security hardening

handlers/buttons.js

@@ -21,7 +21,7 @@ const { sendTicketClosedEmail } = require('../services/gmail');
 const { getTicketActionRow } = require('../utils/ticketComponents');
 const { sanitizeEmbedText, truncateEmbedDescription, truncateEmbedField, enforceEmbedLimit } = require('../utils');
 const { setEmailRouting } = require('../services/guildSettings');
-const { enqueueRename } = require('../services/channelQueue');
+const { enqueueRename, enqueueSend } = require('../services/channelQueue');
 const { runEscalation, runDeescalation } = require('./commands');
 const { trackInteraction, trackError } = require('./analytics');
 const { pendingCloses } = require('./pendingCloses');
@@ -356,7 +356,7 @@ async function handleClaim(interaction, ticket) {
     } else {
       const unlockAtMs = Date.now() + renameInfo.waitMs;
       const unlockAtUnix = Math.floor(unlockAtMs / 1000);
-      await interaction.channel.send(
+      await enqueueSend(interaction.channel,
         `Channel renamed too quickly. Try again <t:${unlockAtUnix}:R>.`
       );
     }
@@ -410,7 +410,7 @@ async function handleClaim(interaction, ticket) {
     } else {
       const unlockAtMs = Date.now() + renameInfo.waitMs;
       const unlockAtUnix = Math.floor(unlockAtMs / 1000);
-      await interaction.channel.send(
+      await enqueueSend(interaction.channel,
         `Channel renamed too quickly. Try again <t:${unlockAtUnix}:R>.`
       );
     }
@@ -496,7 +496,7 @@ async function handleConfirmClose(interaction, ticket) {
 
     // In-ticket message before transcript is posted (Discord close message)
     const discordCloseContent = CONFIG.DISCORD_CLOSE_MESSAGE;
-    await interaction.channel.send(discordCloseContent);
+    await enqueueSend(interaction.channel, discordCloseContent);
 
     const transcriptChan = await interaction.client.channels
       .fetch(CONFIG.TRANSCRIPT_CHAN)
@@ -511,7 +511,7 @@ async function handleConfirmClose(interaction, ticket) {
       + `\n\nDate Opened: ${openedStr}\nDate Closed: ${closedStr}`;
 
     if (transcriptChan) {
-      transcriptMsg = await transcriptChan.send({
+      transcriptMsg = await enqueueSend(transcriptChan, {
         content: transcriptContent,
         files: [file]
       });
@@ -559,7 +559,7 @@ async function handleConfirmClose(interaction, ticket) {
       } else {
         logMsg = `Closed **${channelName}** (${ticket.senderEmail}) by ${closerMention} (${closerDisplayName})`;
       }
-      await logChan.send(logMsg);
+      await enqueueSend(logChan, logMsg);
     }
 
     const closerDisplayName =
@@ -732,7 +732,7 @@ async function handleTicketModal(interaction) {
 
     enforceEmbedLimit([welcomeEmbed, infoEmbed, resourcesEmbed]);
     try {
-      const welcomeMsg = await channel.send({
+      const welcomeMsg = await enqueueSend(channel, {
         content: `Hey There ${interaction.user} 🥦`,
         embeds: [welcomeEmbed, infoEmbed, resourcesEmbed],
         components: [actionRow]
@@ -765,7 +765,7 @@ async function handleTicketModal(interaction) {
 
     const logChan = await interaction.client.channels.fetch(CONFIG.LOG_CHAN).catch(() => null);
     if (logChan) {
-      await logChan.send(
+      await enqueueSend(logChan,
         `📝 ${channel.name} created by ${interaction.user.tag}`
       );
     }