@doist/todoist-mcp 13.5.0 → 13.6.0

package/dist/http-app.d.ts

@@ -5,6 +5,15 @@ type CreateHttpAppOptions = {
     /** Hostnames trusted in the Host/Origin headers (DNS-rebinding protection). */
     allowedHosts: string[];
 };
+type HttpApp = {
+    app: Express;
+    /**
+     * Ends the open `subscriptions/listen` streams and aborts in-flight MCP
+     * exchanges. Call it before closing the HTTP server, otherwise
+     * `server.close()` waits for those streams to end on their own.
+     */
+    close: () => Promise<void>;
+};
 /**
  * Build the Express app for the MCP HTTP server.
  *
@@ -14,6 +23,6 @@ type CreateHttpAppOptions = {
  * target's private IP in the Host header — keep working; it exposes no account
  * data.
  */
-declare function createHttpApp({ todoistApiKey, baseUrl, allowedHosts }: CreateHttpAppOptions): Express;
-export { createHttpApp, type CreateHttpAppOptions };
+declare function createHttpApp({ todoistApiKey, baseUrl, allowedHosts }: CreateHttpAppOptions): HttpApp;
+export { createHttpApp, type CreateHttpAppOptions, type HttpApp };
 //# sourceMappingURL=http-app.d.ts.map

package/dist/http-app.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http-app.d.ts","sourceRoot":"","sources":["../src/http-app.ts"],"names":[],"mappings":"AACA,OAAgB,EAAE,KAAK,OAAO,EAA+B,MAAM,SAAS,CAAA;AAK5E,KAAK,oBAAoB,GAAG;IACxB,aAAa,EAAE,MAAM,CAAA;IACrB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,+EAA+E;IAC/E,YAAY,EAAE,MAAM,EAAE,CAAA;CACzB,CAAA;AAED;;;;;;;;GAQG;AACH,iBAAS,aAAa,CAAC,EAAE,aAAa,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,oBAAoB,GAAG,OAAO,CAgD9F;AAED,OAAO,EAAE,aAAa,EAAE,KAAK,oBAAoB,EAAE,CAAA"}
+{"version":3,"file":"http-app.d.ts","sourceRoot":"","sources":["../src/http-app.ts"],"names":[],"mappings":"AAEA,OAAgB,EAAE,KAAK,OAAO,EAA+B,MAAM,SAAS,CAAA;AAK5E,KAAK,oBAAoB,GAAG;IACxB,aAAa,EAAE,MAAM,CAAA;IACrB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,+EAA+E;IAC/E,YAAY,EAAE,MAAM,EAAE,CAAA;CACzB,CAAA;AAED,KAAK,OAAO,GAAG;IACX,GAAG,EAAE,OAAO,CAAA;IACZ;;;;OAIG;IACH,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAC7B,CAAA;AAED;;;;;;;;GAQG;AACH,iBAAS,aAAa,CAAC,EAAE,aAAa,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,oBAAoB,GAAG,OAAO,CAoD9F;AAED,OAAO,EAAE,aAAa,EAAE,KAAK,oBAAoB,EAAE,KAAK,OAAO,EAAE,CAAA"}

