{
  "id": "phase1-foundation-13",
  "seq": "13",
  "title": "Create token refresh API",
  "status": "completed",
  "depends_on": ["12"],
  "parallel": false,
  "context_files": [
    "/Users/kunthawatgreethong/Gitea/moreminimore-vibe/Websitebuilder/.tmp/sessions/phase1-foundation/context.md",
    "/Users/kunthawatgreethong/.config/opencode/context/core/essential-patterns.md"
  ],
  "acceptance_criteria": [
    "POST /api/auth/refresh endpoint created",
    "Verifies refresh token from cookie",
    "Generates new access token",
    "Rotates refresh token",
    "Updates session in database",
    "Sets new HTTP-only cookies",
    "Error handling for expired/invalid tokens",
    "Unit tests written with Vitest",
    "Tests pass with 90%+ coverage"
  ],
  "deliverables": [
    "src/app/api/auth/refresh/route.ts",
    "src/services/auth.service.ts (updated)",
    "src/app/api/auth/refresh/__tests__/route.test.ts"
  ]
}