algorithm-conduction · algorithm-conduction · Apr 2, 2026
diff --git a/package.json b/package.json
@@ -0,0 +1,19 @@
+{
+  "name": "todo-app",
+  "version": "1.0.0",
+  "description": "Minimal Todo MVP — Node.js + Express REST API with in-memory store",
+  "main": "src/server.js",
+  "type": "module",
+  "scripts": {
+    "start": "node src/server.js",
+    "test": "vitest run"
+  },
+  "dependencies": {
+    "express": "^4.18.2"
+  },
+  "devDependencies": {
+    "supertest": "^6.3.4",
+    "vitest": "^1.4.0"
+  },
+  "license": "EUPL-1.2"
+}
diff --git a/public/index.html b/public/index.html
@@ -0,0 +1,90 @@
+<!DOCTYPE html>
+<!-- SPDX-License-Identifier: EUPL-1.2 -->
+<!-- Copyright (C) 2026 Conduction B.V. -->
+<html lang="en">
+<head>
+  <meta charset="UTF-8" />
+  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+  <title>Todo App</title>
+  <style>
+    body { font-family: sans-serif; max-width: 600px; margin: 2rem auto; padding: 0 1rem; }
+    h1 { font-size: 1.5rem; }
+    form { display: flex; gap: 0.5rem; margin-bottom: 1rem; }
+    input[type="text"] { flex: 1; padding: 0.4rem; font-size: 1rem; }
+    button { padding: 0.4rem 0.8rem; cursor: pointer; }
+    ul { list-style: none; padding: 0; }
+    li { display: flex; align-items: center; gap: 0.5rem; padding: 0.3rem 0; border-bottom: 1px solid #eee; }
+    li.completed span { text-decoration: line-through; color: #999; }
+    .del { margin-left: auto; background: none; border: none; color: red; cursor: pointer; font-size: 1rem; }
+  </style>
+</head>
+<body>
+  <h1>Todo App</h1>
+  <form id="add-form">
+    <input type="text" id="title-input" placeholder="New todo…" required />
+    <button type="submit">Add</button>
+  </form>
+  <ul id="todo-list"></ul>
+
+  <script>
+    const list = document.getElementById('todo-list');
+    const form = document.getElementById('add-form');
+    const input = document.getElementById('title-input');
+
+    async function load() {
+      const res = await fetch('/api/todos');
+      const todos = await res.json();
+      list.innerHTML = '';
+      todos.forEach(render);
+    }
+
+    function render(todo) {
+      const li = document.createElement('li');
+      if (todo.completed) li.classList.add('completed');
+
+      const cb = document.createElement('input');
+      cb.type = 'checkbox';
+      cb.checked = todo.completed;
+      cb.addEventListener('change', () => toggle(todo.id, cb.checked));
+
+      const span = document.createElement('span');
+      span.textContent = todo.title;
+
+      const del = document.createElement('button');
+      del.className = 'del';
+      del.textContent = '✕';
+      del.addEventListener('click', () => remove(todo.id));
+
+      li.append(cb, span, del);
+      list.appendChild(li);
+    }
+
+    form.addEventListener('submit', async (e) => {
+      e.preventDefault();
+      await fetch('/api/todos', {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ title: input.value }),
+      });
+      input.value = '';
+      load();
+    });
+
+    async function toggle(id, completed) {
+      await fetch(`/api/todos/${id}`, {
+        method: 'PATCH',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ completed }),
+      });
+      load();
+    }
+
+    async function remove(id) {
+      await fetch(`/api/todos/${id}`, { method: 'DELETE' });
+      load();
+    }
+
+    load();
+  </script>
+</body>
+</html>
diff --git a/src/server.js b/src/server.js
@@ -0,0 +1,53 @@
+// SPDX-License-Identifier: EUPL-1.2
+// Copyright (C) 2026 Conduction B.V.
