@amatiscorp/disguard 1.4.0 → 1.6.0

package/README.md

@@ -4,7 +4,7 @@
 
 **Configurable antispam for discord.js v14**
 
-Flood · phishing · leaked secrets · channel hop · ghost pings · TypeScript
+Flood · phishing · forwards · impersonation · join raids · leaked secrets · TypeScript
 
 [![npm version](https://img.shields.io/npm/v/@amatiscorp/disguard.svg?style=flat-square)](https://www.npmjs.com/package/@amatiscorp/disguard)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg?style=flat-square)](https://opensource.org/licenses/MIT)
@@ -22,7 +22,7 @@ Configurable antispam for [discord.js](https://discord.js.org) v14 bots.
 
 It is **not** a bot. You plug it into your existing `Client` and decide every threshold, allowlist, and punishment.
 
-Detects flood, leaked tokens/webhooks, channel hopping, blocked words, phishing, duplicate images, mention spam, ghost pings, and more.
+Detects flood, leaked tokens/webhooks, channel hopping, blocked words, phishing, duplicate images, mention spam, ghost pings, forwarded-message dumps, bot impersonation, join raids, and more.
 
 **Languages**
 
@@ -33,6 +33,86 @@ Detects flood, leaked tokens/webhooks, channel hopping, blocked words, phishing,
 
 # English
 
+## What's new in 1.6.0
+
+Forward dumps, sticker floods, bot/staff impersonation, join raids, voice-note spam, poll spam, and harder-to-dodge word/file filters. Kick/ban stay **off**. `joins` is **off** in `balanced` so a busy invite night does not false-positive.
+
+| Option | Default | What it does |
+| --- | --- | --- |
+| `forwards` | **on**, 4 / 10s | Too many Discord **forwarded** messages (HasSnapshot) in a short window. |
+| `stickers` | **on**, 3 per message, 8 / 10s | Sticker dumps. `blockOnly` (off) flags sticker-only messages. |
+| `impersonate` | **on**, match bot at 0.84 | Nick / username / display name too close to the **bot** (or `names`). |
+| `joins` | **off** (`strict`: on, 6 / 8s) | Too many **distinct accounts joining** the guild at once. Needs `guildMemberAdd`. |
+| `voice` | **on**, 3 / 15s | Too many **voice messages** in a window. |
+| `polls` | **on**, 2 / 20s | Too many **polls** in a window. |
+| `files.blockDoubleExtensions` | `true` | Flags `virus.exe.png` (blocked ext hidden behind a safe one). |
+| `words.scanEmbeds` | `true` | Word list also reads embed text. |
+| `words.normalizeHomoglyphs` | `true` | Folds Cyrillic / Greek / fullwidth lookalikes (`rаid` → `raid`). |
+| `ignoreBoosters` | `false` | Skip server boosters. |
+| `punishment.slowmodeSeconds` | `0` | On `raid` / `join` hits, set channel slowmode (needs **Manage Channels**). Sticky until a mod changes it. |
+| `getRecentIncidents()` | — | Last 50 live hits (not `analyze()`). |
+| `setDetectorEnabled(type, bool)` | — | Toggle one detector without rewriting `disabledDetectors`. |
+| `onJoin` | — | Callback for join-raid incidents (no message). |
+
+```js
+const antispam = new AntiSpam(client, {
+  preset: "balanced",
+  forwards: { maxForwards: 3, windowMs: 8_000 },
+  stickers: { maxStickers: 2, maxInWindow: 6 },
+  impersonate: { names: ["Admin", "Moderador", "Staff"] },
+  joins: { enabled: true, maxJoins: 8, windowMs: 10_000 },
+  voice: { maxVoice: 3 },
+  polls: { maxPolls: 2 },
+  ignoreBoosters: true,
+  words: { enabled: true, list: ["raid-now"], normalizeHomoglyphs: true },
+  punishment: { slowmodeSeconds: 10 },
+  onJoin(incident) {
+    console.log("join raid", incident.details);
+  },
+});
+
+antispam.setDetectorEnabled("poll", false);
+console.log(antispam.getRecentIncidents(10));
+```
+
+Turn `joins` on only if you want a burst of accounts joining at once to timeout the newest member. Pair it with `accounts.minAgeDays` if the raid is all-new alts. `impersonate.names` is for **staff/brand** clones; `matchBot` already covers the bot's own name.
+
+`graceMessages` now also runs **impersonate** and **forward** during the hello window (still skips flood).
+
+## What's new in 1.5.0
+
+Channel raids, reply spam, empty messages, embed walls, file allowlists, and per-user overlays. Kick/ban stay **off**. `raid` is **off** in `balanced` so busy servers do not false-positive.
+
+| Option | Default | What it does |
+| --- | --- | --- |
+| `replies` | **on**, 6 / 8s | Too many Discord **replies** in a short window (reply ping / bump spam). |
+| `blank` | **on** | Empty or whitespace-only messages (no files/stickers/embeds). |
+| `embeds` | **on**, 6 | Too many embeds in one message. |
+| `raid` | **off** (`strict`: on, 6 users / 5s) | Too many **distinct users** posting in the **same channel** at once. |
+| `files.allowedExtensions` | `[]` | If set, only those extensions are allowed (after the blocklist). |
+| `emojis.maxInWindow` | `0` (off) | Cap emojis+stickers across several messages. |
+| `ignoreNsfw` | `false` | Skip NSFW channels. |
+| `graceMessages` | `0` | First N messages from a user only run file/secret/link/word (say hi without flood). |
+| `userOverrides` / `setUserConfig` | `{}` | Per-user config overlay (after roles, before channel). |
+
+```js
+const antispam = new AntiSpam(client, {
+  preset: "balanced",
+  replies: { maxReplies: 5, windowMs: 8_000 },
+  blank: { enabled: true },
+  embeds: { maxEmbeds: 6 },
+  raid: { enabled: true, maxUsers: 8, windowMs: 6_000 },
+  files: { allowedExtensions: ["png", "jpg", "webp", "gif"] },
+  graceMessages: 2,
+  ignoreNsfw: true,
+  emojis: { maxInWindow: 30, windowMs: 10_000 },
+});
+
+antispam.setUserConfig("KNOWN_SPAMMER_ID", { flood: { maxMessages: 2 } });
+```
+
+Turn `raid` on only if you want a busy general chat to trip when many people post at once (join raids). For a meme channel, leave it off or raise `maxUsers`.
+
 ## What's new in 1.4.0
 
