TOD-10: Implement Public API

[claude]

Summary

• Add Node.js/Express REST API server (api/) with JWT-based authentication
• Implement SQLite database with full schema (users, todos, projects, collaborators, comments, attachments)
• Auth endpoints: register, login, logout, token refresh, forgot/reset password, email verification
• Todo CRUD endpoints with pagination, filtering, sorting, search, and bulk update
• Project management endpoints with collaborator invite support
• User profile and settings endpoints
• Rate limiting (global 500 req/15min, auth 20 req/15min), security headers, CORS
• OpenAPI/Swagger documentation available at /api/docs

API Endpoints

Auth: POST /api/auth/register, POST /api/auth/login, POST /api/auth/logout, POST /api/auth/refresh, POST /api/auth/forgot-password, POST /api/auth/reset-password, GET /api/auth/verify-email

Todos: GET /api/todos, POST /api/todos, GET /api/todos/:id, PUT /api/todos/:id, DELETE /api/todos/:id, POST /api/todos/bulk-update, GET /api/todos/search

Projects: GET /api/projects, POST /api/projects, PUT /api/projects/:id, DELETE /api/projects/:id, POST /api/projects/:id/invite

User: GET /api/user/profile, PUT /api/user/profile, GET /api/user/settings, PUT /api/user/settings

Getting Started

cd api
npm install
node server.js

Linear Ticket

https://linear.app/issue/TOD-10

Closes TOD-10

[cloudflare-workers-and-pages]

Deploying upstatephp-todo with    Cloudflare Pages

Latest commit:	1918f8b
Status:	✅  Deploy successful!
Preview URL:	https://56816e37.upstatephp-todo.pages.dev
Branch Preview URL:	https://agent-tod-10.upstatephp-todo.pages.dev

View logs