@doist/todoist-mcp 10.3.2 → 10.3.3

package/dist/http-app.d.ts

@@ -0,0 +1,19 @@
+import { Express } from 'express';
+type CreateHttpAppOptions = {
+    todoistApiKey: string;
+    baseUrl?: string;
+    /** Hostnames trusted in the Host/Origin headers (DNS-rebinding protection). */
+    allowedHosts: string[];
+};
+/**
+ * Build the Express app for the MCP HTTP server.
+ *
+ * The DNS-rebinding guard (`requireTrustedHost`) is scoped to the sensitive
+ * `/mcp` routes and runs ahead of body parsing and token auth there. `/health`
+ * is intentionally unguarded so deployment health probes — which send the
+ * target's private IP in the Host header — keep working; it exposes no account
+ * data.
+ */
+declare function createHttpApp({ todoistApiKey, baseUrl, allowedHosts }: CreateHttpAppOptions): Express;
+export { createHttpApp, type CreateHttpAppOptions };
+//# sourceMappingURL=http-app.d.ts.map

package/dist/http-app.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-app.d.ts","sourceRoot":"","sources":["../src/http-app.ts"],"names":[],"mappings":"AACA,OAAgB,EAAE,KAAK,OAAO,EAA+B,MAAM,SAAS,CAAA;AAK5E,KAAK,oBAAoB,GAAG;IACxB,aAAa,EAAE,MAAM,CAAA;IACrB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,+EAA+E;IAC/E,YAAY,EAAE,MAAM,EAAE,CAAA;CACzB,CAAA;AAED;;;;;;;;GAQG;AACH,iBAAS,aAAa,CAAC,EAAE,aAAa,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,oBAAoB,GAAG,OAAO,CAgD9F;AAED,OAAO,EAAE,aAAa,EAAE,KAAK,oBAAoB,EAAE,CAAA"}

package/dist/index.js

@@ -1,6 +1,6 @@
-import { f as s, s as a, l as e, m as t, a as o, u as d, r as i, d as r, b as n, c as l, e as c, h as p, i as m, j as f, k, n as T, o as u, p as g, q as j, t as v, v as P, w as h, x as S, y as b, z as A, A as y, B as C, C as G, D as F, E as x, F as E, G as L, H as O, I as w, J as H, K as I, L as M, M as q, N as z, O as B, P as D, Q as N, R, S as W } from "./mcp-server-C_UexOyp.js";
-import { T as V, g as _ } from "./mcp-server-C_UexOyp.js";
-import { r as Y, v as Z } from "./require-valid-todoist-token-B0fNp1hu.js";
+import { f as s, s as a, l as e, m as t, a as o, u as d, r as i, d as r, b as n, c as l, e as c, h as p, i as m, j as f, k, n as T, o as u, p as g, q as j, t as v, v as P, w as h, x as S, y as b, z as A, A as y, B as C, C as G, D as F, E as x, F as E, G as L, H as O, I as w, J as H, K as I, L as M, M as q, N as z, O as B, P as D, Q as N, R, S as W } from "./mcp-server-BiypwfCF.js";
+import { T as V, g as _ } from "./mcp-server-BiypwfCF.js";
+import { r as Y, v as Z } from "./require-valid-todoist-token-CMvIva7A.js";
 const K = {
   // Task management tools
   addTasks: W,