 Secret scanning, cross-channel copy-paste, invisible unicode, attachment floods, and cleaner logs. Kick/ban stay **off**.
@@ -208,6 +288,8 @@ console.log(antispam.getStats());
 
 ## Table of contents
 
+- [What's new in 1.6.0](#whats-new-in-160)
+- [What's new in 1.5.0](#whats-new-in-150)
 - [What's new in 1.4.0](#whats-new-in-140)
 - [What's new in 1.3.0](#whats-new-in-130)
 - [What's new in 1.2.0](#whats-new-in-120)
@@ -254,6 +336,16 @@ console.log(antispam.getStats());
 | **echo** | Same text pasted in several channels |
 | **invisible** | Zero-width / bidi obfuscation |
 | **attach** | Attachment floods over a sliding window |
+| **reply** | Too many replies in a short window |
+| **blank** | Empty / whitespace-only messages |
+| **embed** | Too many embeds in one message |
+| **raid** | Many distinct users posting in one channel (off by default) |
+| **forward** | Too many Discord forwarded messages in a window |
+| **sticker** | Sticker dumps / optional sticker-only messages |
+| **impersonate** | Nick/username too close to the bot or protected names |
+| **join** | Mass joins in a short window (off by default) |
+| **voice** | Too many voice messages in a window |
+| **poll** | Too many polls in a window |
 
 Also included:
 
@@ -261,7 +353,7 @@ Also included:
 - Ignore lists for users, roles, channels, categories, guilds, and command prefixes
 - Per-guild, per-channel, and per-role overlays
 - Strike system with decay
-- Optional delete / warn / timeout / kick / ban / addRole / removeRole (kick and ban are **off** by default)
+- Optional delete / warn / timeout / kick / ban / addRole / removeRole / slowmode (kick and ban are **off** by default)
 - `dryRun` to tune rules without punishing anyone
 - Edit scanning (links, mentions, and words)
 - Zero extra runtime dependencies (peer: `discord.js`)
@@ -379,6 +471,8 @@ npm run dev
 | Log embeds | **Embed Links** |
 | Kick / ban (opt-in) | **Kick Members** / **Ban Members** |
 | Mute / add / remove roles (opt-in) | **Manage Roles** |
+| Slowmode on raid/join (opt-in) | **Manage Channels** |
+| Join-raid detector | **Server Members Intent** (`guildMemberAdd`) |
 
 The bot will not sanction the guild owner or anyone above it in the role hierarchy. Those actions are skipped and reported in `onAction`.
 
@@ -388,10 +482,11 @@ Enable **Message Content Intent** in the [Discord Developer Portal](https://disc
 
 1. Ignores bots, webhooks, system messages, the owner, administrators, command prefixes, and anything in your ignore lists.
 2. Keeps a short **in-memory** history per user and guild (no database).
-3. Runs detectors in this order: files → secrets → words → flood → hop → echo → duplicates → attachments → links → images → mentions → zalgo → newlines → punctuation → spoilers → invisible → accounts → length → caps → emojis. The first match wins.
+3. Runs detectors in this order: files → secrets → words → impersonate → flood → hop → echo → duplicates → attachments → raid → replies → blank → embeds → forwards → voice → polls → stickers → links → images → mentions → zalgo → newlines → punctuation → spoilers → invisible → accounts → length → caps → emojis. The first match wins.
 4. Adds one strike (with optional decay) and applies the configured punishment.
 5. Message edits re-check **links**, **mentions**, **words**, **secrets**, and **invisible**.
 6. Deletes can trigger **ghost** pings if `ghostPing.enabled` is true.
+7. Joins can trigger **join** raids if `joins.enabled` is true (`guildMemberAdd`).
 
 Call `antispam.stop()` on shutdown, hot reload, or plugin unload.
 
