@doist/todoist-sdk 10.3.2 → 10.4.0

package/dist/cjs/clients/upload-client.js

@@ -7,6 +7,70 @@ const file_response_1 = require("../utils/file-response");
 const multipart_upload_1 = require("../utils/multipart-upload");
 const validators_1 = require("../utils/validators");
 const base_client_1 = require("./base-client");
+/**
+ * First-party origin that serves attachment downloads behind Bearer auth.
+ * It redirects to the CDN; on the cross-origin hop the runtime drops the
+ * Authorization header, so the token never reaches the CDN.
+ */
+const AUTHENTICATED_ATTACHMENT_HOST = 'files.todoist.com';
+/**
+ * CDN origins that serve attachments via pre-signed URLs. These are
+ * third-party infrastructure and must never receive the auth token.
+ */
+const CDN_ATTACHMENT_HOSTS = new Set(['todoist.b-cdn.net', 'd1ysz50cxb9zwl.cloudfront.net']);
+const MAX_ATTACHMENT_REDIRECTS = 5;
+/**
+ * Builds the request headers for an attachment fetch, attaching the Bearer
+ * token only when the URL is on the first-party authenticated host.
+ */
+function buildAttachmentAuthHeaders(url, authToken) {
+    return new URL(url).hostname === AUTHENTICATED_ATTACHMENT_HOST
+        ? { Authorization: `Bearer ${authToken}` }
+        : {};
+}
+/**
+ * Fetches an attachment through a caller-supplied `customFetch` while
+ * guaranteeing the auth token is never sent across origins.
+ *
+ * A `customFetch` is an arbitrary implementation that may not honour the Fetch
+ * standard's rule of stripping `Authorization` on cross-origin redirects (older
+ * `node-fetch`, for example, does not). Because `files.todoist.com` redirects
+ * downloads to the CDN, a naive implementation could forward the token there.
+ * We therefore drive redirects with `redirect: 'manual'` and follow them
+ * ourselves, dropping the auth header whenever the origin changes.
+ *
+ * Implementations that hide the redirect behind an opaque response (status `0`,
+ * e.g. undici and browsers) can't be followed manually; for those we re-issue
+ * with normal redirect following and rely on the Fetch standard's cross-origin
+ * auth stripping, which those runtimes implement.
+ */
+async function customFetchFollowingRedirects(customFetch, startUrl, authToken) {
+    let currentUrl = startUrl;
+    let headers = buildAttachmentAuthHeaders(currentUrl, authToken);
+    for (let redirects = 0; redirects < MAX_ATTACHMENT_REDIRECTS; redirects++) {
+        const response = await customFetch(currentUrl, {
+            method: 'GET',
+            headers,
+            redirect: 'manual',
+        });
+        const location = response.headers['location'];
+        const isReadableRedirect = response.status >= 300 && response.status < 400 && Boolean(location);
+        if (!isReadableRedirect) {
+            // Opaque redirect (the impl hid the Location, e.g. undici): re-issue
+            // with normal following and trust the runtime to strip auth cross-origin.
+            if (response.status === 0) {
+                return customFetch(currentUrl, { method: 'GET', headers });
+            }
+            return response;
+        }
+        const nextUrl = new URL(location, currentUrl);
+        if (nextUrl.origin !== new URL(currentUrl).origin) {
+            headers = {};
+        }
+        currentUrl = nextUrl.toString();
+    }
+    throw new Error('Too many redirects while fetching attachment');
+}
 /**
  * Internal sub-client handling upload + attachment endpoints
  * (file upload, upload delete, attachment view).
@@ -57,22 +121,30 @@ class UploadClient extends base_client_1.BaseClient {
             }
             fileUrl = commentOrUrl.fileAttachment.fileUrl;
         }
-        // Validate the URL belongs to Todoist to prevent leaking the auth token
+        // Only allow known attachment origins, and only attach the auth token to the
+        // first-party authenticated host. This prevents the token leaking to other
+        // todoist.com hosts (e.g. api.todoist.com) or to third-party CDN infrastructure.
         const urlHostname = new URL(fileUrl).hostname;
-        if (!urlHostname.endsWith('.todoist.com')) {
-            throw new Error('Attachment URLs must be on a todoist.com domain');
+        const isAuthenticatedHost = urlHostname === AUTHENTICATED_ATTACHMENT_HOST;
+        if (!isAuthenticatedHost && !CDN_ATTACHMENT_HOSTS.has(urlHostname)) {
+            throw new Error('Attachment URLs must be on a known Todoist attachment host');
         }
-        const fetchOptions = {
-            method: 'GET',
-            headers: { Authorization: `Bearer ${this.authToken}` },
-        };
         if (this.customFetch) {
-            const response = await this.customFetch(fileUrl, fetchOptions);
+            // customFetch may not strip auth on cross-origin redirects, so we
+            // follow the files.todoist.com -> CDN hop ourselves to avoid leaking
+            // the token. See customFetchFollowingRedirects for details.
+            const response = await customFetchFollowingRedirects(this.customFetch, fileUrl, this.authToken);
             if (!response.ok) {
                 throw new Error(`Failed to fetch attachment: ${response.status} ${response.statusText}`);
             }
             return (0, file_response_1.wrapAsFileResponse)(response, 'viewAttachment');
         }
+        // Built-in fetch (undici) strips Authorization on cross-origin redirects
+        // per the Fetch standard, so the files.todoist.com -> CDN hop is safe here.
+        const fetchOptions = {
+            method: 'GET',
+            headers: isAuthenticatedHost ? { Authorization: `Bearer ${this.authToken}` } : {},
+        };
         const response = await fetch(fileUrl, fetchOptions);
         if (!response.ok) {
             throw new Error(`Failed to fetch attachment: ${response.status} ${response.statusText}`);

