@doist/todoist-ai 8.8.7 → 8.9.0

package/dist/mcp-server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-server.d.ts","sourceRoot":"","sources":["../src/mcp-server.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAA;AAGnE,OAAO,EACH,aAAa,EACb,KAAK,OAAO,EACZ,KAAK,WAAW,EAChB,KAAK,QAAQ,EAEhB,MAAM,kBAAkB,CAAA;AAiJzB;;;;;;GAMG;AACH,iBAAS,YAAY,CAAC,EAClB,aAAa,EACb,OAAO,EACP,QAAa,GAChB,EAAE;IACC,aAAa,EAAE,MAAM,CAAA;IACrB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,QAAQ,CAAC,EAAE,QAAQ,CAAA;CACtB,aAuHA;AAED,OAAO,EAAE,aAAa,EAAE,KAAK,OAAO,EAAE,KAAK,WAAW,EAAE,KAAK,QAAQ,EAAE,YAAY,EAAE,CAAA"}
+{"version":3,"file":"mcp-server.d.ts","sourceRoot":"","sources":["../src/mcp-server.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAA;AAGnE,OAAO,EACH,aAAa,EACb,KAAK,OAAO,EACZ,KAAK,WAAW,EAChB,KAAK,QAAQ,EAEhB,MAAM,kBAAkB,CAAA;AAkJzB;;;;;;GAMG;AACH,iBAAS,YAAY,CAAC,EAClB,aAAa,EACb,OAAO,EACP,QAAa,GAChB,EAAE;IACC,aAAa,EAAE,MAAM,CAAA;IACrB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,QAAQ,CAAC,EAAE,QAAQ,CAAA;CACtB,aAuHA;AAED,OAAO,EAAE,aAAa,EAAE,KAAK,OAAO,EAAE,KAAK,WAAW,EAAE,KAAK,QAAQ,EAAE,YAAY,EAAE,CAAA"}

package/dist/middleware/require-valid-todoist-token.d.ts

@@ -0,0 +1,38 @@
+import { Request, RequestHandler } from 'express';
+type StaticTokenSource = {
+    type: 'static';
+    apiKey: string;
+    baseUrl?: string;
+};
+type DynamicTokenSource = {
+    type: 'dynamic';
+    getApiKey: (req: Request) => string | undefined;
+    baseUrl?: string;
+};
+type TokenSource = StaticTokenSource | DynamicTokenSource;
+type RequireValidTodoistTokenOptions = TokenSource & {
+    /**
+     * Cache TTL in milliseconds. Defaults to 300_000 (5 minutes) for static,
+     * 120_000 (2 minutes) for dynamic.
+     */
+    cacheTtlMs?: number;
+    /**
+     * URL for the Protected Resource Metadata document (RFC 9728).
+     * Included in the WWW-Authenticate header when returning 401.
+     * If omitted, the header is sent without resource_metadata.
+     */
+    resourceMetadataUrl?: string;
+};
+/**
+ * Express middleware that validates the Todoist API token before MCP processing.
+ *
+ * Returns HTTP 401 with a spec-compliant WWW-Authenticate header if the token
+ * is invalid, allowing MCP clients to trigger OAuth token refresh.
+ */
+declare function requireValidTodoistToken(options: RequireValidTodoistTokenOptions): RequestHandler;
+/**
+ * Clear the token validation cache. Useful for testing.
+ */
+declare function clearTokenValidationCache(): void;
+export { clearTokenValidationCache, requireValidTodoistToken, type RequireValidTodoistTokenOptions };
+//# sourceMappingURL=require-valid-todoist-token.d.ts.map