@@ -423,6 +518,7 @@ new AntiSpam(client, {
 | Block shorteners | no | yes | yes |
 | Channel hop | off | 5 / 8s | 3 / 6s |
 | Ghost pings | off | off | on |
+| Join raids | off | off | on |
 | Auto timeout | off | 60s from 2 strikes | 5 min from 1 strike |
 
 ## Full configuration
@@ -441,8 +537,10 @@ Every option is optional. Missing fields fall back to the preset (or `balanced`
 | `ignoreAdministrators` | `boolean` | `true` | Skip members with Administrator. |
 | `checkEdits` | `boolean` | `true` | Re-scan edits for links, mentions, and words. |
 | `checkDeletes` | `boolean` | `true` | Listen for `messageDelete` (ghost pings). |
+| `checkJoins` | `boolean` | `true` | Listen for `guildMemberAdd` (join raids). |
 | `ignoreThreads` | `boolean` | `false` | Skip messages in threads. |
 | `ignoreSystem` | `boolean` | `true` | Skip Discord system messages. |
+| `ignoreBoosters` | `boolean` | `false` | Skip server boosters. |
 | `cleanupIntervalMs` | `number` | `60000` | How often the memory store is pruned. |
 | `locale` | `"en"` \| `"es"` | `"en"` | Language for warnings and log embeds. |
 | `ignorePermissions` | `string[]` | `[]` | Permission names that bypass checks. |
@@ -620,6 +718,7 @@ files: {
   enabled: true,
   blockedExtensions: ["exe", "bat", "cmd", "com", "scr", "dll", "msi", "vbs", "ps1", "jar", "apk"],
   maxBytes: 0,           // 0 = unlimited
+  blockDoubleExtensions: true, // virus.exe.png
   severity: "critical",
 }
 
@@ -645,6 +744,8 @@ words: {
   regex: ["n[i1]tro\\s+free"],
   ignoreCase: true,
   matchWholeWord: true,
+  scanEmbeds: true,
+  normalizeHomoglyphs: true, // rаid-now (Cyrillic a) still matches
   severity: "high",
 }
 
@@ -687,6 +788,83 @@ checkDeletes: true
 
 Disable with `ghostPing: { enabled: false }` or `disabledDetectors: ["ghost"]`.
 
+### Forwards, stickers, voice, polls
+
+```js
+forwards: {
+  enabled: true,
+  maxForwards: 4,          // 4th forward in the window triggers
+  windowMs: 10_000,
+  severity: "medium",
+}
+
+stickers: {
+  enabled: true,
+  maxStickers: 3,          // per message
+  maxInWindow: 8,          // 0 = off
+  windowMs: 10_000,
+  blockOnly: false,        // true = sticker-only messages (no text)
+  severity: "low",
+}
+
+voice: {
+  enabled: true,
+  maxVoice: 3,
+  windowMs: 15_000,
+  severity: "medium",
+}
+
+polls: {
+  enabled: true,
+  maxPolls: 2,
+  windowMs: 20_000,
+  severity: "medium",
+}
+```
+
+`lenient` turns forwards, voice, and polls off. `strict` tightens the windows and sets `stickers.blockOnly: true`.
+
+### Impersonation
+
+Compares nick / username / display name to the bot (`matchBot`) and any extra `names`. Text is folded (homoglyphs stripped, alphanumeric only) before similarity.
+
+```js
+impersonate: {
+  enabled: true,
+  matchBot: true,
+  names: ["Admin", "Moderador", "Staff"],
+  minSimilarity: 0.84,
+  checkNickname: true,
+  checkUsername: true,
+  checkDisplayName: true,
+  severity: "high",
+}
+```
+
+Skip the bot itself. Short names under 3 letters after folding are ignored.
+
+### Join raids
+
+Off in `balanced` / `lenient`. On in `strict`. Needs `checkJoins: true` (default) and **Server Members Intent**. There is no message to delete: Disguard timeouts/kicks the newest joiner if those punishments are enabled.
+
+```js
+joins: {
+  enabled: false,
+  maxJoins: 8,             // 8th distinct join in the window triggers
+  windowMs: 10_000,
+  minAccountAgeDays: 0,    // e.g. 1 = only count accounts younger than 1 day
+  severity: "critical",
+}
+
+checkJoins: true
+```
+
+```js
+onJoin(incident) {
+  // no Message — use incident.userId / guildId
+}
+```
+
 ### Punishment
 
 Kick and ban stay **disabled** on purpose. Turn them on only if you really want that.
@@ -709,6 +887,7 @@ punishment: {
   addRoleIds: [],             // e.g. ["MUTE_ROLE_ID"] — needs Manage Roles
   removeRoleIds: [],
   minStrikesForRoles: 1,
+  slowmodeSeconds: 0,         // e.g. 10 — on raid/join, needs Manage Channels
 }
 
 // timeout.scale: "none" | "linear" (base * strikes) | "exponential" (base * 2^n)
@@ -718,7 +897,7 @@ punishment: {
 
 `warnMessage` placeholders: `{user}` `{reason}` `{type}` `{strikes}`.
 
-With `escalate: true`, Disguard applies **one** hard action (timeout, or kick, or ban — whichever threshold you hit). Delete and warn can still run together. `addRole` / `removeRole` run if those ID lists are non-empty and strikes ≥ `minStrikesForRoles`.
+With `escalate: true`, Disguard applies **one** hard action (timeout, or kick, or ban — whichever threshold you hit). Delete and warn can still run together. `addRole` / `removeRole` run if those ID lists are non-empty and strikes ≥ `minStrikesForRoles`. `slowmodeSeconds` only runs on **raid** and **join** hits; it stays until a moderator changes it.
 
