feat: support external GIF embeds

.github/workflows/tests.yml

@@ -146,5 +146,8 @@ jobs:
         if: steps.build-cache.outputs.cache-hit != 'true'
         run: bun run build
 
+      - name: GIF Security Mutations
+        run: composer test:mutations
+
       - name: Tests
         run: composer test:unit

KNOWLEDGE_BASE.md

@@ -216,7 +216,7 @@ Sources: [body renderer](resources/js/components/commit-body.tsx), [colors](reso
 
 ### Draft previews
 
-Use the composer's eye button or **⌘/Ctrl+Shift+P** to preview a commit, reply, or quote before submitting it. Preview shows the rendered code, emoji, mentions, links, and images, and identifies the link selected for a card. Esc returns from preview to writing.
+Use the composer's eye button or **⌘/Ctrl+Shift+P** to preview a commit, reply, or quote. The selected link card also loads while writing; direct GIFs appear after verification. Selected URLs and metadata share the posted-link cache, even if the draft is never published. Uncached links load in the background. Esc returns to writing.
 
 Draft text is not scanned for secrets before publishing or saving locally.
 
@@ -242,6 +242,8 @@ URLs and bare domains in commits and replies become clickable links. Long URLs a
 
 Supported links can also show click-to-play embedded players: YouTube, Vimeo, Loom, Twitch, Spotify, SoundCloud, Apple Music, Suno, CodePen, and asciinema. Only the link that gets the card can show a player, so choosing no card means no player. Embeds depend on server configuration and the linked URL being supported. Third-party player content loads only after you press play; those providers have their own privacy policies. This is embedding a link, not uploading a video or audio file to /dev/null.
 
+Giphy share links and verified public HTTPS `.gif` links play inline from their external host. Verified GIFs autoplay while visible and unload offscreen; reduced-motion users press **Play**. **Stop** unloads the animation, and failed GIFs offer two manual retries. No uploads or provider keys are required. Enable with `EMBEDS_PROVIDERS=giphy,gif`. Previously cached direct GIF links require refetching.
+
 Sources: [link rendering](resources/js/components/linkified-text.tsx), [link-card selection](app/Http/Requests/CreateCommitRequest.php), [embed configuration](config/embeds.php), [embedded player](resources/js/components/link-embed.tsx).
 