package/dist/middleware/require-valid-todoist-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-valid-todoist-token.d.ts","sourceRoot":"","sources":["../../src/middleware/require-valid-todoist-token.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAgB,OAAO,EAAE,cAAc,EAAY,MAAM,SAAS,CAAA;AAI9E,KAAK,iBAAiB,GAAG;IACrB,IAAI,EAAE,QAAQ,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,MAAM,CAAA;CACnB,CAAA;AAED,KAAK,kBAAkB,GAAG;IACtB,IAAI,EAAE,SAAS,CAAA;IACf,SAAS,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,MAAM,GAAG,SAAS,CAAA;IAC/C,OAAO,CAAC,EAAE,MAAM,CAAA;CACnB,CAAA;AAED,KAAK,WAAW,GAAG,iBAAiB,GAAG,kBAAkB,CAAA;AAEzD,KAAK,+BAA+B,GAAG,WAAW,GAAG;IACjD;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;IAEnB;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAA;CAC/B,CAAA;AA8DD;;;;;GAKG;AACH,iBAAS,wBAAwB,CAAC,OAAO,EAAE,+BAA+B,GAAG,cAAc,CAwC1F;AAED;;GAEG;AACH,iBAAS,yBAAyB,IAAI,IAAI,CAEzC;AAED,OAAO,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,KAAK,+BAA+B,EAAE,CAAA"}

package/dist/require-valid-todoist-token-BDvWaAk7.js

@@ -0,0 +1,73 @@
+import { TodoistApi as h } from "@doist/todoist-sdk";
+import { O as T } from "./mcp-server-BxCkcyeL.js";
+const p = /* @__PURE__ */ new Set([401, 403]);
+function w(e) {
+  const t = T(e);
+  if (t !== void 0)
+    return t;
+  if (e !== null && typeof e == "object" && "response" in e)
+    return T(e.response);
+}
+async function y(e, t) {
+  const r = new h(e, { baseUrl: t });
+  try {
+    return await r.getUser(), !0;
+  } catch (i) {
+    const o = w(i);
+    if (o !== void 0 && p.has(o))
+      return !1;
+    throw i;
+  }
+}
+const _ = 3e5, v = 12e4, A = 1e4, n = /* @__PURE__ */ new Map();
+function C(e, t) {
+  return t ? `${e}::${t}` : e;
+}
+function E() {
+  const e = Date.now();
+  for (const [t, r] of n)
+    e >= r.expiresAt && n.delete(t);
+}
+function S(e) {
+  const t = n.get(e);
+  if (t && Date.now() < t.expiresAt)
+    return t.valid;
+  t && n.delete(e);
+}
+function k(e, t, r) {
+  n.size >= A && E(), n.size >= A && n.clear(), n.set(e, { valid: t, expiresAt: Date.now() + r });
+}
+function D(e) {
+  return e ? `Bearer resource_metadata="${e}"` : "Bearer";
+}
+function d(e, t) {
+  e.status(401).set("WWW-Authenticate", D(t)).json({
+    error: "invalid_token",
+    error_description: "Todoist API token is invalid or expired"
+  });
+}
+function x(e) {
+  const t = e.type === "static" ? _ : v, r = e.cacheTtlMs ?? t, { resourceMetadataUrl: i } = e;
+  return async (o, c, s) => {
+    const u = e.type === "static" ? e.apiKey : e.getApiKey(o);
+    if (!u) {
+      d(c, i);
+      return;
+    }
+    const f = C(u, e.baseUrl), l = S(f);
+    if (l !== void 0) {
+      l ? s() : d(c, i);
+      return;
+    }
+    try {
+      const a = await y(u, e.baseUrl);
+      k(f, a, r), a ? s() : d(c, i);
+    } catch (a) {
+      console.warn("[Token validation] Transient error, proceeding:", a), s();
+    }
+  };
+}
+export {
+  x as r,
+  y as v
+};

package/dist/tools/add-sections.d.ts

@@ -33,9 +33,9 @@ declare const addSections: {
                 id: string;
                 userId: string;
                 projectId: string;
-                addedAt: string;
-                updatedAt: string;
-                archivedAt: string | null;
+                addedAt: Date;
+                updatedAt: Date;
+                archivedAt: Date | null;
                 name: string;
                 sectionOrder: number;
                 isArchived: boolean;