package/dist/cjs/test-utils/test-defaults.js

@@ -169,6 +169,7 @@ exports.DEFAULT_SECTION = {
     updatedAt: new Date('2025-03-28T14:01:23.334885Z'),
     archivedAt: null,
     name: DEFAULT_SECTION_NAME,
+    description: null,
     sectionOrder: exports.DEFAULT_ORDER,
     isArchived: false,
     isDeleted: false,

package/dist/cjs/todoist-api.js

@@ -862,7 +862,7 @@ class TodoistApi {
      * @example
      * ```typescript
      * await api.deleteUpload({
-     *   fileUrl: 'https://cdn.todoist.com/...'
+     *   fileUrl: 'https://files.todoist.com/...'
      * })
      * ```
      */
@@ -876,9 +876,14 @@ class TodoistApi {
      * or a direct file URL string. Returns the raw Response object so the caller
      * can read the body in the appropriate format (.arrayBuffer(), .text(), etc.).
      *
+     * Only known Todoist attachment hosts are allowed: the authenticated
+     * `files.todoist.com` origin (which receives the Bearer token) and the
+     * attachment CDN origins (fetched without the token). Other URLs are rejected.
+     *
      * @param commentOrUrl - A Comment object with a file attachment, or a file URL string.
      * @returns The raw fetch Response for the file content.
-     * @throws Error if a Comment is provided without a file attachment or file URL.
+     * @throws Error if a Comment is provided without a file attachment or file URL,
+     *   or if the URL is not on a known Todoist attachment host.
      *
      * @example
      * ```typescript

package/dist/cjs/types/sections/types.js

@@ -16,6 +16,7 @@ exports.SectionBaseSchema = zod_1.z.object({
     updatedAt: zod_1.z.coerce.date(),
     archivedAt: zod_1.z.coerce.date().nullable(),
     name: zod_1.z.string(),
+    description: zod_1.z.string().nullable(),
     sectionOrder: zod_1.z.number().int(),
     isArchived: zod_1.z.boolean(),
     isDeleted: zod_1.z.boolean(),

package/dist/cjs/types/webhooks/sections.js

@@ -32,14 +32,19 @@ exports.SECTION_WEBHOOK_EVENTS = [
  * payloads that deliver it as `null` or omit the key entirely — tombstones
  * and never-updated sections come through without an `updated_at` value.
  * The result is normalised to `Date | null` so consumers don't have to
- * handle three shapes. Surfaces the computed `url` so the exposed shape
- * matches {@link Section}.
+ * handle three shapes. `description` is similarly tolerated (older webhook
+ * payloads may omit it) and normalised to `string | null`. Surfaces the
+ * computed `url` so the exposed shape matches {@link Section}.
  */
 exports.WebhookSectionSchema = types_1.SectionBaseSchema.extend({
     updatedAt: zod_1.z.coerce
         .date()
         .nullish()
         .transform((value) => value !== null && value !== void 0 ? value : null),
+    description: zod_1.z
+        .string()
+        .nullish()
+        .transform((value) => value !== null && value !== void 0 ? value : null),
 }).transform((data) => (Object.assign(Object.assign({}, data), { url: (0, url_helpers_1.getSectionUrl)(data.id, data.name) })));
 exports.SectionAddedPayloadSchema = zod_1.z.object(Object.assign(Object.assign({}, envelope_1.BaseWebhookEnvelopeShape), { eventName: zod_1.z.literal(exports.SectionWebhookEventEnum.Added), eventData: exports.WebhookSectionSchema }));
 exports.SectionUpdatedPayloadSchema = zod_1.z.object(Object.assign(Object.assign({}, envelope_1.BaseWebhookEnvelopeShape), { eventName: zod_1.z.literal(exports.SectionWebhookEventEnum.Updated), eventData: exports.WebhookSectionSchema }));

