security hardening

.claude/settings.local.json

@@ -8,7 +8,24 @@
       "Bash(node --check handlers/buttons.js)",
       "Bash(node --check gmail-poll.js)",
       "Bash(node --check handlers/pendingCloses.js)",
-      "Bash(node --check commands/register.js)"
+      "Bash(node --check commands/register.js)",
+      "Bash(grep -E \"\\\\.js$|\\\\.json$|^d\")",
+      "Bash(grep -r \"require\\\\|import\" /opt/broccolini-bot/*.js /opt/broccolini-bot/routes/*.js /opt/broccolini-bot/api/*.js)",
+      "Bash(grep -r \"require\\\\|import\" /opt/broccolini-bot/*.js)",
+      "Bash(grep *)",
+      "Bash(npm install *)",
+      "Bash(node -e \"require\\('./routes/bosscord'\\)\")",
+      "Bash(node -e \"require\\('./routes/internalApi'\\)\")",
+      "Bash(node -e \"require\\('express-rate-limit'\\)\")",
+      "Bash(node --check services/surgeChecker.js)",
+      "Bash(node --check services/patternChecker.js)",
+      "Bash(node --check services/chatAlertChecker.js)",
+      "Bash(node --check services/debugLog.js)",
+      "Bash(node --check services/staffChannel.js)",
+      "Bash(node --check handlers/messages.js)",
+      "Bash(node *)",
+      "Bash(npm info *)",
+      "Bash(npm ls *)"
     ]
   }
 }