já existia; faltava interface. Normalização em `shared/constants` para servidor e web usarem a mesma regra |
 | Volume da tela em 50% por padrão | (ver git log) | `DEFAULT_STREAM_VOLUME`; o publicador reforça o áudio do sistema, então o padrão anterior chegava alto demais |
 | Sons 50% mais baixos | (ver git log) | Só `SFX_BASE_VOLUME` (0.8 → 0.4); os `.ogg` não foram regerados |