 If the bot lacks a permission, or the target is higher in the hierarchy, that action is skipped and listed in `result.skipped`.
 
@@ -739,6 +918,9 @@ new AntiSpam(client, {
   onCooldown(message) {
     // Extra spam during punishment.cooldownMs (already deleted if deleteDuringCooldown).
   },
+  onJoin(incident) {
+    // Join raid. No message object.
+  },
 });
 ```
 
@@ -749,7 +931,8 @@ new AntiSpam(client, {
   type: "flood" | "duplicate" | "link" | "image" | "mention" | "caps" | "emoji"
     | "file" | "zalgo" | "newline" | "account" | "length"
     | "word" | "hop" | "punctuation" | "spoiler" | "ghost"
-    | "secret" | "echo" | "invisible" | "attach",
+    | "secret" | "echo" | "invisible" | "attach" | "reply" | "blank" | "embed" | "raid"
+    | "forward" | "sticker" | "impersonate" | "join" | "voice" | "poll",
   severity: "low" | "medium" | "high" | "critical",
   userId: string,
   guildId: string,
@@ -757,7 +940,7 @@ new AntiSpam(client, {
   messageId: string,
   reason: string,
   details: Record<string, unknown>,
-  recommendedActions: Array<"delete" | "warn" | "timeout" | "kick" | "ban" | "addRole" | "removeRole" | "purge">,
+  recommendedActions: Array<"delete" | "warn" | "timeout" | "kick" | "ban" | "addRole" | "removeRole" | "purge" | "slowmode">,
   timestamp: number,
 }
 ```
@@ -804,11 +987,15 @@ antispam.setChannelConfig(guildId, channelId, { images: { maxRepeats: 8 } });
 antispam.getChannelConfig(guildId, channelId);
 antispam.clearChannelConfig(guildId, channelId);
 antispam.setRoleConfig(roleId, { flood: { maxMessages: 12 } });
+antispam.setUserConfig(userId, { flood: { maxMessages: 2 } });
+antispam.clearUserConfig(userId);
 antispam.clearRoleConfig(roleId);
 
 antispam.use(customDetector);
 antispam.getStats();
 antispam.resetStats();
+antispam.getRecentIncidents(20);
+antispam.setDetectorEnabled("poll", false);
 
 // Analyze only — no punishment, no callbacks
 const incident = await antispam.analyze(message);
@@ -823,7 +1010,9 @@ Helpers you can import for your own tools:
 import {
   extractUrls,
   normalizeText,
+  foldHomoglyphs,
   similarity,
+  isForwardedMessage,
   DEFAULT_PHISHING_KEYWORDS,
   DEFAULT_SHORTENERS,
   OFFICIAL_BRANDS,
@@ -964,9 +1153,21 @@ Wait a few seconds between categories so flood does not eat the next test.
 | Echo | Same long sentence in 3 channels within 12s |
 | Invisible | A message padded with many zero-width spaces |
 | Attachments | 8+ files in 10 seconds |
+| Replies | Reply to someone 6 times in 8s |
+| Blank | A message with only spaces |
+| Embeds | A webhook-style dump with 7+ embeds |
+| Raid | Enable `raid` and have 8 people post in the same channel in 6s |
+| Forwards | Forward the same / any messages 4 times in 10s |
+| Stickers | Send 4 stickers in one message |
+| Impersonate | Set your nick to the bot's username (or a name in `impersonate.names`) |
+| Voice | Send 3 voice messages in 15s |
+| Polls | Post 2 polls in 20s |
+| Double ext | Upload `foto.exe.png` |
+| Homoglyph word | Enable `words` with `raid-now`, send `rаid-now` (Cyrillic **а**) |
+| Joins | Enable `joins` and have 8 accounts join within 10s |
 | Edit | Send `hello`, then edit it to `Free Nitro https://bit.ly/test` |
 
-Watch the terminal: `[detect] flood|duplicate|link|image|mention|caps|emoji|file|zalgo|newline|word|hop|punctuation|spoiler|ghost|secret|echo|invisible|attach`.
+Watch the terminal: `[detect] flood|duplicate|link|image|mention|caps|emoji|file|zalgo|newline|word|hop|punctuation|spoiler|ghost|secret|echo|invisible|attach|forward|sticker|impersonate|voice|poll|join`.
 
 The second strike applies a 1 minute timeout with the default example config. Strikes decay after 15 minutes, or call `resetUser`.
 
