security hardening

services/staffThread.js

@@ -5,7 +5,7 @@
  * Notes:
  * - The bot requires CREATE_PRIVATE_THREADS and SEND_MESSAGES_IN_THREADS
  *   permissions on every ticket category.
- * - Private threads (type: 12) require the server to have Community features
+ * - Private threads (ChannelType.PrivateThread) require the server to have Community features
  *   OR the channel to be in a server with Boost level that unlocks private
  *   threads. If thread creation fails with code 50024 or 160004, a warning
  *   is logged via logWarn.
@@ -15,6 +15,7 @@
  *   servers. The 300ms delay between adds avoids the thread member add rate
  *   limit (approximately 5/second).
  */
+const { ChannelType } = require('discord.js');
 const { CONFIG } = require('../config');
 const { logError, logWarn } = require('./debugLog');
 
@@ -32,7 +33,7 @@ async function createStaffThread(channel, client) {
 
     const thread = await channel.threads.create({
       name: threadName,
-      type: 12, // ChannelType.PrivateThread
+      type: ChannelType.PrivateThread,
       invitable: false,
       reason: 'Staff discussion thread for ticket'
     });
@@ -84,7 +85,7 @@ async function addMemberToStaffThread(channel, memberId) {
   try {
     const threads = await channel.threads.fetchActive();
     const staffThread = threads.threads.find(t =>
-      t.name === CONFIG.STAFF_THREAD_NAME && t.type === 12
+      t.name === CONFIG.STAFF_THREAD_NAME && t.type === ChannelType.PrivateThread
     );
     if (!staffThread) return;
     await staffThread.members.add(memberId);