package/dist/index.js

@@ -1,6 +1,6 @@
-import { t as s } from "./mcp-server-Bi7iBPtS.js";
-import { F as r, a as d, b as i, c as n, d as c, e as l, f as m, h as p, i as f, j as T, k as j, l as g, m as k, n as u, o as v, p as P, q as h, r as b, s as S, u as y, v as A, w as C, x as R, y as x, z as F, g as M, A as O, B as E, C as L, D as w, E as H, G as I, H as W, I as q, J as z, K as B, L as D, M as N, N as U, O as V, P as G, Q as J, R as K, S as Q, T as X, U as Y, V as _, W as Z, X as $, Y as ss } from "./mcp-server-Bi7iBPtS.js";
-import { r as es, v as ts } from "./require-valid-todoist-token-D4bkOh_N.js";
+import { t as s } from "./mcp-server-DHMEVYZ1.js";
+import { F as r, a as d, b as i, c as n, d as c, e as l, f as m, h as p, i as f, j as T, k as j, l as g, m as k, n as u, o as v, p as P, q as h, r as b, s as S, u as y, v as A, w as C, x as R, y as x, z as F, g as M, A as O, B as E, C as L, D as w, E as H, G as I, H as W, I as q, J as z, K as B, L as D, M as N, N as U, O as V, P as G, Q as J, R as K, S as Q, T as X, U as Y, V as _, W as Z, X as $, Y as ss } from "./mcp-server-DHMEVYZ1.js";
+import { r as es, v as ts } from "./require-valid-todoist-token-ErppL5lQ.js";
 const e = s;
 export {
   r as FEATURE_NAMES,