package/dist/esm/clients/upload-client.js

@@ -4,6 +4,70 @@ import { wrapAsFileResponse } from '../utils/file-response.js';
 import { uploadMultipartFile } from '../utils/multipart-upload.js';
 import { validateAttachment } from '../utils/validators.js';
 import { BaseClient } from './base-client.js';
+/**
+ * First-party origin that serves attachment downloads behind Bearer auth.
+ * It redirects to the CDN; on the cross-origin hop the runtime drops the
+ * Authorization header, so the token never reaches the CDN.
+ */
+const AUTHENTICATED_ATTACHMENT_HOST = 'files.todoist.com';
+/**
+ * CDN origins that serve attachments via pre-signed URLs. These are
+ * third-party infrastructure and must never receive the auth token.
+ */
+const CDN_ATTACHMENT_HOSTS = new Set(['todoist.b-cdn.net', 'd1ysz50cxb9zwl.cloudfront.net']);
+const MAX_ATTACHMENT_REDIRECTS = 5;
+/**
+ * Builds the request headers for an attachment fetch, attaching the Bearer
+ * token only when the URL is on the first-party authenticated host.
+ */
+function buildAttachmentAuthHeaders(url, authToken) {
+    return new URL(url).hostname === AUTHENTICATED_ATTACHMENT_HOST
+        ? { Authorization: `Bearer ${authToken}` }
+        : {};
+}
+/**
+ * Fetches an attachment through a caller-supplied `customFetch` while
+ * guaranteeing the auth token is never sent across origins.
+ *
+ * A `customFetch` is an arbitrary implementation that may not honour the Fetch
+ * standard's rule of stripping `Authorization` on cross-origin redirects (older
+ * `node-fetch`, for example, does not). Because `files.todoist.com` redirects
+ * downloads to the CDN, a naive implementation could forward the token there.
+ * We therefore drive redirects with `redirect: 'manual'` and follow them
+ * ourselves, dropping the auth header whenever the origin changes.
+ *
+ * Implementations that hide the redirect behind an opaque response (status `0`,
+ * e.g. undici and browsers) can't be followed manually; for those we re-issue
+ * with normal redirect following and rely on the Fetch standard's cross-origin
+ * auth stripping, which those runtimes implement.
+ */
+async function customFetchFollowingRedirects(customFetch, startUrl, authToken) {
+    let currentUrl = startUrl;
+    let headers = buildAttachmentAuthHeaders(currentUrl, authToken);
+    for (let redirects = 0; redirects < MAX_ATTACHMENT_REDIRECTS; redirects++) {
+        const response = await customFetch(currentUrl, {
+            method: 'GET',
+            headers,
+            redirect: 'manual',
+        });
+        const location = response.headers['location'];
+        const isReadableRedirect = response.status >= 300 && response.status < 400 && Boolean(location);
+        if (!isReadableRedirect) {
+            // Opaque redirect (the impl hid the Location, e.g. undici): re-issue
+            // with normal following and trust the runtime to strip auth cross-origin.
+            if (response.status === 0) {
+                return customFetch(currentUrl, { method: 'GET', headers });
+            }
+            return response;
+        }
+        const nextUrl = new URL(location, currentUrl);
+        if (nextUrl.origin !== new URL(currentUrl).origin) {
+            headers = {};
+        }
+        currentUrl = nextUrl.toString();
+    }
+    throw new Error('Too many redirects while fetching attachment');
+}
 /**
  * Internal sub-client handling upload + attachment endpoints
  * (file upload, upload delete, attachment view).
@@ -54,22 +118,30 @@ export class UploadClient extends BaseClient {
             }
             fileUrl = commentOrUrl.fileAttachment.fileUrl;
         }
-        // Validate the URL belongs to Todoist to prevent leaking the auth token
+        // Only allow known attachment origins, and only attach the auth token to the
+        // first-party authenticated host. This prevents the token leaking to other
+        // todoist.com hosts (e.g. api.todoist.com) or to third-party CDN infrastructure.
         const urlHostname = new URL(fileUrl).hostname;
-        if (!urlHostname.endsWith('.todoist.com')) {
-            throw new Error('Attachment URLs must be on a todoist.com domain');
+        const isAuthenticatedHost = urlHostname === AUTHENTICATED_ATTACHMENT_HOST;
+        if (!isAuthenticatedHost && !CDN_ATTACHMENT_HOSTS.has(urlHostname)) {
+            throw new Error('Attachment URLs must be on a known Todoist attachment host');
         }
-        const fetchOptions = {
-            method: 'GET',
-            headers: { Authorization: `Bearer ${this.authToken}` },
-        };
         if (this.customFetch) {
-            const response = await this.customFetch(fileUrl, fetchOptions);
+            // customFetch may not strip auth on cross-origin redirects, so we
+            // follow the files.todoist.com -> CDN hop ourselves to avoid leaking
+            // the token. See customFetchFollowingRedirects for details.
+            const response = await customFetchFollowingRedirects(this.customFetch, fileUrl, this.authToken);
             if (!response.ok) {
                 throw new Error(`Failed to fetch attachment: ${response.status} ${response.statusText}`);
             }
             return wrapAsFileResponse(response, 'viewAttachment');
         }
+        // Built-in fetch (undici) strips Authorization on cross-origin redirects
+        // per the Fetch standard, so the files.todoist.com -> CDN hop is safe here.
+        const fetchOptions = {
+            method: 'GET',
+            headers: isAuthenticatedHost ? { Authorization: `Bearer ${this.authToken}` } : {},
+        };
         const response = await fetch(fileUrl, fetchOptions);
         if (!response.ok) {
             throw new Error(`Failed to fetch attachment: ${response.status} ${response.statusText}`);