package/dist/tools/add-tasks.d.ts

@@ -7,22 +7,22 @@ declare const addTasks: {
     parameters: {
         tasks: z.ZodArray<z.ZodObject<{
             content: z.ZodString;
-            description: z.ZodOptional<z.ZodString>;
+            description: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string | undefined, string>>>;
             priority: z.ZodOptional<z.ZodEnum<{
                 p1: "p1";
                 p2: "p2";
                 p3: "p3";
                 p4: "p4";
             }>>;
-            dueString: z.ZodOptional<z.ZodString>;
-            deadlineDate: z.ZodOptional<z.ZodString>;
-            duration: z.ZodOptional<z.ZodString>;
+            dueString: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string | undefined, string>>>;
+            deadlineDate: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string | undefined, string>>>;
+            duration: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string | undefined, string>>>;
             labels: z.ZodOptional<z.ZodArray<z.ZodString>>;
-            projectId: z.ZodOptional<z.ZodString>;
-            sectionId: z.ZodOptional<z.ZodString>;
-            parentId: z.ZodOptional<z.ZodString>;
+            projectId: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string | undefined, string>>>;
+            sectionId: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string | undefined, string>>>;
+            parentId: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string | undefined, string>>>;
             order: z.ZodOptional<z.ZodNumber>;
-            responsibleUser: z.ZodOptional<z.ZodString>;
+            responsibleUser: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string | undefined, string>>>;
             isUncompletable: z.ZodOptional<z.ZodBoolean>;
         }, z.core.$strip>>;
     };
@@ -66,7 +66,7 @@ declare const addTasks: {
         destructiveHint: false;
         idempotentHint: false;
     };
-    execute({ tasks }: {
+    execute(args: {
         tasks: {
             content: string;
             description?: string | undefined;

package/dist/tools/add-tasks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"add-tasks.d.ts","sourceRoot":"","sources":["../../src/tools/add-tasks.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAqB,UAAU,EAAE,MAAM,oBAAoB,CAAA;AACvE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAevB,QAAA,MAAM,uBAAuB,KAAK,CAAA;AAyElC,QAAA,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sBA6CwB,MAAM;uBAAS,MAAM;;;;;;;CA0CI,CAAA;AA8K/D,OAAO,EAAE,QAAQ,EAAE,uBAAuB,EAAE,CAAA"}
+{"version":3,"file":"add-tasks.d.ts","sourceRoot":"","sources":["../../src/tools/add-tasks.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAqB,UAAU,EAAE,MAAM,oBAAoB,CAAA;AACvE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAgBvB,QAAA,MAAM,uBAAuB,KAAK,CAAA;AA0DlC,QAAA,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sBAgDwB,MAAM;uBAAS,MAAM;;;;;;;CA0CI,CAAA;AAwK/D,OAAO,EAAE,QAAQ,EAAE,uBAAuB,EAAE,CAAA"}

package/dist/tools/find-project-collaborators.d.ts

@@ -1,10 +1,11 @@
+import { TodoistApi } from '@doist/todoist-sdk';
 import { z } from 'zod';
 import { ProjectCollaborator } from '../utils/user-resolver.js';
 declare const findProjectCollaborators: {
     name: "find-project-collaborators";
     description: string;
     parameters: {
-        projectId: z.ZodString;
+        projectId: z.ZodOptional<z.ZodString>;
         searchTerm: z.ZodOptional<z.ZodString>;
     };
     outputSchema: {
@@ -28,9 +29,18 @@ declare const findProjectCollaborators: {
         idempotentHint: true;
     };
     execute(args: {
-        projectId: string;
+        projectId?: string | undefined;
         searchTerm?: string | undefined;
-    }, client: import('@doist/todoist-sdk').TodoistApi): Promise<{
+    }, client: TodoistApi): Promise<{
+        textContent: string;
+        structuredContent: {
+            collaborators: ProjectCollaborator[];
+            projectInfo: undefined;
+            totalCount: number;
+            totalAvailable: number;
+            appliedFilters: Record<string, unknown>;
+        };
+    } | {
         textContent: string;
         structuredContent: {
             collaborators: never[];
@@ -41,7 +51,7 @@ declare const findProjectCollaborators: {
             };
             totalCount: number;
             appliedFilters: {
-                projectId: string;
+                projectId?: string | undefined;
                 searchTerm?: string | undefined;
             };
             totalAvailable?: undefined;
@@ -57,7 +67,7 @@ declare const findProjectCollaborators: {
             };
             totalCount: number;
             appliedFilters: {
-                projectId: string;
+                projectId?: string | undefined;
                 searchTerm?: string | undefined;
             };
             totalAvailable?: undefined;
@@ -74,7 +84,7 @@ declare const findProjectCollaborators: {
             totalCount: number;
             totalAvailable: number;
             appliedFilters: {
-                projectId: string;
+                projectId?: string | undefined;
                 searchTerm?: string | undefined;
             };
         };

