dtnhan205/api_pure_bonanica ? reverse-engineered prompt

Build me a simple Node.js API for a small app, with user login and protected endpoints.

I want the project wired up so the server starts cleanly, connects the routes, controllers, models, and middleware, and uses passport for authentication. Please include a few basic CRUD endpoints, a login flow, and route protection for anything that should not be public. If it makes sense, add a sample JSON file or seed data so I can test the API right away.

Keep it easy to run locally, with clear error handling and a couple of example responses. I also want a public folder served for static files if needed, and the code should be organized so it is easy to expand later. If you need to check current docs online for anything, go ahead.