package/dist/esm/test-utils/test-defaults.js

@@ -165,6 +165,7 @@ export const DEFAULT_SECTION = {
     updatedAt: new Date('2025-03-28T14:01:23.334885Z'),
     archivedAt: null,
     name: DEFAULT_SECTION_NAME,
+    description: null,
     sectionOrder: DEFAULT_ORDER,
     isArchived: false,
     isDeleted: false,

package/dist/esm/todoist-api.js

@@ -859,7 +859,7 @@ export class TodoistApi {
      * @example
      * ```typescript
      * await api.deleteUpload({
-     *   fileUrl: 'https://cdn.todoist.com/...'
+     *   fileUrl: 'https://files.todoist.com/...'
      * })
      * ```
      */
@@ -873,9 +873,14 @@ export class TodoistApi {
      * or a direct file URL string. Returns the raw Response object so the caller
      * can read the body in the appropriate format (.arrayBuffer(), .text(), etc.).
      *
+     * Only known Todoist attachment hosts are allowed: the authenticated
+     * `files.todoist.com` origin (which receives the Bearer token) and the
+     * attachment CDN origins (fetched without the token). Other URLs are rejected.
+     *
      * @param commentOrUrl - A Comment object with a file attachment, or a file URL string.
      * @returns The raw fetch Response for the file content.
-     * @throws Error if a Comment is provided without a file attachment or file URL.
+     * @throws Error if a Comment is provided without a file attachment or file URL,
+     *   or if the URL is not on a known Todoist attachment host.
      *
      * @example
      * ```typescript

package/dist/esm/types/sections/types.js

@@ -13,6 +13,7 @@ export const SectionBaseSchema = z.object({
     updatedAt: z.coerce.date(),
     archivedAt: z.coerce.date().nullable(),
     name: z.string(),
+    description: z.string().nullable(),
     sectionOrder: z.number().int(),
     isArchived: z.boolean(),
     isDeleted: z.boolean(),

package/dist/esm/types/webhooks/sections.js

@@ -29,14 +29,19 @@ export const SECTION_WEBHOOK_EVENTS = [
  * payloads that deliver it as `null` or omit the key entirely — tombstones
  * and never-updated sections come through without an `updated_at` value.
  * The result is normalised to `Date | null` so consumers don't have to
- * handle three shapes. Surfaces the computed `url` so the exposed shape
- * matches {@link Section}.
+ * handle three shapes. `description` is similarly tolerated (older webhook
+ * payloads may omit it) and normalised to `string | null`. Surfaces the
+ * computed `url` so the exposed shape matches {@link Section}.
  */
 export const WebhookSectionSchema = SectionBaseSchema.extend({
     updatedAt: z.coerce
         .date()
         .nullish()
         .transform((value) => value !== null && value !== void 0 ? value : null),
+    description: z
+        .string()
+        .nullish()
+        .transform((value) => value !== null && value !== void 0 ? value : null),
 }).transform((data) => (Object.assign(Object.assign({}, data), { url: getSectionUrl(data.id, data.name) })));
 export const SectionAddedPayloadSchema = z.object(Object.assign(Object.assign({}, BaseWebhookEnvelopeShape), { eventName: z.literal(SectionWebhookEventEnum.Added), eventData: WebhookSectionSchema }));
 export const SectionUpdatedPayloadSchema = z.object(Object.assign(Object.assign({}, BaseWebhookEnvelopeShape), { eventName: z.literal(SectionWebhookEventEnum.Updated), eventData: WebhookSectionSchema }));

package/dist/types/test-utils/test-defaults.d.ts

@@ -90,6 +90,7 @@ export declare const INVALID_SECTION: {
     updatedAt: Date;
     archivedAt: Date | null;
     name: string;
+    description: string | null;
     sectionOrder: number;
     isArchived: boolean;
     isDeleted: boolean;