package/dist/main-http.js

@@ -1,41 +1,100 @@
 #!/usr/bin/env node
-import { isIP as l } from "node:net";
-import { StreamableHTTPServerTransport as f } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
-import m from "dotenv";
-import a from "express";
-import { g as d } from "./mcp-server-C_UexOyp.js";
-import { r as T } from "./require-valid-todoist-token-B0fNp1hu.js";
-m.config({ quiet: !0 });
-const s = Number.parseInt(process.env.PORT || "3000", 10), v = process.env.HOST || "127.0.0.1", i = u(v);
-function u(r) {
-  return r.startsWith("[") && r.endsWith("]") ? r.slice(1, -1) : r;
-}
-function O(r) {
-  return r === "0.0.0.0" || r === "::" ? "localhost" : p(r);
-}
-function p(r) {
-  return l(r) === 6 ? `[${r}]` : r;
-}
-function S(r) {
-  return r = u(r), r === "localhost" || r === "::1" || r === "0:0:0:0:0:0:0:1" ? !0 : l(r) === 4 ? r.split(".")[0] === "127" : !1;
-}
-function I() {
-  const r = process.env.TODOIST_BASE_URL, c = process.env.TODOIST_API_KEY;
-  c || (console.error("Error: TODOIST_API_KEY environment variable is required"), process.exit(1));
-  const o = a();
-  o.use(a.json()), o.get("/health", (e, t) => {
-    t.json({ status: "ok" });
-  }), o.post(
+import { isIP as p } from "node:net";
+import O from "dotenv";
+import { StreamableHTTPServerTransport as S } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
+import m from "express";
+import { g as v } from "./mcp-server-BiypwfCF.js";
+import { r as w } from "./require-valid-todoist-token-CMvIva7A.js";
+function f(t) {
+  return t.startsWith("[") && t.endsWith("]") ? t.slice(1, -1) : t;
+}
+function I(t) {
+  return t = f(t), t === "localhost" || t === "::1" || t === "0:0:0:0:0:0:0:1" ? !0 : p(t) === 4 ? t.split(".")[0] === "127" : !1;
+}
+const _ = ["localhost", "127.0.0.1", "[::1]"], g = /[@/\\?#\s]/;
+function h(t) {
+  if (!g.test(t))
+    try {
+      return new URL(`http://${t}`).hostname.toLowerCase();
+    } catch {
+      return;
+    }
+}
+function L(t) {
+  let r;
+  try {
+    r = new URL(t);
+  } catch {
+    return;
+  }
+  if (!(r.username || r.password || r.pathname !== "/" || r.search || r.hash))
+    return r.hostname.toLowerCase();
+}
+function A(t, r) {
+  const o = new Set(_);
+  for (const s of (r ?? "").split(",")) {
+    const n = s.trim();
+    n && o.add(n);
+  }
+  const e = f(t);
+  return e && e !== "0.0.0.0" && e !== "::" && o.add(p(e) === 6 ? `[${e}]` : e), [...o];
+}
+function d(t, r) {
+  t.status(403).json({
+    jsonrpc: "2.0",
+    error: { code: -32e3, message: r },
+    id: null
+  });
+}
+function b(t) {
+  const r = /* @__PURE__ */ new Set();
+  for (const o of t.allowedHosts) {
+    const e = h(o);
+    if (!e)
+      throw new Error(
+        `Invalid allowed host ${JSON.stringify(o)}: must be a hostname or host:port (IPv6 literals must be bracketed, e.g. [::1])`
+      );
+    r.add(e);
+  }
+  return (o, e, s) => {
+    const n = o.headers.host;
+    if (!n) {
+      d(e, "Missing Host header");
+      return;
+    }
+    const i = h(n);