 ### Replies and threads

README.md

@@ -29,6 +29,8 @@ composer setup
 composer dev
 ```
 
+Link cards preview while writing. Giphy links and verified public HTTPS `.gif` links play inline from their external host, with Play/Stop controls, visible-only autoplay, and manual playback for reduced motion.
+
 Run `composer test` before opening a pull request.
 
 ## License

app/Actions/CreateCommit.php

@@ -11,7 +11,6 @@
 use App\Jobs\EmbedCommit;
 use App\Jobs\ModerateCommit;
 use App\Jobs\ReplyAsTom;
-use App\Jobs\UnfurlLink;
 use App\Models\Commit;
 use App\Models\LinkPreview;
 use App\Models\User;
@@ -31,6 +30,7 @@ public function __construct(
         private CreateMentionNotifications $createMentionNotifications,
         private CreateCommitImages $createCommitImages,
         private CreateWorldReply $createWorldReply,
+        private CreateLinkPreviewJob $createLinkPreviewJob,
         private UpdateCommitHotScores $updateCommitHotScores,
         private TheAlgorithm $theAlgorithm,
         private EmojiShortcodes $emojiShortcodes,
@@ -42,8 +42,6 @@ public function __construct(
     }
 
     /**
-     * The link preview is of the first URL in the body when true, of the given URL when a string, or none when false.
-     *
      * @param  list<UploadedFile>  $images
      * @param  array<int, string|null>  $imageDescriptions
      */
@@ -86,8 +84,10 @@ public function handle(User $user, string $body, ?Commit $parent = null, ?Commit
             $this->createQuoteNotifications->handle($commit);
             $this->createMentionNotifications->handle($commit);
 
-            if ($linkPreview instanceof LinkPreview && $linkPreview->fetched_at === null) {
-                dispatch(new UnfurlLink($linkPreview));
+            if ($linkPreview instanceof LinkPreview && $linkPreview->prepareUnfurlForPublication()) {
+                DB::afterCommit(function () use ($linkPreview): void {
+                    $this->createLinkPreviewJob->handle($linkPreview);
+                });
             }
 
             $this->createWorldReply->handle($commit);
@@ -118,9 +118,6 @@ public function handle(User $user, string $body, ?Commit $parent = null, ?Commit
         });
     }
 
-    /**
-     * A poll opens with its commit's approval, so polls of pending commits wait for moderation.
-     */
     private function createPoll(Commit $commit, NewPoll $newPoll): void
     {
         $poll = $commit->poll()->create([
@@ -135,9 +132,6 @@ private function createPoll(Commit $commit, NewPoll $newPoll): void
         ));
     }
 
-    /**
-     * Commits that link to the same URL share one preview, so a page is fetched once however often it is linked.
-     */
     private function linkPreviewFor(?string $url): ?LinkPreview
     {
         if ($url === null) {

app/Actions/CreateLinkPreviewJob.php

@@ -0,0 +1,31 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Actions;
+
+use App\Jobs\UnfurlLink;
+use App\Models\LinkPreview;
+use Throwable;
+
+final readonly class CreateLinkPreviewJob
+{
+    public function handle(LinkPreview $linkPreview): void
+    {
+        $preview = $linkPreview->fresh();
+
+        if (! $preview instanceof LinkPreview || $preview->fetched_at !== null) {
+            return;
+        }
+
+        $job = new UnfurlLink($preview);
+
+        try {
+            dispatch($job)->afterCommit();
+        } catch (Throwable $throwable) {
+            $job->failed();
+
+            throw $throwable;
+        }
+    }
+}

app/Actions/CreateMessage.php

@@ -6,7 +6,6 @@
 
 use App\Enums\RemoteStatus;
 use App\Jobs\SendRemotePush;
-use App\Jobs\UnfurlLink;
 use App\Models\Conversation;
 use App\Models\ConversationParticipant;
 use App\Models\LinkPreview;
@@ -28,13 +27,11 @@ public function __construct(
         private CreateMessageVoiceFile $createMessageVoiceFile,
         private MentionedUsersQuery $mentionedUsers,
         private Urls $urls,
+        private CreateLinkPreviewJob $createLinkPreviewJob,
     ) {
         //
     }
 
-    /**
-     * Makes the message the conversation's latest, for every member's inbox.
-     */
     public static function advance(Conversation $conversation, Message $message, bool $unstash): void
     {
         Conversation::query()
@@ -48,10 +45,6 @@ public static function advance(Conversation $conversation, Message $message, boo
     }
 
     /**
-     * Sending the same client id again, as a retry does, returns the message it already created, without storing its
-     * images or voice note twice. A new message brings the conversation back out of the stash for everyone in it. The link card is
-     * of the first link in the body when true, of the given link when a string, or none when false.
-     *
      * @param  list<UploadedFile>  $images
      * @param  array<int, string|null>  $imageDescriptions
      * @param  list<int>  $voiceWaveform
@@ -108,8 +101,10 @@ public function handle(User $sender, Conversation $conversation, string $body, s
                 ->where('read_through_id', '<', $message->id)
                 ->update(['read_through_id' => $message->id, 'read_at' => now()]);
 
-            if ($linkPreview instanceof LinkPreview && $linkPreview->fetched_at === null) {
-                dispatch(new UnfurlLink($linkPreview))->afterCommit();
+            if ($linkPreview instanceof LinkPreview && $linkPreview->prepareUnfurlForPublication()) {
+                DB::afterCommit(function () use ($linkPreview): void {
+                    $this->createLinkPreviewJob->handle($linkPreview);
+                });
             }
 
             return $message;