[dottenbr]

Adds node:test coverage (no dependencies) for the Cloudflare worker in worker/src/index.js: routing, origin check, rate limit, honeypot, validation, field truncation, header/HTML escaping, reply-to, photo caps and size budget, 502 on send failure, and the no-JS redirect flow. Adds an npm test script. No source changes; email and limiter bindings are mocked.

---

Generated by Claude Code

Summary by CodeRabbit

• Tests
  • Added automated checks for request paths and methods, origin restrictions, rate limits, required fields, honeypot submissions, and input limits.
  • Added coverage for email composition and failures, photo filtering, and redirect behavior.
  • Added a standard way to run the test suite, helping catch regressions in these areas before release.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-16T23:05:50.154295Z	46f1532	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: ff29fcf5-0bcf-4b01-a246-1a3a8b25bc9b

📥 Commits

Reviewing files that changed from the base of the PR and between 06b7c08 and 46f1532.

📒 Files selected for processing: 2

• package.json
• worker/test/index.test.js

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

📝 Walkthrough

The pull request adds a Node test command and dependency-free tests for worker request handling, email composition, photo processing, and response outcomes.

Changes: Worker test coverage

Layer / File(s)	Summary
Test setup and request checks package.json, worker/test/index.test.js	Adds a test script and helpers for mock bindings and multipart POST requests. Tests cover unknown paths, methods, origins, rate limiting, required fields, and honeypot handling.
Email and response checks worker/test/index.test.js	Tests email headers and content, name truncation, photo filtering and limits, email-send failures, and HTML-client redirects.

Priority: ⬇️ Low

Estimated code review effort: 2 (Simple) | ~10 minutes

Change: Other

Merge Risk: ⚪ Minimal · up to 46f15

No confirmed issue prevents merging. Run npm test as part of normal validation.

Pre-merge checks: 4 · 1

Failed checks: 1 warning

Check name	Status	Explanation	Resolution
Docstring Coverage		Docstring coverage is 0.00% which is insufficient. The required threshold is 80.00%. Docstring coverage is scoped to functions touched by this diff. Analyzed 3 functions across 1 files. (1 skipped: 1 …	Write docstrings for the functions missing them to satisfy the coverage threshold.

Passed checks: 4 passed

Check name	Status	Explanation
Description Check		Check skipped - CodeRabbit’s high-level summary is enabled.
Title check		The title clearly and concisely describes the main change: adding test coverage for the damage report worker.
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Full details: Docstring Coverage

Explanation

Docstring coverage is 0.00% which is insufficient. The required threshold is 80.00%. Docstring coverage is scoped to functions touched by this diff. Analyzed 3 functions across 1 files. (1 skipped: 1 unsupported.)

Resolution

Write docstrings for the functions missing them to satisfy the coverage threshold.

• Fix all pre-merge checks with AI

✨ Finishing Touches: 💡 1

📝 Generate docstrings: 💡

• Commit to this branch
• Create a new PR

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 46f15329c4

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Run the new worker tests in CI

The existing .github/workflows/check.yml workflow still runs only npm run check and node --check worker/src/index.js, so this newly added npm test command is never executed for pushes or pull requests. Consequently, worker behavior regressions—or broken tests themselves—can merge while CI remains green; add an npm test step to that workflow.

Useful? React with 👍 / 👎.