package/dist/types/todoist-api.d.ts

@@ -722,7 +722,7 @@ export declare class TodoistApi {
      * @example
      * ```typescript
      * await api.deleteUpload({
-     *   fileUrl: 'https://cdn.todoist.com/...'
+     *   fileUrl: 'https://files.todoist.com/...'
      * })
      * ```
      */
@@ -734,9 +734,14 @@ export declare class TodoistApi {
      * or a direct file URL string. Returns the raw Response object so the caller
      * can read the body in the appropriate format (.arrayBuffer(), .text(), etc.).
      *
+     * Only known Todoist attachment hosts are allowed: the authenticated
+     * `files.todoist.com` origin (which receives the Bearer token) and the
+     * attachment CDN origins (fetched without the token). Other URLs are rejected.
+     *
      * @param commentOrUrl - A Comment object with a file attachment, or a file URL string.
      * @returns The raw fetch Response for the file content.
-     * @throws Error if a Comment is provided without a file attachment or file URL.
+     * @throws Error if a Comment is provided without a file attachment or file URL,
+     *   or if the URL is not on a known Todoist attachment host.
      *
      * @example
      * ```typescript

package/dist/types/types/projects/requests.d.ts

@@ -60,6 +60,8 @@ export type AddProjectArgs = {
     isFavorite?: boolean;
     viewStyle?: ProjectViewStyle;
     workspaceId?: string;
+    /** Optional description for the project (Markdown). */
+    description?: string;
 };
 /**
  * Arguments for updating a project.
@@ -70,6 +72,11 @@ export type UpdateProjectArgs = {
     color?: ColorKey;
     isFavorite?: boolean;
     viewStyle?: ProjectViewStyle;
+    /**
+     * Updated project description (Markdown). Pass an empty string to clear it.
+     * Omit this field to keep it unchanged.
+     */
+    description?: string;
     /**
      * Folder to move the project into. Only supported for workspace projects.
      * Pass `null` to clear the value. Omit this field to keep it unchanged.

package/dist/types/types/sections/requests.d.ts

@@ -1,3 +1,4 @@
+import type { RequireAtLeastOne } from 'type-fest';
 import type { SearchArgs } from '../common.js';
 import type { Section } from './types.js';
 /**
@@ -31,11 +32,18 @@ export type AddSectionArgs = {
     name: string;
     projectId: string;
     order?: number | null;
+    /** Optional description for the section (Markdown). */
+    description?: string;
 };
 /**
- * Arguments for updating a section.
+ * Arguments for updating a section. At least one field must be provided.
  * @see https://developer.todoist.com/api/v1/#tag/Sections/operation/update_section_api_v1_sections__section_id__post
  */
-export type UpdateSectionArgs = {
+export type UpdateSectionArgs = RequireAtLeastOne<{
     name: string;
-};
+    /**
+     * Updated section description (Markdown). Pass `null` to clear it. Omit the
+     * field to keep it unchanged.
+     */
+    description: string | null;
+}>;

package/dist/types/types/sections/types.d.ts

@@ -12,6 +12,7 @@ export declare const SectionBaseSchema: z.ZodObject<{
     updatedAt: z.ZodCoercedDate<unknown>;
     archivedAt: z.ZodNullable<z.ZodCoercedDate<unknown>>;
     name: z.ZodString;
+    description: z.ZodNullable<z.ZodString>;
     sectionOrder: z.ZodNumber;
     isArchived: z.ZodBoolean;
     isDeleted: z.ZodBoolean;
@@ -25,6 +26,7 @@ export declare const SectionSchema: z.ZodPipe<z.ZodObject<{
     updatedAt: z.ZodCoercedDate<unknown>;
     archivedAt: z.ZodNullable<z.ZodCoercedDate<unknown>>;
     name: z.ZodString;
+    description: z.ZodNullable<z.ZodString>;
     sectionOrder: z.ZodNumber;
     isArchived: z.ZodBoolean;
     isDeleted: z.ZodBoolean;
@@ -38,6 +40,7 @@ export declare const SectionSchema: z.ZodPipe<z.ZodObject<{
     updatedAt: Date;
     archivedAt: Date | null;
     name: string;
+    description: string | null;
     sectionOrder: number;
     isArchived: boolean;
     isDeleted: boolean;
@@ -50,6 +53,7 @@ export declare const SectionSchema: z.ZodPipe<z.ZodObject<{
     updatedAt: Date;
     archivedAt: Date | null;
     name: string;
+    description: string | null;
     sectionOrder: number;
     isArchived: boolean;
     isDeleted: boolean;

package/dist/types/types/sync/response.d.ts

@@ -194,6 +194,7 @@ export declare const SyncResponseSchema: z.ZodObject<{
         updatedAt: z.ZodCoercedDate<unknown>;
         archivedAt: z.ZodNullable<z.ZodCoercedDate<unknown>>;
         name: z.ZodString;
+        description: z.ZodNullable<z.ZodString>;
         sectionOrder: z.ZodNumber;
         isArchived: z.ZodBoolean;
         isDeleted: z.ZodBoolean;
@@ -207,6 +208,7 @@ export declare const SyncResponseSchema: z.ZodObject<{
         updatedAt: Date;
         archivedAt: Date | null;
         name: string;
+        description: string | null;
         sectionOrder: number;
         isArchived: boolean;
         isDeleted: boolean;
@@ -219,6 +221,7 @@ export declare const SyncResponseSchema: z.ZodObject<{
         updatedAt: Date;
         archivedAt: Date | null;
         name: string;
+        description: string | null;
         sectionOrder: number;
         isArchived: boolean;
         isDeleted: boolean;