@@ -1007,6 +1208,70 @@ MIT
 
 # Español
 
+## Novedades de 1.6.0
+
+Reenvíos, dumps de stickers, impersonación del bot/staff, raids de joins, mensajes de voz, encuestas y filtros de palabras/archivos más difíciles de esquivar. Kick/ban siguen **apagados**. `joins` va **apagado** en `balanced`.
+
+| Opción | Default | Qué hace |
+| --- | --- | --- |
+| `forwards` | **on**, 4 / 10s | Demasiados mensajes **reenviados** de Discord. |
+| `stickers` | **on**, 3 por mensaje, 8 / 10s | Dump de stickers. `blockOnly` (off) caza mensajes solo-sticker. |
+| `impersonate` | **on**, bot a 0.84 | Nick / username / display name demasiado parecido al **bot** (o a `names`). |
+| `joins` | **off** (`strict`: on, 6 / 8s) | Demasiadas **cuentas distintas entrando** al servidor. Hace falta `guildMemberAdd`. |
+| `voice` | **on**, 3 / 15s | Demasiados **mensajes de voz**. |
+| `polls` | **on**, 2 / 20s | Demasiadas **encuestas**. |
+| `files.blockDoubleExtensions` | `true` | Caza `virus.exe.png`. |
+| `words.scanEmbeds` | `true` | La lista de palabras también lee embeds. |
+| `words.normalizeHomoglyphs` | `true` | Pliega lookalikes cirílicos / griegos / fullwidth. |
+| `ignoreBoosters` | `false` | Ignora boosters. |
+| `punishment.slowmodeSeconds` | `0` | En hits `raid` / `join`, pone slowmode (hace falta **Manage Channels**). |
+| `getRecentIncidents()` | — | Últimos 50 hits en vivo (no `analyze()`). |
+| `setDetectorEnabled(type, bool)` | — | Enciende/apaga un detector. |
+| `onJoin` | — | Callback de raid de joins (sin mensaje). |
+
+```js
+new AntiSpam(client, {
+  forwards: { maxForwards: 3 },
+  impersonate: { names: ["Admin", "Moderador"] },
+  joins: { enabled: true, maxJoins: 8 },
+  ignoreBoosters: true,
+  words: { enabled: true, list: ["raid-now"], normalizeHomoglyphs: true },
+  punishment: { slowmodeSeconds: 10 },
+  onJoin(incident) {
+    console.log("join raid", incident.details);
+  },
+});
+antispam.setDetectorEnabled("poll", false);
+```
+
+Activa `joins` solo si quieres que un burst de cuentas nuevas dispare timeout al último en entrar.
+
+## Novedades de 1.5.0
+
+Raids de canal, spam de replies, mensajes vacíos, paredes de embeds, allowlist de archivos y config por usuario. Kick/ban siguen **apagados**. `raid` va **apagado** en `balanced`.
+
+| Opción | Default | Qué hace |
+| --- | --- | --- |
+| `replies` | **on**, 6 / 8s | Demasiadas **respuestas** seguidas. |
+| `blank` | **on** | Mensajes vacíos o solo espacios. |
+| `embeds` | **on**, 6 | Demasiados embeds en un mensaje. |
+| `raid` | **off** (`strict`: on) | Demasiados **usuarios distintos** escribiendo en el **mismo canal**. |
+| `files.allowedExtensions` | `[]` | Si lo rellenas, solo esas extensiones pasan. |
+| `emojis.maxInWindow` | `0` (off) | Tope de emojis+stickers entre varios mensajes. |
+| `ignoreNsfw` | `false` | Ignora canales NSFW. |
+| `graceMessages` | `0` | Los primeros N mensajes solo miran file/secret/link/word. |
+| `setUserConfig` | — | Overlay por usuario. |
+
+```js
+new AntiSpam(client, {
+  raid: { enabled: true, maxUsers: 8 },
+  files: { allowedExtensions: ["png", "jpg", "webp"] },
+  graceMessages: 2,
+  ignoreNsfw: true,
+});
+antispam.setUserConfig("ID_USER", { flood: { maxMessages: 2 } });
+```
+
 ## Novedades de 1.4.0
 
 Escaneo de secretos, copypasta entre canales, unicode invisible, flood de adjuntos y logs por webhook. Kick/ban siguen **apagados**.
@@ -1124,6 +1389,8 @@ new AntiSpam(client, {
 
 ## Tabla de contenidos
 
+- [Novedades de 1.6.0](#novedades-de-160)
+- [Novedades de 1.5.0](#novedades-de-150)
 - [Novedades de 1.4.0](#novedades-de-140)
 - [Novedades de 1.3.0](#novedades-de-130)
 - [Novedades de 1.2.0](#novedades-de-120)
@@ -1149,7 +1416,7 @@ new AntiSpam(client, {
 
 **Disguard** es una librería antispam para bots de discord.js v14. No es un bot: la enchufas a tu `Client` y tú decides umbrales, listas y castigos.
 
-Detecta flood, salto de canales, palabras bloqueadas, phishing / enlaces no deseados (también en embeds), imágenes repetidas, spam de menciones, ghost pings, mayúsculas, emojis, archivos peligrosos, zalgo y paredes de líneas.
+Detecta flood, salto de canales, palabras bloqueadas, phishing / enlaces no deseados (también en embeds), imágenes repetidas, spam de menciones, ghost pings, reenvíos, impersonación, raids de joins, mayúsculas, emojis, archivos peligrosos, zalgo y paredes de líneas.
 
 ## Requisitos
 
@@ -1236,6 +1503,8 @@ npm run dev
 | Embed de logs | **Embed Links** |
 | Kick / ban (opt-in) | **Kick Members** / **Ban Members** |
 | Mute / add / remove roles (opt-in) | **Manage Roles** |
+| Slowmode en raid/join (opt-in) | **Manage Channels** |
+| Raid de joins | **Server Members Intent** (`guildMemberAdd`) |
 
 No puede sancionar al dueño del servidor ni a quien esté por encima del bot en la jerarquía.
 
