worldwide todo list: public todo list of 68 real, sourced problems (planet to street) at /projects/worldwide-todo. worldtodo schema (categories, tasks, change_requests), idempotent seed on deploy, public add/edit/delete requests with Turnstile + salted daily-rotating IP-hash rate limit, owner-only review queue (approve, edit & approve, reject) with live updates over /ws/worldtodo(-owner), JSON API, detail pages with OSM map and history; listed in projects, header, /start and sitemap

src/lib/server/owner.ts

@@ -32,7 +32,10 @@ export const ownerOnlyPrefixes = [
 	'/trackers/ai/usage',
 	'/lists/db',
 	// Spotify OAuth for the listening tracker (connect + callback 404 for everyone else).
-	'/api/spotify'
+	'/api/spotify',
+	// Worldwide todo list: the list is public, the review queue and its API are mine only.
+	'/projects/worldwide-todo/queue',
+	'/projects/worldwide-todo/api/queue'
 ] as const;
 
 /**