+
+import express from 'express';
+import { createRequire } from 'module';
+import { fileURLToPath } from 'url';
+import { dirname, join } from 'path';
+import store from './store.js';
+
+const app = express();
+app.use(express.json());
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+app.use(express.static(join(__dirname, '../public')));
+
+// GET /api/todos — list all todos
+app.get('/api/todos', (req, res) => {
+  res.json(store.list());
+});
+
+// POST /api/todos — create a todo
+app.post('/api/todos', (req, res) => {
+  const { title } = req.body;
+  if (!title || typeof title !== 'string') {
+    return res.status(400).json({ error: 'title is required' });
+  }
+  const todo = store.create(title.trim());
+  res.status(201).json(todo);
+});
+
+// PATCH /api/todos/:id — update a todo
+app.patch('/api/todos/:id', (req, res) => {
+  const id = parseInt(req.params.id, 10);
+  const { completed } = req.body;
+  const todo = store.update(id, { completed });
+  if (!todo) return res.status(404).json({ error: 'not found' });
+  res.json(todo);
+});
+
+// DELETE /api/todos/:id — delete a todo
+app.delete('/api/todos/:id', (req, res) => {
+  const id = parseInt(req.params.id, 10);
+  const removed = store.remove(id);
+  if (!removed) return res.status(404).json({ error: 'not found' });
+  res.status(204).end();
+});
+
+const PORT = process.env.PORT || 3000;
+if (process.env.NODE_ENV !== 'test') {
+  app.listen(PORT, () => console.log(`Todo API listening on port ${PORT}`));
+}
+
+export default app;
diff --git a/src/store.js b/src/store.js
@@ -0,0 +1,36 @@
+// SPDX-License-Identifier: EUPL-1.2
+// Copyright (C) 2026 Conduction B.V.
+
+let nextId = 1;
+const todos = [];
+
+function list() {
+  return [...todos];
+}
+
+function create(title) {
+  const todo = { id: nextId++, title, completed: false };
+  todos.push(todo);
+  return todo;
+}
+
+function update(id, fields) {
+  const todo = todos.find((t) => t.id === id);
+  if (!todo) return null;
+  Object.assign(todo, fields);
+  return todo;
+}
+
+function remove(id) {
+  const index = todos.findIndex((t) => t.id === id);
+  if (index === -1) return false;
+  todos.splice(index, 1);
+  return true;
+}
+
+function reset() {
+  todos.length = 0;
+  nextId = 1;
+}
+
+export default { list, create, update, remove, reset };
diff --git a/test/api.test.js b/test/api.test.js
@@ -0,0 +1,82 @@
+// SPDX-License-Identifier: EUPL-1.2
+// Copyright (C) 2026 Conduction B.V.
+
+import { describe, it, expect, beforeEach } from 'vitest';
+import request from 'supertest';
+import app from '../src/server.js';
+import store from '../src/store.js';
+
+beforeEach(() => {
+  store.reset();
+});
+
+describe('POST /api/todos', () => {
+  it('creates a todo and returns 201 with id, title, completed:false', async () => {
+    const res = await request(app)
+      .post('/api/todos')
+      .send({ title: 'Buy milk' });
+
+    expect(res.status).toBe(201);
+    expect(res.body).toMatchObject({ id: expect.any(Number), title: 'Buy milk', completed: false });
+  });
+
+  it('returns 400 when title is missing', async () => {
+    const res = await request(app).post('/api/todos').send({});
+    expect(res.status).toBe(400);
+  });
+});
+
+describe('GET /api/todos', () => {
+  it('returns 200 and an array containing created todos', async () => {
+    await request(app).post('/api/todos').send({ title: 'Buy milk' });
+
+    const res = await request(app).get('/api/todos');
+    expect(res.status).toBe(200);
+    expect(Array.isArray(res.body)).toBe(true);
+    expect(res.body).toHaveLength(1);
+    expect(res.body[0]).toMatchObject({ title: 'Buy milk', completed: false });
+  });
+
+  it('returns empty array when no todos exist', async () => {
+    const res = await request(app).get('/api/todos');
+    expect(res.status).toBe(200);
+    expect(res.body).toEqual([]);
+  });
+});
+
+describe('PATCH /api/todos/:id', () => {
+  it('marks a todo as completed and returns 200', async () => {
+    const created = await request(app).post('/api/todos').send({ title: 'Buy milk' });
+    const { id } = created.body;
+
+    const res = await request(app)
+      .patch(`/api/todos/${id}`)
+      .send({ completed: true });
+
+    expect(res.status).toBe(200);
+    expect(res.body.completed).toBe(true);
+  });
+
+  it('returns 404 for unknown id', async () => {
+    const res = await request(app).patch('/api/todos/999').send({ completed: true });
+    expect(res.status).toBe(404);
+  });
+});
+
+describe('DELETE /api/todos/:id', () => {
+  it('deletes a todo and returns 204', async () => {
+    const created = await request(app).post('/api/todos').send({ title: 'Buy milk' });
+    const { id } = created.body;
+
+    const res = await request(app).delete(`/api/todos/${id}`);
+    expect(res.status).toBe(204);
+
+    const list = await request(app).get('/api/todos');
+    expect(list.body).toHaveLength(0);
+  });
+
+  it('returns 404 for unknown id', async () => {
+    const res = await request(app).delete('/api/todos/999');
+    expect(res.status).toBe(404);
+  });
+});