@@ -1245,10 +1514,11 @@ Activa **Message Content Intent** en el [Portal de Discord](https://discord.com/
 
 1. Ignora bots, webhooks, mensajes de sistema, el dueño, administradores, prefijos de comando y tus listas de ignore.
 2. Guarda en **memoria** un historial corto por usuario y servidor. Sin base de datos.
-3. Pasa el mensaje por: archivos → secretos → palabras → flood → hop → echo → duplicados → adjuntos → enlaces → imágenes → menciones → zalgo → líneas → puntuación → spoilers → invisibles → cuentas → longitud → caps → emojis. El primero que dispare gana.
+3. Pasa el mensaje por: archivos → secretos → palabras → impersonate → flood → hop → echo → duplicados → adjuntos → raid → replies → vacíos → embeds → reenvíos → voz → encuestas → stickers → enlaces → imágenes → menciones → zalgo → líneas → puntuación → spoilers → invisibles → cuentas → longitud → caps → emojis. El primero que dispare gana.
 4. Suma un strike (con caducidad) y aplica el castigo configurado.
 5. Las ediciones revisan **enlaces**, **menciones** y **palabras**.
 6. Los borrados pueden disparar **ghost** ping si `ghostPing.enabled` es true.
+7. Los joins pueden disparar **join** si `joins.enabled` es true.
 
 Llama `antispam.stop()` al apagar el proceso.
 
@@ -1283,8 +1553,10 @@ Todo es opcional. Lo que no pongas usa el preset.
 | `ignoreAdministrators` | `boolean` | `true` | Ignora quien tenga Administrator. |
 | `checkEdits` | `boolean` | `true` | Revisa ediciones (enlaces, menciones y palabras). |
 | `checkDeletes` | `boolean` | `true` | Escucha `messageDelete` (ghost pings). |
+| `checkJoins` | `boolean` | `true` | Escucha `guildMemberAdd` (raids de joins). |
 | `ignoreThreads` | `boolean` | `false` | Ignora hilos. |
 | `ignoreSystem` | `boolean` | `true` | Ignora mensajes de sistema. |
+| `ignoreBoosters` | `boolean` | `false` | Ignora boosters. |
 | `cleanupIntervalMs` | `number` | `60000` | Limpieza de memoria. |
 | `roleOverrides` | `object` | `{}` | Parches por rol. |
 
@@ -1383,7 +1655,7 @@ emojis: { enabled: true, maxEmojis: 12, maxStickers: 3, severity: "low" },
 ### Archivos, zalgo, saltos de línea
 
 ```js
-files: { enabled: true, blockedExtensions: ["exe", "bat", "cmd", "dll", "msi"], maxBytes: 0, severity: "critical" },
+files: { enabled: true, blockedExtensions: ["exe", "bat", "cmd", "dll", "msi"], maxBytes: 0, blockDoubleExtensions: true, severity: "critical" },
 zalgo: { enabled: true, maxCombining: 20, severity: "medium" },
 newlines: { enabled: true, maxNewlines: 15, severity: "low" },
 ```
@@ -1391,14 +1663,20 @@ newlines: { enabled: true, maxNewlines: 15, severity: "low" },
 ### Palabras, hop, puntuación, spoilers, ghost ping
 
 ```js
-words: { enabled: false, list: ["raid-now"], regex: [], ignoreCase: true, matchWholeWord: true, severity: "high" },
+words: { enabled: false, list: ["raid-now"], regex: [], ignoreCase: true, matchWholeWord: true, scanEmbeds: true, normalizeHomoglyphs: true, severity: "high" },
 hop: { enabled: true, maxChannels: 5, windowMs: 8_000, severity: "high" },
 punctuation: { enabled: true, maxRepeated: 10, severity: "low" },
 spoilers: { enabled: true, maxSpoilers: 8, severity: "low" },
 ghostPing: { enabled: false, minMentions: 1, maxAgeMs: 15_000, severity: "high" },
+forwards: { enabled: true, maxForwards: 4, windowMs: 10_000, severity: "medium" },
+stickers: { enabled: true, maxStickers: 3, maxInWindow: 8, blockOnly: false, severity: "low" },
+impersonate: { enabled: true, matchBot: true, names: ["Admin", "Moderador"], minSimilarity: 0.84, severity: "high" },
+joins: { enabled: false, maxJoins: 8, windowMs: 10_000, severity: "critical" },
+voice: { enabled: true, maxVoice: 3, windowMs: 15_000, severity: "medium" },
+polls: { enabled: true, maxPolls: 2, windowMs: 20_000, severity: "medium" },
 ```
 
-`lenient` apaga hop y puntuación. `strict` enciende ghost ping y aprieta hop a 3 canales / 6s.
+`lenient` apaga hop, puntuación, reenvíos, voz y encuestas. `strict` enciende ghost ping, joins y aprieta umbrales.
 