package/dist/types/types/webhooks/sections.d.ts

@@ -20,8 +20,9 @@ export declare const SECTION_WEBHOOK_EVENTS: readonly ["section:added", "section
  * payloads that deliver it as `null` or omit the key entirely — tombstones
  * and never-updated sections come through without an `updated_at` value.
  * The result is normalised to `Date | null` so consumers don't have to
- * handle three shapes. Surfaces the computed `url` so the exposed shape
- * matches {@link Section}.
+ * handle three shapes. `description` is similarly tolerated (older webhook
+ * payloads may omit it) and normalised to `string | null`. Surfaces the
+ * computed `url` so the exposed shape matches {@link Section}.
  */
 export declare const WebhookSectionSchema: z.ZodPipe<z.ZodObject<{
     id: z.ZodString;
@@ -35,6 +36,7 @@ export declare const WebhookSectionSchema: z.ZodPipe<z.ZodObject<{
     isDeleted: z.ZodBoolean;
     isCollapsed: z.ZodBoolean;
     updatedAt: z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodCoercedDate<unknown>>>, z.ZodTransform<Date | null, Date | null | undefined>>;
+    description: z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodString>>, z.ZodTransform<string | null, string | null | undefined>>;
 }, z.core.$strip>, z.ZodTransform<{
     url: string;
     id: string;
@@ -48,6 +50,7 @@ export declare const WebhookSectionSchema: z.ZodPipe<z.ZodObject<{
     isDeleted: boolean;
     isCollapsed: boolean;
     updatedAt: Date | null;
+    description: string | null;
 }, {
     id: string;
     userId: string;
@@ -60,6 +63,7 @@ export declare const WebhookSectionSchema: z.ZodPipe<z.ZodObject<{
     isDeleted: boolean;
     isCollapsed: boolean;
     updatedAt: Date | null;
+    description: string | null;
 }>>;
 /** A section delivered in a webhook payload. */
 export type WebhookSection = z.infer<typeof WebhookSectionSchema>;
@@ -77,6 +81,7 @@ export declare const SectionAddedPayloadSchema: z.ZodObject<{
         isDeleted: z.ZodBoolean;
         isCollapsed: z.ZodBoolean;
         updatedAt: z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodCoercedDate<unknown>>>, z.ZodTransform<Date | null, Date | null | undefined>>;
+        description: z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodString>>, z.ZodTransform<string | null, string | null | undefined>>;
     }, z.core.$strip>, z.ZodTransform<{
         url: string;
         id: string;
@@ -90,6 +95,7 @@ export declare const SectionAddedPayloadSchema: z.ZodObject<{
         isDeleted: boolean;
         isCollapsed: boolean;
         updatedAt: Date | null;
+        description: string | null;
     }, {
         id: string;
         userId: string;
@@ -102,6 +108,7 @@ export declare const SectionAddedPayloadSchema: z.ZodObject<{
         isDeleted: boolean;
         isCollapsed: boolean;
         updatedAt: Date | null;
+        description: string | null;
     }>>;
     version: z.ZodEnum<{
         1: "1";
@@ -131,6 +138,7 @@ export declare const SectionUpdatedPayloadSchema: z.ZodObject<{
         isDeleted: z.ZodBoolean;
         isCollapsed: z.ZodBoolean;
         updatedAt: z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodCoercedDate<unknown>>>, z.ZodTransform<Date | null, Date | null | undefined>>;
+        description: z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodString>>, z.ZodTransform<string | null, string | null | undefined>>;
     }, z.core.$strip>, z.ZodTransform<{
         url: string;
         id: string;
@@ -144,6 +152,7 @@ export declare const SectionUpdatedPayloadSchema: z.ZodObject<{
         isDeleted: boolean;
         isCollapsed: boolean;
