feat(embeds): add Bluesky, Loom, Kick

From the coverage-review agent's ranked recommendations (clean iframes, ids in
the URL, one CSP host each):
- Bluesky: bsky.app/profile/{authority}/post/{rkey} → embed.bsky.app (rich, self-
  resizing like the other post embeds).
- Loom: loom.com/share|embed/{id} → www.loom.com/embed/{id} (16:9).
- Kick: kick.com/{channel} → player.kick.com/{channel} (live channels only; VODs/
  clips have no clean embed and fall back to a link).

Parsers unit-tested. CSP frame-src gains embed.bsky.app / www.loom.com /
player.kick.com (desktop + live web, both updated). Needs live verification once
deployed since the embeds themselves can't be exercised from here.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

src/app/utils/videoEmbed.test.ts

@@ -21,6 +21,9 @@ import {
   getTidalEmbed,
   getInstagramEmbed,
   getRedditPostEmbed,
+  getBlueskyEmbed,
+  getLoomId,
+  getKickChannel,
   buildVideoEmbedUrl,
   spotifyEmbedHeight,
   parseMediaEmbed,
@@ -230,6 +233,30 @@ test('parseMediaEmbed: Instagram/Reddit → rich, Tidal → audio', () => {
   assert.equal(parseMediaEmbed('https://tidal.com/browse/track/1', 'h')?.provider, 'tidal');
 });
 
+test('Bluesky / Loom / Kick', () => {
+  assert.equal(
+    getBlueskyEmbed('https://bsky.app/profile/alice.bsky.social/post/3kabc'),
+    'https://embed.bsky.app/embed/alice.bsky.social/app.bsky.feed.post/3kabc',
+  );
+  assert.equal(getBlueskyEmbed('https://bsky.app/profile/alice.bsky.social'), null);
+  assert.equal(parseMediaEmbed('https://bsky.app/profile/a.bsky.social/post/3k', 'h')?.kind, 'rich');
+
+  assert.equal(getLoomId('https://www.loom.com/share/abc123DEF'), 'abc123DEF');
+  assert.equal(getLoomId('https://www.loom.com/embed/abc123DEF'), 'abc123DEF');
+  assert.equal(
+    parseMediaEmbed('https://www.loom.com/share/xyz', 'h')?.embedUrl,
+    'https://www.loom.com/embed/xyz',
+  );
+
+  assert.equal(getKickChannel('https://kick.com/somestreamer'), 'somestreamer');
+  assert.equal(getKickChannel('https://kick.com/streamer/videos/123'), null); // VOD → no embed
+  assert.ok(
+    parseMediaEmbed('https://kick.com/streamer', 'h')?.embedUrl.includes(
+      'player.kick.com/streamer?autoplay=true',
+    ),
+  );
+});
+
 test('parseMediaEmbed: Twitch embed carries the parent host', () => {
   const chan = parseMediaEmbed('https://twitch.tv/streamer', HOST);
   assert.equal(chan?.provider, 'twitch');

src/app/utils/videoEmbed.ts

@@ -368,6 +368,46 @@ export function getRedditPostEmbed(url: string): string | null {
   }
 }
 
+// --- Loom -----------------------------------------------------------------
+
+export function getLoomId(url: string): string | null {
+  try {
+    const { hostname, pathname } = new URL(url);
+    if (hostname.replace(/^www\./, '') !== 'loom.com') return null;
+    const m = pathname.match(/^\/(?:share|embed)\/([A-Za-z0-9]+)/);
+    return m ? m[1] : null;
+  } catch {
+    return null;
+  }
+}
+
+// --- Kick (live channels only; VODs/clips have no clean iframe) ------------
+
+export function getKickChannel(url: string): string | null {
+  try {
+    const { hostname, pathname } = new URL(url);
+    if (hostname.replace(/^www\./, '') !== 'kick.com') return null;
+    const parts = pathname.replace(/^\/+|\/+$/g, '').split('/').filter(Boolean);
+    return parts.length === 1 && /^[A-Za-z0-9_]+$/.test(parts[0]) ? parts[0] : null;
+  } catch {
+    return null;
+  }
+}
+
+// --- Bluesky --------------------------------------------------------------
+
+export function getBlueskyEmbed(url: string): string | null {
+  try {
+    const { hostname, pathname } = new URL(url);
+    if (hostname !== 'bsky.app' && hostname !== 'www.bsky.app') return null;
+    const m = pathname.match(/^\/profile\/([^/]+)\/post\/([A-Za-z0-9]+)/);
+    // authority is a handle or did; embed.bsky.app resolves either.
+    return m ? `https://embed.bsky.app/embed/${m[1]}/app.bsky.feed.post/${m[2]}` : null;
+  } catch {
+    return null;
+  }
+}
+
 // --- Embed-URL builders ---------------------------------------------------
 
 const enc = encodeURIComponent;
@@ -479,5 +519,24 @@ export function parseMediaEmbed(url: string, host: string): MediaEmbed | null {
   const reddit = getRedditPostEmbed(url);
   if (reddit) return { provider: 'reddit', kind: 'rich', embedUrl: reddit, height: 480 };
 
+  const bsky = getBlueskyEmbed(url);
+  if (bsky) return { provider: 'bluesky', kind: 'rich', embedUrl: bsky, height: 600 };
+
+  const loomId = getLoomId(url);
+  if (loomId)
+    return {
+      provider: 'loom',
+      kind: 'landscape',
+      embedUrl: `https://www.loom.com/embed/${enc(loomId)}`,
+    };
+
+  const kick = getKickChannel(url);
+  if (kick)
+    return {
+      provider: 'kick',
+      kind: 'landscape',
+      embedUrl: `https://player.kick.com/${enc(kick)}?autoplay=true`,
+    };
+
   return null;
 }