 ### Castigos
 
@@ -1421,6 +1699,7 @@ punishment: {
   addRoleIds: [],
   removeRoleIds: [],
   minStrikesForRoles: 1,
+  slowmodeSeconds: 0,
 }
 ```
 
@@ -1439,6 +1718,7 @@ new AntiSpam(client, {
     console.error(context, error);
   },
   onCooldown(message) {},
+  onJoin(incident) {},
 });
 ```
 
@@ -1461,7 +1741,10 @@ antispam.resetUser(guildId, userId);
 antispam.setGuildConfig(guildId, { flood: { maxMessages: 3 } });
 antispam.setChannelConfig(guildId, channelId, { flood: { maxMessages: 12 } });
 antispam.setRoleConfig(roleId, { emojis: { maxEmojis: 40 } });
+antispam.setUserConfig(userId, { flood: { maxMessages: 2 } });
 antispam.getStats();
+antispam.getRecentIncidents(10);
+antispam.setDetectorEnabled("poll", false);
 
 const incident = await antispam.analyze(message);
 const editado = await antispam.analyze(message, { isEdit: true });
@@ -1540,9 +1823,21 @@ Espera unos segundos entre categorías.
 | Echo | La misma frase larga en 3 canales en 12s |
 | Invisible | Un mensaje con muchos espacios de ancho cero |
 | Adjuntos | 8+ archivos en 10 segundos |
+| Replies | Responder 6 veces en 8s |
+| Vacío | Un mensaje solo con espacios |
+| Embeds | 7+ embeds en un mensaje |
+| Raid | Activa `raid` y que 8 personas escriban en el mismo canal |
+| Reenvíos | Reenvía 4 mensajes en 10s |
+| Stickers | 4 stickers en un mensaje |
+| Impersonar | Pon tu nick igual al del bot (o un nombre de `impersonate.names`) |
+| Voz | 3 mensajes de voz en 15s |
+| Encuestas | 2 polls en 20s |
+| Doble ext | Sube `foto.exe.png` |
+| Homoglyph | Activa `words` con `raid-now` y manda `rаid-now` (а cirílica) |
+| Joins | Activa `joins` y que 8 cuentas entren en 10s |
 | Edición | Manda `hola` y edítalo a `Free Nitro https://bit.ly/test` |
 
-En la terminal: `[detect] flood|duplicate|link|image|mention|caps|emoji|file|zalgo|newline|word|hop|punctuation|spoiler|ghost|secret|echo|invisible|attach`.
+En la terminal: `[detect] flood|duplicate|link|image|mention|caps|emoji|file|zalgo|newline|word|hop|punctuation|spoiler|ghost|secret|echo|invisible|attach|forward|sticker|impersonate|voice|poll|join`.
 
 Al segundo strike el ejemplo mete timeout de 1 minuto. Los strikes caducan a los 15 minutos, o usa `resetUser`.
 

package/dist/AntiSpam.d.ts

@@ -1,6 +1,6 @@
 import { type Client, type Message } from "discord.js";
 import { MemoryStore } from "./store/MemoryStore";
-import type { AntiSpamOptions, AntiSpamStats, DeepPartial, Detector, Incident, ResolvedConfig } from "./types";
+import type { AntiSpamOptions, AntiSpamStats, DeepPartial, Detector, DetectorType, Incident, ResolvedConfig } from "./types";
 export declare class AntiSpam {
     readonly client: Client;
     readonly store: MemoryStore;
@@ -10,12 +10,14 @@ export declare class AntiSpam {
     private readonly guildConfigs;
     private readonly channelConfigs;
     private stats;
+    private readonly recentIncidents;
     private started;
     private paused;
     private cleanupTimer;
     private readonly onMessage;
     private readonly onEdit;
     private readonly onDelete;
+    private readonly onJoin;
     constructor(client: Client, options?: AntiSpamOptions);
     /** Starts listening to `messageCreate` (and `messageUpdate` / `messageDelete` if enabled). */
     start(): this;
@@ -40,10 +42,14 @@ export declare class AntiSpam {
     clearChannelConfig(guildId: string, channelId: string): void;
     setRoleConfig(roleId: string, patch: DeepPartial<ResolvedConfig>): void;
     clearRoleConfig(roleId: string): void;
+    setUserConfig(userId: string, patch: DeepPartial<ResolvedConfig>): void;
+    clearUserConfig(userId: string): void;
     getStrikes(guildId: string, userId: string): number;
     isCoolingDown(guildId: string, userId: string): boolean;
     resetUser(guildId: string, userId: string): void;
     getStats(): AntiSpamStats;
+    getRecentIncidents(limit?: number): Incident[];
+    setDetectorEnabled(type: DetectorType, enabled: boolean): this;
     resetStats(): void;
     /**
      * Analyzes a message without punishing.
@@ -54,10 +60,12 @@ export declare class AntiSpam {
     }): Promise<Incident | null>;
     private handle;
     private handleDelete;
+    private handleJoin;
     shouldIgnore(message: Message): boolean;
     private configFor;
     private orderedDetectors;
     private toSnapshot;
+    private pushRecent;
     private maxRetentionMs;
 }
 export declare function createAntiSpam(client: Client, options?: AntiSpamOptions): AntiSpam;