+    if (!i || !r.has(i)) {
+      d(e, `Invalid Host: ${n}`);
+      return;
+    }
+    const a = o.headers.origin;
+    if (a) {
+      const l = L(a);
+      if (!l || !r.has(l)) {
+        d(e, `Invalid Origin: ${a}`);
+        return;
+      }
+    }
+    s();
+  };
+}
+function E({ todoistApiKey: t, baseUrl: r, allowedHosts: o }) {
+  const e = m(), s = b({ allowedHosts: o });
+  return e.get("/health", (n, i) => {
+    i.json({ status: "ok" });
+  }), e.post(
     "/mcp",
-    T({ type: "static", apiKey: c, baseUrl: r }),
-    async (e, t) => {
+    s,
+    m.json(),
+    w({ type: "static", apiKey: t, baseUrl: r }),
+    async (n, i) => {
       try {
-        const n = new f({
+        const a = new S({
           sessionIdGenerator: void 0
         });
-        await d({ todoistApiKey: c, baseUrl: r }).connect(n), await n.handleRequest(e, t, e.body);
-      } catch (n) {
-        console.error("[Error] Request handling failed:", n), t.status(500).json({
+        await v({ todoistApiKey: t, baseUrl: r }).connect(a), await a.handleRequest(n, i, n.body);
+      } catch (a) {
+        console.error("[Error] Request handling failed:", a), i.status(500).json({
           jsonrpc: "2.0",
           error: {
             code: -32603,
@@ -45,13 +104,27 @@ function I() {
         });
       }
     }
-  ), o.get("/mcp", (e, t) => {
-    t.status(405).set("Allow", "POST").send("Method Not Allowed");
-  }), o.listen(s, i, () => {
-    const e = O(i);
-    console.error(`Todoist MCP HTTP Server started on ${p(i)}:${s}`), console.error(`MCP endpoint: http://${e}:${s}/mcp`), console.error(`Health check: http://${e}:${s}/health`), S(i) || console.error(
-      "Warning: todoist-mcp-http is reachable from other hosts. Protect this service with trusted network/auth controls because requests run with TODOIST_API_KEY."
+  ), e.get("/mcp", s, (n, i) => {
+    i.status(405).set("Allow", "POST").send("Method Not Allowed");
+  }), e;
+}
+O.config({ quiet: !0 });
+const c = Number.parseInt(process.env.PORT || "3000", 10), T = process.env.HOST || "127.0.0.1", u = f(T);
+function P(t) {
+  return t === "0.0.0.0" || t === "::" ? "localhost" : H(t);
+}
+function H(t) {
+  return p(t) === 6 ? `[${t}]` : t;
+}
+function $() {
+  const t = process.env.TODOIST_BASE_URL, r = process.env.TODOIST_API_KEY;
+  r || (console.error("Error: TODOIST_API_KEY environment variable is required"), process.exit(1));
+  const o = A(T, process.env.ALLOWED_HOSTS);
+  E({ todoistApiKey: r, baseUrl: t, allowedHosts: o }).listen(c, u, () => {
+    const s = P(u);
+    console.error(`Todoist MCP HTTP Server started on ${H(u)}:${c}`), console.error(`MCP endpoint: http://${s}:${c}/mcp`), console.error(`Health check: http://${s}:${c}/health`), I(u) || console.error(
+      "Warning: todoist-mcp-http is reachable from other hosts. Set ALLOWED_HOSTS to the hostnames clients use and protect this service with trusted network/auth controls because requests run with TODOIST_API_KEY."
     );
   });
 }
-I();
+$();

