feat: list + task endpoints and CORS, verified end-to-end

server/api/tasks/[id].delete.ts

@@ -0,0 +1,6 @@
+// DELETE /api/tasks/:id (desktop) — task left Idle on desktop. Idempotent.
+export default defineEventHandler(async (event) => {
+  await deleteTask(getSql(), getRouterParam(event, "id")!);
+  setResponseStatus(event, 204);
+  return null;
+});

server/api/tasks/[id].put.ts

@@ -0,0 +1,20 @@
+// PUT /api/tasks/:id (desktop) — idempotent upsert mirroring a desktop Idle task.
+export default defineEventHandler(async (event) => {
+  const id = getRouterParam(event, "id")!;
+  const body = await readBody(event);
+  const title = body?.title;
+  const listId = body?.listId;
+  if (typeof title !== "string" || !title.trim() || typeof listId !== "string") {
+    throw createError({ statusCode: 400, statusMessage: "listId and title are required" });
+  }
+  const description = typeof body?.description === "string" ? body.description : null;
+
+  const sql = getSql();
+  if (!(await listExists(sql, listId))) {
+    throw createError({ statusCode: 404, statusMessage: "list not found" });
+  }
+
+  const { created } = await upsertDesktopTask(sql, id, { listId, title, description });
+  setResponseStatus(event, created ? 201 : 200);
+  return { id };
+});

server/api/tasks/[id]/consume.post.ts

@@ -0,0 +1,8 @@
+// POST /api/tasks/:id/consume (desktop) — mark a web task imported. Idempotent.
+export default defineEventHandler(async (event) => {
+  const ok = await consume(getSql(), getRouterParam(event, "id")!);
+  if (!ok) {
+    throw createError({ statusCode: 404, statusMessage: "task not found" });
+  }
+  return { ok: true };
+});