package/dist/main-http.js

@@ -1,130 +1,133 @@
 #!/usr/bin/env node
-import { isIP as p } from "node:net";
-import O from "dotenv";
-import { NodeStreamableHTTPServerTransport as S } from "@modelcontextprotocol/node";
-import m from "express";
-import { g as v } from "./mcp-server-Bi7iBPtS.js";
-import { r as w } from "./require-valid-todoist-token-D4bkOh_N.js";
-function f(t) {
-  return t.startsWith("[") && t.endsWith("]") ? t.slice(1, -1) : t;
+import { isIP as f } from "node:net";
+import S from "dotenv";
+import { toNodeHandler as w } from "@modelcontextprotocol/node";
+import { createMcpHandler as v } from "@modelcontextprotocol/server";
+import h from "express";
+import { g as I } from "./mcp-server-DHMEVYZ1.js";
+import { r as g } from "./require-valid-todoist-token-ErppL5lQ.js";
+function p(e) {
+  return e.startsWith("[") && e.endsWith("]") ? e.slice(1, -1) : e;
 }
-function I(t) {
-  return t = f(t), t === "localhost" || t === "::1" || t === "0:0:0:0:0:0:0:1" ? !0 : p(t) === 4 ? t.split(".")[0] === "127" : !1;
+function _(e) {
+  return e = p(e), e === "localhost" || e === "::1" || e === "0:0:0:0:0:0:0:1" ? !0 : f(e) === 4 ? e.split(".")[0] === "127" : !1;
 }
-const _ = ["localhost", "127.0.0.1", "[::1]"], g = /[@/\\?#\s]/;
-function h(t) {
-  if (!g.test(t))
+const L = ["localhost", "127.0.0.1", "[::1]"], A = /[@/\\?#\s]/;
+function m(e) {
+  if (!A.test(e))
     try {
-      return new URL(`http://${t}`).hostname.toLowerCase();
+      return new URL(`http://${e}`).hostname.toLowerCase();
     } catch {
       return;
     }
 }
-function L(t) {
-  let r;
+function E(e) {
+  let o;
   try {
-    r = new URL(t);
+    o = new URL(e);
   } catch {
     return;
   }
-  if (!(r.username || r.password || r.pathname !== "/" || r.search || r.hash))
-    return r.hostname.toLowerCase();
+  if (!(o.username || o.password || o.pathname !== "/" || o.search || o.hash))
+    return o.hostname.toLowerCase();
 }
-function A(t, r) {
-  const o = new Set(_);
-  for (const s of (r ?? "").split(",")) {
-    const n = s.trim();
-    n && o.add(n);
+function P(e, o) {
+  const n = new Set(L);
+  for (const c of (o ?? "").split(",")) {
+    const i = c.trim();
+    i && n.add(i);
   }
-  const e = f(t);
-  return e && e !== "0.0.0.0" && e !== "::" && o.add(p(e) === 6 ? `[${e}]` : e), [...o];
+  const r = p(e);
+  return r && r !== "0.0.0.0" && r !== "::" && n.add(f(r) === 6 ? `[${r}]` : r), [...n];
 }
-function d(t, r) {
-  t.status(403).json({
+function d(e, o) {
+  e.status(403).json({
     jsonrpc: "2.0",
-    error: { code: -32e3, message: r },
+    error: { code: -32e3, message: o },
     id: null
   });
 }
-function b(t) {
-  const r = /* @__PURE__ */ new Set();
-  for (const o of t.allowedHosts) {
-    const e = h(o);
-    if (!e)
+function $(e) {
+  const o = /* @__PURE__ */ new Set();
+  for (const n of e.allowedHosts) {
+    const r = m(n);
+    if (!r)
       throw new Error(
-        `Invalid allowed host ${JSON.stringify(o)}: must be a hostname or host:port (IPv6 literals must be bracketed, e.g. [::1])`
+        `Invalid allowed host ${JSON.stringify(n)}: must be a hostname or host:port (IPv6 literals must be bracketed, e.g. [::1])`
       );
-    r.add(e);
+    o.add(r);
   }
-  return (o, e, s) => {
-    const n = o.headers.host;
-    if (!n) {
-      d(e, "Missing Host header");
+  return (n, r, c) => {
+    const i = n.headers.host;
+    if (!i) {
+      d(r, "Missing Host header");
       return;
     }
-    const i = h(n);
-    if (!i || !r.has(i)) {
-      d(e, `Invalid Host: ${n}`);
+    const a = m(i);
+    if (!a || !o.has(a)) {
+      d(r, `Invalid Host: ${i}`);
       return;
     }
-    const a = o.headers.origin;
-    if (a) {
-      const l = L(a);
-      if (!l || !r.has(l)) {
-        d(e, `Invalid Origin: ${a}`);
+    const t = n.headers.origin;
+    if (t) {
+      const s = E(t);
+      if (!s || !o.has(s)) {
+        d(r, `Invalid Origin: ${t}`);
         return;
       }
     }
-    s();
+    c();
   };
 }
-function E({ todoistApiKey: t, baseUrl: r, allowedHosts: o }) {
-  const e = m(), s = b({ allowedHosts: o });
-  return e.get("/health", (n, i) => {
-    i.json({ status: "ok" });
-  }), e.post(
-    "/mcp",
-    s,
-    m.json(),
-    w({ type: "static", apiKey: t, baseUrl: r }),
-    async (n, i) => {
-      try {
-        const a = new S({
-          sessionIdGenerator: void 0
-        });
-        await v({ todoistApiKey: t, baseUrl: r }).connect(a), await a.handleRequest(n, i, n.body);
-      } catch (a) {
-        console.error("[Error] Request handling failed:", a), i.status(500).json({
-          jsonrpc: "2.0",
-          error: {
-            code: -32603,
-            message: "Internal server error"
-          },
-          id: null
-        });
-      }
+function b({ todoistApiKey: e, baseUrl: o, allowedHosts: n }) {
+  const r = h(), c = $({ allowedHosts: n });
+  r.get("/health", (t, s) => {
+    s.json({ status: "ok" });
+  });
+  const i = v(() => I({ todoistApiKey: e, baseUrl: o }), {
+    onerror: (t) => {
+      console.error("[Error] MCP request rejected:", t);
+    }
+  }), a = w(i, {
+    onerror: (t) => {
+      console.error("[Error] Request handling failed:", t);
     }
-  ), e.get("/mcp", s, (n, i) => {
-    i.status(405).set("Allow", "POST").send("Method Not Allowed");
-  }), e;
+  });
+  return r.post(
+    "/mcp",
+    c,
+    h.json(),
+    g({ type: "static", apiKey: e, baseUrl: o }),
+    (t, s) => a(t, s, t.body)
+  ), r.get("/mcp", c, (t, s) => {
+    s.status(405).set("Allow", "POST").send("Method Not Allowed");
+  }), { app: r, close: i.close };
 }
-O.config({ quiet: !0 });
-const c = Number.parseInt(process.env.PORT || "3000", 10), T = process.env.HOST || "127.0.0.1", u = f(T);
-function P(t) {
-  return t === "0.0.0.0" || t === "::" ? "localhost" : H(t);
+S.config({ quiet: !0 });
+const l = Number.parseInt(process.env.PORT || "3000", 10), H = process.env.HOST || "127.0.0.1", u = p(H);
+function R(e) {
+  return e === "0.0.0.0" || e === "::" ? "localhost" : T(e);
 }
-function H(t) {
-  return p(t) === 6 ? `[${t}]` : t;
+function T(e) {
+  return f(e) === 6 ? `[${e}]` : e;
 }
-function $() {
-  const t = process.env.TODOIST_BASE_URL, r = process.env.TODOIST_API_KEY;
-  r || (console.error("Error: TODOIST_API_KEY environment variable is required"), process.exit(1));
-  const o = A(T, process.env.ALLOWED_HOSTS);
-  E({ todoistApiKey: r, baseUrl: t, allowedHosts: o }).listen(c, u, () => {
-    const s = P(u);
-    console.error(`Todoist MCP HTTP Server started on ${H(u)}:${c}`), console.error(`MCP endpoint: http://${s}:${c}/mcp`), console.error(`Health check: http://${s}:${c}/health`), I(u) || console.error(
+function y() {
+  const e = process.env.TODOIST_BASE_URL, o = process.env.TODOIST_API_KEY;
+  o || (console.error("Error: TODOIST_API_KEY environment variable is required"), process.exit(1));
+  const n = P(H, process.env.ALLOWED_HOSTS), { app: r, close: c } = b({ todoistApiKey: o, baseUrl: e, allowedHosts: n }), i = r.listen(l, u, () => {
+    const s = R(u);
+    console.error(`Todoist MCP HTTP Server started on ${T(u)}:${l}`), console.error(`MCP endpoint: http://${s}:${l}/mcp`), console.error(`Health check: http://${s}:${l}/health`), _(u) || console.error(
       "Warning: todoist-mcp-http is reachable from other hosts. Set ALLOWED_HOSTS to the hostnames clients use and protect this service with trusted network/auth controls because requests run with TODOIST_API_KEY."
     );
   });
+  let a = !1;
+  const t = (s) => {
+    a || (a = !0, console.error(`Received ${s}, shutting down`), c().catch((O) => {
+      console.error("Error closing MCP handler:", O);
+    }).finally(() => {
+      i.close(() => process.exit(0)), i.closeIdleConnections();
+    }));
+  };
+  process.once("SIGTERM", t), process.once("SIGINT", t);
 }
-$();
+y();