         updatedAt: Date | null;
+        description: string | null;
     }, {
         id: string;
         userId: string;
@@ -156,6 +165,7 @@ export declare const SectionUpdatedPayloadSchema: z.ZodObject<{
         isDeleted: boolean;
         isCollapsed: boolean;
         updatedAt: Date | null;
+        description: string | null;
     }>>;
     version: z.ZodEnum<{
         1: "1";
@@ -185,6 +195,7 @@ export declare const SectionDeletedPayloadSchema: z.ZodObject<{
         isDeleted: z.ZodBoolean;
         isCollapsed: z.ZodBoolean;
         updatedAt: z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodCoercedDate<unknown>>>, z.ZodTransform<Date | null, Date | null | undefined>>;
+        description: z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodString>>, z.ZodTransform<string | null, string | null | undefined>>;
     }, z.core.$strip>, z.ZodTransform<{
         url: string;
         id: string;
@@ -198,6 +209,7 @@ export declare const SectionDeletedPayloadSchema: z.ZodObject<{
         isDeleted: boolean;
         isCollapsed: boolean;
         updatedAt: Date | null;
+        description: string | null;
     }, {
         id: string;
         userId: string;
@@ -210,6 +222,7 @@ export declare const SectionDeletedPayloadSchema: z.ZodObject<{
         isDeleted: boolean;
         isCollapsed: boolean;
         updatedAt: Date | null;
+        description: string | null;
     }>>;
     version: z.ZodEnum<{
         1: "1";
@@ -239,6 +252,7 @@ export declare const SectionArchivedPayloadSchema: z.ZodObject<{
         isDeleted: z.ZodBoolean;
         isCollapsed: z.ZodBoolean;
         updatedAt: z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodCoercedDate<unknown>>>, z.ZodTransform<Date | null, Date | null | undefined>>;
+        description: z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodString>>, z.ZodTransform<string | null, string | null | undefined>>;
     }, z.core.$strip>, z.ZodTransform<{
         url: string;
         id: string;
@@ -252,6 +266,7 @@ export declare const SectionArchivedPayloadSchema: z.ZodObject<{
         isDeleted: boolean;
         isCollapsed: boolean;
         updatedAt: Date | null;
+        description: string | null;
     }, {
         id: string;
         userId: string;
@@ -264,6 +279,7 @@ export declare const SectionArchivedPayloadSchema: z.ZodObject<{
         isDeleted: boolean;
         isCollapsed: boolean;
         updatedAt: Date | null;
+        description: string | null;
     }>>;
     version: z.ZodEnum<{
         1: "1";
@@ -293,6 +309,7 @@ export declare const SectionUnarchivedPayloadSchema: z.ZodObject<{
         isDeleted: z.ZodBoolean;
         isCollapsed: z.ZodBoolean;
         updatedAt: z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodCoercedDate<unknown>>>, z.ZodTransform<Date | null, Date | null | undefined>>;
+        description: z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodString>>, z.ZodTransform<string | null, string | null | undefined>>;
     }, z.core.$strip>, z.ZodTransform<{
         url: string;
         id: string;
@@ -306,6 +323,7 @@ export declare const SectionUnarchivedPayloadSchema: z.ZodObject<{
         isDeleted: boolean;
         isCollapsed: boolean;
         updatedAt: Date | null;
+        description: string | null;
     }, {
         id: string;
         userId: string;
@@ -318,6 +336,7 @@ export declare const SectionUnarchivedPayloadSchema: z.ZodObject<{
         isDeleted: boolean;
         isCollapsed: boolean;
         updatedAt: Date | null;
+        description: string | null;
     }>>;
     version: z.ZodEnum<{
         1: "1";

