api.js

module.exports = function api(options) {

  var validActions = { add:'add' }

  this.add('role:api,path:todo', function (msg, respond) {
    var action = msg.args.params.action;
    var todoText = msg.args.body.text;
    this.act('role:todo', {
      cmd:   validActions[action], // do this to prevent injection attacks
      text:  text,
    }, respond);
  });


  this.add('init:api', function (msg, respond) {
    this.act('role:web',{ routes: {
      prefix: '/api',
      pin: 'role:api,path:*',
      map: {
        todo: { POST: true, suffix:'/:action' }
      }
    }}, respond);
  });

};