package/dist/main.js

@@ -1,17 +1,16 @@
 #!/usr/bin/env node
-import { StdioServerTransport as s } from "@modelcontextprotocol/server/stdio";
-import c from "dotenv";
-import { g as i } from "./mcp-server-Bi7iBPtS.js";
-function p() {
-  const e = process.env.TODOIST_BASE_URL, r = process.env.TODOIST_API_KEY;
+import { serveStdio as t } from "@modelcontextprotocol/server/stdio";
+import s from "dotenv";
+import { g as n } from "./mcp-server-DHMEVYZ1.js";
+function i() {
+  const o = process.env.TODOIST_BASE_URL, r = process.env.TODOIST_API_KEY;
   if (!r)
     throw new Error("TODOIST_API_KEY is not set");
-  const o = i({ todoistApiKey: r, baseUrl: e }), t = new s();
-  o.connect(t).then(() => {
-    console.error("Server started");
-  }).catch((n) => {
-    console.error("Error starting the Todoist MCP server:", n), process.exit(1);
-  });
+  t(() => n({ todoistApiKey: r, baseUrl: o }), {
+    onerror: (e) => {
+      console.error("Todoist MCP server error:", e);
+    }
+  }), console.error("Server started");
 }
-c.config({ quiet: !0 });
-p();
+s.config({ quiet: !0 });
+i();