package/dist/tools/find-project-collaborators.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"find-project-collaborators.d.ts","sourceRoot":"","sources":["../../src/tools/find-project-collaborators.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAMvB,OAAO,EAAE,KAAK,mBAAmB,EAAgB,MAAM,2BAA2B,CAAA;AAkClF,QAAA,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgGiC,CAAA;AAwE/D,OAAO,EAAE,wBAAwB,EAAE,CAAA"}
+{"version":3,"file":"find-project-collaborators.d.ts","sourceRoot":"","sources":["../../src/tools/find-project-collaborators.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAMvB,OAAO,EAAE,KAAK,mBAAmB,EAAgB,MAAM,2BAA2B,CAAA;AAwClF,QAAA,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6FiC,CAAA;AA2J/D,OAAO,EAAE,wBAAwB,EAAE,CAAA"}

package/dist/tools/update-sections.d.ts

@@ -34,9 +34,9 @@ declare const updateSections: {
                 id: string;
                 userId: string;
                 projectId: string;
-                addedAt: string;
-                updatedAt: string;
-                archivedAt: string | null;
+                addedAt: Date;
+                updatedAt: Date;
+                archivedAt: Date | null;
                 name: string;
                 sectionOrder: number;
                 isArchived: boolean;

package/dist/utils/schema-helpers.d.ts

@@ -0,0 +1,10 @@
+import { z } from 'zod';
+/**
+ * An optional string schema that converts empty strings to `undefined`.
+ * LLMs often send `""` for optional fields instead of omitting them,
+ * which causes the Todoist API to reject the request.
+ *
+ * `.optional()` must be outermost so the field stays optional in `z.infer` output types.
+ */
+export declare function optionalString(description: string): z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string | undefined, string>>>;
+//# sourceMappingURL=schema-helpers.d.ts.map

package/dist/utils/schema-helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-helpers.d.ts","sourceRoot":"","sources":["../../src/utils/schema-helpers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,WAAW,EAAE,MAAM,qFAMjD"}

package/dist/utils/user-resolver.d.ts

@@ -26,9 +26,9 @@ export declare class UserResolver {
      */
     getProjectCollaborators(client: TodoistApi, projectId: string): Promise<ProjectCollaborator[]>;
     /**
-     * Get all collaborators from all shared projects
+     * Get all collaborators from all shared projects, deduplicated by user ID.
      */
-    private getAllCollaborators;
+    getAllCollaborators(client: TodoistApi): Promise<ProjectCollaborator[]>;
     /**
      * Clear all caches - useful for testing
      */

