added api logic, vitest, minimal testing ui

api/src/env.ts

@@ -0,0 +1,26 @@
+// api/src/env.ts
+import { z } from "zod";
+
+const Env = z.object({
+  NODE_ENV: z.enum(["development", "test", "production"]).default("development"),
+  PORT: z.coerce.number().int().positive().default(8080),
+  HOST: z.string().default("0.0.0.0"),
+  DATABASE_URL: z.string().min(1),
+
+  // Comma-separated list of allowed origins; empty => allow all (dev)
+  CORS_ORIGIN: z.string().optional(),
+
+  // 🔹 New: rate-limit knobs (have defaults so typing is happy)
+  RATE_LIMIT_MAX: z.coerce.number().int().positive().default(200),
+  RATE_LIMIT_WINDOW_MS: z.coerce.number().int().positive().default(60_000),
+});
+
+export const env = Env.parse({
+  NODE_ENV: process.env.NODE_ENV,
+  PORT: process.env.PORT,
+  HOST: process.env.HOST,
+  DATABASE_URL: process.env.DATABASE_URL,
+CORS_ORIGIN: "http://localhost:5173,http://127.0.0.1:5173",
+  RATE_LIMIT_MAX: process.env.RATE_LIMIT_MAX,
+  RATE_LIMIT_WINDOW_MS: process.env.RATE_LIMIT_WINDOW_MS,
+});