package/dist/AntiSpam.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AntiSpam.d.ts","sourceRoot":"","sources":["../src/AntiSpam.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,MAAM,EACX,KAAK,OAAO,EAEb,MAAM,YAAY,CAAC;AAwBpB,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,KAAK,EAEV,eAAe,EACf,aAAa,EACb,WAAW,EACX,QAAQ,EAER,QAAQ,EAER,cAAc,EACf,MAAM,SAAS,CAAC;AAuCjB,qBAAa,QAAQ;IACnB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,cAAqB;IAEnC,OAAO,CAAC,MAAM,CAAiB;IAC/B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAa;IACvC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkB;IAC1C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAkD;IAC/E,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAkD;IACjF,OAAO,CAAC,KAAK,CAAgB;IAC7B,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,YAAY,CAA+B;IAEnD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAExB;IAEF,OAAO,CAAC,QAAQ,CAAC,MAAM,CAGrB;IAEF,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAEvB;gBAEU,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,eAAoB;IA6BzD,8FAA8F;IAC9F,KAAK,IAAI,IAAI;IAiBb,8CAA8C;IAC9C,IAAI,IAAI,IAAI;IAaZ,mEAAmE;IACnE,KAAK,IAAI,IAAI;IAKb,MAAM,IAAI,IAAI;IAKd,QAAQ,IAAI,OAAO;IAInB,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI;IAKlC,SAAS,IAAI,OAAO;IAIpB,+DAA+D;IAC/D,GAAG,CAAC,QAAQ,EAAE,QAAQ,GAAG,IAAI;IAK7B,SAAS,IAAI,cAAc;IAI3B,SAAS,CAAC,KAAK,EAAE,WAAW,CAAC,cAAc,CAAC,GAAG,cAAc;IAK7D,gDAAgD;IAChD,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,cAAc;IAI/C,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,CAAC,cAAc,CAAC,GAAG,cAAc;IAMnF,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAIvC,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,cAAc;IAIpE,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,CAAC,cAAc,CAAC,GAAG,cAAc;IAOxG,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI;IAI5D,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,CAAC,cAAc,CAAC,GAAG,IAAI;IAMvE,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAMrC,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM;IASnD,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO;IAKvD,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAIhD,QAAQ,IAAI,aAAa;IAIzB,UAAU,IAAI,IAAI;IAIlB;;;OAGG;IACG,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,GAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;YAkD/E,MAAM;YAoDN,YAAY;IAkC1B,YAAY,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO;IA8CvC,OAAO,CAAC,SAAS;IAwBjB,OAAO,CAAC,gBAAgB;IASxB,OAAO,CAAC,UAAU;IAkBlB,OAAO,CAAC,cAAc;CAcvB;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,QAAQ,CAElF"}
+{"version":3,"file":"AntiSpam.d.ts","sourceRoot":"","sources":["../src/AntiSpam.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,MAAM,EAEX,KAAK,OAAO,EAEb,MAAM,YAAY,CAAC;AAkCpB,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,KAAK,EAEV,eAAe,EACf,aAAa,EACb,WAAW,EACX,QAAQ,EACR,YAAY,EACZ,QAAQ,EAER,cAAc,EACf,MAAM,SAAS,CAAC;AA8DjB,qBAAa,QAAQ;IACnB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,cAAqB;IAEnC,OAAO,CAAC,MAAM,CAAiB;IAC/B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAa;IACvC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkB;IAC1C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAkD;IAC/E,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAkD;IACjF,OAAO,CAAC,KAAK,CAAgB;IAC7B,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAkB;IAClD,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,YAAY,CAA+B;IAEnD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAExB;IAEF,OAAO,CAAC,QAAQ,CAAC,MAAM,CAGrB;IAEF,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAEvB;IAEF,OAAO,CAAC,QAAQ,CAAC,MAAM,CAErB;gBAEU,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,eAAoB;IA8CzD,8FAA8F;IAC9F,KAAK,IAAI,IAAI;IAoBb,8CAA8C;IAC9C,IAAI,IAAI,IAAI;IAcZ,mEAAmE;IACnE,KAAK,IAAI,IAAI;IAKb,MAAM,IAAI,IAAI;IAKd,QAAQ,IAAI,OAAO;IAInB,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI;IAKlC,SAAS,IAAI,OAAO;IAIpB,+DAA+D;IAC/D,GAAG,CAAC,QAAQ,EAAE,QAAQ,GAAG,IAAI;IAK7B,SAAS,IAAI,cAAc;IAI3B,SAAS,CAAC,KAAK,EAAE,WAAW,CAAC,cAAc,CAAC,GAAG,cAAc;IAK7D,gDAAgD;IAChD,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,cAAc;IAI/C,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,CAAC,cAAc,CAAC,GAAG,cAAc;IAMnF,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAIvC,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,cAAc;IAIpE,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,CAAC,cAAc,CAAC,GAAG,cAAc;IAOxG,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI;IAI5D,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,CAAC,cAAc,CAAC,GAAG,IAAI;IAMvE,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAMrC,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,CAAC,cAAc,CAAC,GAAG,IAAI;IAMvE,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAMrC,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM;IASnD,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO;IAKvD,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAIhD,QAAQ,IAAI,aAAa;IAIzB,kBAAkB,CAAC,KAAK,SAAK,GAAG,QAAQ,EAAE;IAI1C,kBAAkB,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI;IAQ9D,UAAU,IAAI,IAAI;IAKlB;;;OAGG;IACG,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,GAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;YAiE/E,MAAM;YAqDN,YAAY;YAmCZ,UAAU;IA4CxB,YAAY,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO;IAqDvC,OAAO,CAAC,SAAS;IA2BjB,OAAO,CAAC,gBAAgB;IASxB,OAAO,CAAC,UAAU;IAyBlB,OAAO,CAAC,UAAU;IAOlB,OAAO,CAAC,cAAc;CAsBvB;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,QAAQ,CAElF"}