package/dist/utils/user-resolver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user-resolver.d.ts","sourceRoot":"","sources":["../../src/utils/user-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAEpD,MAAM,MAAM,YAAY,GAAG;IACvB,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,EAAE,MAAM,CAAA;CAChB,CAAA;AAED,MAAM,MAAM,mBAAmB,GAAG;IAC9B,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;CAChB,CAAA;AAsBD,+DAA+D;AAC/D,eAAO,MAAM,iBAAiB,EAAG,IAAa,CAAA;AAE9C,qBAAa,YAAY;IACrB;;;OAGG;IACG,WAAW,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;IA+HrF;;OAEG;IACG,2BAA2B,CAC7B,MAAM,EAAE,UAAU,EAClB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,GACf,OAAO,CAAC,OAAO,CAAC;IASnB;;OAEG;IACG,uBAAuB,CACzB,MAAM,EAAE,UAAU,EAClB,SAAS,EAAE,MAAM,GAClB,OAAO,CAAC,mBAAmB,EAAE,CAAC;IA2BjC;;OAEG;YACW,mBAAmB;IAqDjC;;OAEG;IACH,UAAU,IAAI,IAAI;CAIrB;AAGD,eAAO,MAAM,YAAY,cAAqB,CAAA;AAG9C,wBAAsB,mBAAmB,CACrC,MAAM,EAAE,UAAU,EAClB,QAAQ,EAAE,MAAM,GACjB,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAE9B"}
+{"version":3,"file":"user-resolver.d.ts","sourceRoot":"","sources":["../../src/utils/user-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAmB,UAAU,EAAoB,MAAM,oBAAoB,CAAA;AAGvF,MAAM,MAAM,YAAY,GAAG;IACvB,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,EAAE,MAAM,CAAA;CAChB,CAAA;AAED,MAAM,MAAM,mBAAmB,GAAG;IAC9B,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;CAChB,CAAA;AAsBD,+DAA+D;AAC/D,eAAO,MAAM,iBAAiB,EAAG,IAAa,CAAA;AAE9C,qBAAa,YAAY;IACrB;;;OAGG;IACG,WAAW,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;IA+HrF;;OAEG;IACG,2BAA2B,CAC7B,MAAM,EAAE,UAAU,EAClB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,GACf,OAAO,CAAC,OAAO,CAAC;IASnB;;OAEG;IACG,uBAAuB,CACzB,MAAM,EAAE,UAAU,EAClB,SAAS,EAAE,MAAM,GAClB,OAAO,CAAC,mBAAmB,EAAE,CAAC;IA2BjC;;OAEG;IACG,mBAAmB,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC;IA0D7E;;OAEG;IACH,UAAU,IAAI,IAAI;CAIrB;AAGD,eAAO,MAAM,YAAY,cAAqB,CAAA;AAG9C,wBAAsB,mBAAmB,CACrC,MAAM,EAAE,UAAU,EAClB,QAAQ,EAAE,MAAM,GACjB,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAE9B"}

package/dist/utils/validate-todoist-token.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Validates a Todoist API token by making a lightweight API call.
+ *
+ * @returns `true` if the token is valid, `false` if it's an auth error (401/403).
+ * @throws On transient errors (network failures, 5xx) so the caller can decide.
+ */
+declare function validateTodoistToken(apiKey: string, baseUrl?: string): Promise<boolean>;
+export { validateTodoistToken };
+//# sourceMappingURL=validate-todoist-token.d.ts.map

package/dist/utils/validate-todoist-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-todoist-token.d.ts","sourceRoot":"","sources":["../../src/utils/validate-todoist-token.ts"],"names":[],"mappings":"AAwBA;;;;;GAKG;AACH,iBAAe,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAYtF;AAED,OAAO,EAAE,oBAAoB,EAAE,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@doist/todoist-ai",
-    "version": "8.8.7",
+    "version": "8.9.0",
     "type": "module",
     "main": "./dist/index.js",
     "types": "./dist/index.d.ts",
@@ -59,7 +59,7 @@
         "prepare": "husky"
     },
     "dependencies": {
-        "@doist/todoist-sdk": "8.4.0",
+        "@doist/todoist-sdk": "9.0.0",
         "@modelcontextprotocol/ext-apps": "1.2.2",
         "date-fns": "4.1.0",
         "dompurify": "3.3.3",
@@ -77,7 +77,7 @@
         "@types/dompurify": "3.2.0",
         "@types/express": "5.0.6",
         "@types/morgan": "1.9.10",
-        "@types/node": "22.19.15",
+        "@types/node": "22.19.17",
         "@types/react": "19.2.14",
         "@types/react-dom": "19.2.3",
         "@vitejs/plugin-react": "5.2.0",
@@ -96,7 +96,7 @@
         "snarkdown": "2.0.0",
         "tsx": "4.21.0",
         "typescript": "6.0.2",
-        "vite": "7.3.1",
+        "vite": "7.3.2",
         "vite-plugin-dts": "4.5.4",
         "vite-plugin-singlefile": "2.3.2",
         "vitest": "4.1.1"