package/dist/types/types/webhooks/types.d.ts

@@ -2189,6 +2189,7 @@ export declare const WebhookPayloadSchema: z.ZodDiscriminatedUnion<[z.ZodObject<
         isDeleted: z.ZodBoolean;
         isCollapsed: z.ZodBoolean;
         updatedAt: z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodCoercedDate<unknown>>>, z.ZodTransform<Date | null, Date | null | undefined>>;
+        description: z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodString>>, z.ZodTransform<string | null, string | null | undefined>>;
     }, z.core.$strip>, z.ZodTransform<{
         url: string;
         id: string;
@@ -2202,6 +2203,7 @@ export declare const WebhookPayloadSchema: z.ZodDiscriminatedUnion<[z.ZodObject<
         isDeleted: boolean;
         isCollapsed: boolean;
         updatedAt: Date | null;
+        description: string | null;
     }, {
         id: string;
         userId: string;
@@ -2214,6 +2216,7 @@ export declare const WebhookPayloadSchema: z.ZodDiscriminatedUnion<[z.ZodObject<
         isDeleted: boolean;
         isCollapsed: boolean;
         updatedAt: Date | null;
+        description: string | null;
     }>>;
     version: z.ZodEnum<{
         1: "1";
@@ -2241,6 +2244,7 @@ export declare const WebhookPayloadSchema: z.ZodDiscriminatedUnion<[z.ZodObject<
         isDeleted: z.ZodBoolean;
         isCollapsed: z.ZodBoolean;
         updatedAt: z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodCoercedDate<unknown>>>, z.ZodTransform<Date | null, Date | null | undefined>>;
+        description: z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodString>>, z.ZodTransform<string | null, string | null | undefined>>;
     }, z.core.$strip>, z.ZodTransform<{
         url: string;
         id: string;
@@ -2254,6 +2258,7 @@ export declare const WebhookPayloadSchema: z.ZodDiscriminatedUnion<[z.ZodObject<
         isDeleted: boolean;
         isCollapsed: boolean;
         updatedAt: Date | null;
+        description: string | null;
     }, {
         id: string;
         userId: string;
@@ -2266,6 +2271,7 @@ export declare const WebhookPayloadSchema: z.ZodDiscriminatedUnion<[z.ZodObject<
         isDeleted: boolean;
         isCollapsed: boolean;
         updatedAt: Date | null;
+        description: string | null;
     }>>;
     version: z.ZodEnum<{
         1: "1";
@@ -2293,6 +2299,7 @@ export declare const WebhookPayloadSchema: z.ZodDiscriminatedUnion<[z.ZodObject<
         isDeleted: z.ZodBoolean;
         isCollapsed: z.ZodBoolean;
         updatedAt: z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodCoercedDate<unknown>>>, z.ZodTransform<Date | null, Date | null | undefined>>;
+        description: z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodString>>, z.ZodTransform<string | null, string | null | undefined>>;
     }, z.core.$strip>, z.ZodTransform<{
         url: string;
         id: string;
@@ -2306,6 +2313,7 @@ export declare const WebhookPayloadSchema: z.ZodDiscriminatedUnion<[z.ZodObject<
         isDeleted: boolean;
         isCollapsed: boolean;
         updatedAt: Date | null;
+        description: string | null;
     }, {
         id: string;
         userId: string;
@@ -2318,6 +2326,7 @@ export declare const WebhookPayloadSchema: z.ZodDiscriminatedUnion<[z.ZodObject<
         isDeleted: boolean;
         isCollapsed: boolean;
         updatedAt: Date | null;
+        description: string | null;
     }>>;
     version: z.ZodEnum<{
         1: "1";
@@ -2345,6 +2354,7 @@ export declare const WebhookPayloadSchema: z.ZodDiscriminatedUnion<[z.ZodObject<
         isDeleted: z.ZodBoolean;
         isCollapsed: z.ZodBoolean;
         updatedAt: z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodCoercedDate<unknown>>>, z.ZodTransform<Date | null, Date | null | undefined>>;
+        description: z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodString>>, z.ZodTransform<string | null, string | null | undefined>>;
     }, z.core.$strip>, z.ZodTransform<{
         url: string;
         id: string;
@@ -2358,6 +2368,7 @@ export declare const WebhookPayloadSchema: z.ZodDiscriminatedUnion<[z.ZodObject<
         isDeleted: boolean;
         isCollapsed: boolean;
         updatedAt: Date | null;
+        description: string | null;
     }, {
         id: string;
         userId: string;
@@ -2370,6 +2381,7 @@ export declare const WebhookPayloadSchema: z.ZodDiscriminatedUnion<[z.ZodObject<
         isDeleted: boolean;
         isCollapsed: boolean;
         updatedAt: Date | null;
+        description: string | null;
     }>>;
     version: z.ZodEnum<{
         1: "1";
@@ -2397,6 +2409,7 @@ export declare const WebhookPayloadSchema: z.ZodDiscriminatedUnion<[z.ZodObject<
         isDeleted: z.ZodBoolean;
         isCollapsed: z.ZodBoolean;
         updatedAt: z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodCoercedDate<unknown>>>, z.ZodTransform<Date | null, Date | null | undefined>>;
+        description: z.ZodPipe<z.ZodOptional<z.ZodNullable<z.ZodString>>, z.ZodTransform<string | null, string | null | undefined>>;
     }, z.core.$strip>, z.ZodTransform<{
         url: string;
         id: string;
@@ -2410,6 +2423,7 @@ export declare const WebhookPayloadSchema: z.ZodDiscriminatedUnion<[z.ZodObject<
         isDeleted: boolean;
         isCollapsed: boolean;
         updatedAt: Date | null;
+        description: string | null;
     }, {
         id: string;
         userId: string;
@@ -2422,6 +2436,7 @@ export declare const WebhookPayloadSchema: z.ZodDiscriminatedUnion<[z.ZodObject<
         isDeleted: boolean;
         isCollapsed: boolean;
         updatedAt: Date | null;
+        description: string | null;
     }>>;
     version: z.ZodEnum<{
         1: "1";

package/dist/types/utils/validators.d.ts

@@ -248,6 +248,7 @@ export declare const validateSection: (input: unknown) => {
     updatedAt: Date;
     archivedAt: Date | null;
     name: string;
+    description: string | null;
     sectionOrder: number;
     isArchived: boolean;
     isDeleted: boolean;
@@ -261,6 +262,7 @@ export declare const validateSection: (input: unknown) => {
     updatedAt: Date;
     archivedAt: Date | null;
     name: string;
+    description: string | null;
     sectionOrder: number;
     isArchived: boolean;
     isDeleted: boolean;

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@doist/todoist-sdk",
-    "version": "10.3.2",
+    "version": "10.4.0",
     "description": "The official TypeScript SDK for the Todoist REST API.",
     "author": "Doist developers",
     "repository": "https://github.com/Doist/todoist-sdk-typescript",