package/dist/main.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { StdioServerTransport as s } from "@modelcontextprotocol/sdk/server/stdio.js";
 import c from "dotenv";
-import { g as i } from "./mcp-server-C_UexOyp.js";
+import { g as i } from "./mcp-server-BiypwfCF.js";
 function p() {
   const e = process.env.TODOIST_BASE_URL, r = process.env.TODOIST_API_KEY;
   if (!r)

package/dist/{mcp-server-C_UexOyp.js → mcp-server-BiypwfCF.js}

@@ -309,7 +309,7 @@ function Ns(e) {
   const t = _s(e);
   return t ? Rs(t) : Ls(e);
 }
-const Ms = "10.3.2", Fs = {
+const Ms = "10.3.3", Fs = {
   version: Ms
 }, Hs = "todoist-mcp", Je = Fs.version, _t = new fs(), pt = bs(import.meta.url);
 let ye;

package/dist/middleware/require-trusted-host.d.ts

@@ -0,0 +1,44 @@
+import { RequestHandler } from 'express';
+type RequireTrustedHostOptions = {
+    /**
+     * Port-agnostic hostnames permitted in the `Host` and `Origin` headers.
+     * IPv6 entries must be bracketed, e.g. `[::1]`. Invalid entries cause
+     * {@link requireTrustedHost} to throw at construction time (fail fast).
+     */
+    allowedHosts: string[];
+};
+/**
+ * Loopback hostnames always trusted by {@link requireTrustedHost}. Stored
+ * bracketed for IPv6 because `new URL('http://[::1]').hostname` returns `[::1]`.
+ */
+declare const DEFAULT_ALLOWED_HOSTS: string[];
+/**
+ * Build the list of hostnames trusted in the Host and Origin headers. Always
+ * includes the loopback defaults, plus any names from `allowedHostsEnv`
+ * (comma-separated), plus the configured `host` (so an explicit bind — loopback
+ * alias like 127.0.1.1, a LAN IP, etc. — is always trusted). Bind wildcards
+ * (0.0.0.0/::) are never added because they are never valid Host header values —
+ * operators exposing on a wildcard must enumerate client hostnames via
+ * ALLOWED_HOSTS.
+ */
+declare function buildAllowedHosts(host: string, allowedHostsEnv?: string): string[];
+/**
+ * Express middleware that rejects requests whose `Host` or `Origin` header is
+ * not in the trusted allowlist. This is DNS-rebinding protection: a malicious
+ * website that rebinds its domain to a victim's loopback address keeps its own
+ * `Host`/`Origin`, so string-matching against the allowlist (we never DNS
+ * resolve) blocks the request before it can reach the MCP transport.
+ *
+ * - Missing `Host` → 403.
+ * - `Host` hostname not in the allowlist → 403.
+ * - `Origin` absent → allowed (non-browser clients such as `mcp-remote`/`curl`
+ *   send none; the browser attack path always sends one).
+ * - `Origin` present but untrusted or unparseable → 403.
+ *
+ * Throws at construction time if `allowedHosts` contains an entry that isn't a
+ * valid authority, so misconfiguration fails fast instead of becoming opaque
+ * 403s at request time.
+ */
+declare function requireTrustedHost(options: RequireTrustedHostOptions): RequestHandler;
+export { DEFAULT_ALLOWED_HOSTS, buildAllowedHosts, requireTrustedHost, type RequireTrustedHostOptions, };
+//# sourceMappingURL=require-trusted-host.d.ts.map

package/dist/middleware/require-trusted-host.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-trusted-host.d.ts","sourceRoot":"","sources":["../../src/middleware/require-trusted-host.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAyB,cAAc,EAAY,MAAM,SAAS,CAAA;AAG9E,KAAK,yBAAyB,GAAG;IAC7B;;;;OAIG;IACH,YAAY,EAAE,MAAM,EAAE,CAAA;CACzB,CAAA;AAED;;;GAGG;AACH,QAAA,MAAM,qBAAqB,UAAsC,CAAA;AA4CjE;;;;;;;;GAQG;AACH,iBAAS,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAkB3E;AAUD;;;;;;;;;;;;;;;;GAgBG;AACH,iBAAS,kBAAkB,CAAC,OAAO,EAAE,yBAAyB,GAAG,cAAc,CAyC9E;AAED,OAAO,EACH,qBAAqB,EACrB,iBAAiB,EACjB,kBAAkB,EAClB,KAAK,yBAAyB,GACjC,CAAA"}

package/dist/{require-valid-todoist-token-B0fNp1hu.js → require-valid-todoist-token-CMvIva7A.js}

@@ -1,4 +1,4 @@
-import { U as A, V as v, W as T } from "./mcp-server-C_UexOyp.js";
+import { U as A, V as v, W as T } from "./mcp-server-BiypwfCF.js";
 const y = /* @__PURE__ */ new Set([401, 403]);
 function C(e) {
   const t = T(e);

package/dist/utils/host.d.ts

@@ -0,0 +1,6 @@
+/** Strip the surrounding brackets from a bracketed IPv6 literal, if present. */
+declare function normalizeListenHost(host: string): string;
+/** Whether `host` refers to a loopback interface (localhost / 127.0.0.0/8 / ::1). */
+declare function isLoopbackHost(host: string): boolean;
+export { isLoopbackHost, normalizeListenHost };
+//# sourceMappingURL=host.d.ts.map

package/dist/utils/host.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.d.ts","sourceRoot":"","sources":["../../src/utils/host.ts"],"names":[],"mappings":"AAEA,gFAAgF;AAChF,iBAAS,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAKjD;AAED,qFAAqF;AACrF,iBAAS,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAY7C;AAED,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@doist/todoist-mcp",
-    "version": "10.3.2",
+    "version": "10.3.3",
     "type": "module",
     "main": "./dist/index.js",
     "types": "./dist/index.d.ts",