@doist/todoist-sdk 8.0.1 → 8.2.0

package/README.md

@@ -34,21 +34,21 @@ If you're migrating from an older version of the Todoist API (v9), please refer
 
 Key changes in v1 include:
 
--   Updated endpoint structure
--   New pagination system
--   Unified error response format
--   Object renames (e.g., items → tasks, notes → comments)
--   URL renames and endpoint signature changes
+- Updated endpoint structure
+- New pagination system
+- Unified error response format
+- Object renames (e.g., items → tasks, notes → comments)
+- URL renames and endpoint signature changes
 
 ## Custom HTTP Clients
 
 The Todoist API client supports custom HTTP implementations to enable usage in environments with specific networking requirements, such as:
 
--   **Obsidian plugins** - Desktop app with strict CORS policies
--   **Browser extensions** - Custom HTTP APIs with different security models
--   **Electron apps** - Requests routed through IPC layer
--   **React Native** - Different networking stack
--   **Enterprise environments** - Proxy configuration, custom headers, or certificate handling
+- **Obsidian plugins** - Desktop app with strict CORS policies
+- **Browser extensions** - Custom HTTP APIs with different security models
+- **Electron apps** - Requests routed through IPC layer
+- **React Native** - Different networking stack
+- **Enterprise environments** - Proxy configuration, custom headers, or certificate handling
 
 ### Basic Usage
 
@@ -106,20 +106,20 @@ const { accessToken } = await getAuthToken(args, baseUrl)
 
 ### Important Notes
 
--   All existing transforms (snake_case ↔ camelCase) work automatically with custom fetch
--   Retry logic and error handling are preserved
--   File uploads work with custom fetch implementations
--   The custom fetch function should handle FormData for multipart uploads
--   Timeout parameter is optional and up to your custom implementation
+- All existing transforms (snake_case ↔ camelCase) work automatically with custom fetch
+- Retry logic and error handling are preserved
+- File uploads work with custom fetch implementations
+- The custom fetch function should handle FormData for multipart uploads
+- Timeout parameter is optional and up to your custom implementation
 
 ## Development and Testing
 
 Instead of having an example app in the repository to assist development and testing, we have included [ts-node](https://github.com/TypeStrong/ts-node) as a dev dependency. This allows us to have a scratch file locally that can import and utilize the API while developing or reviewing pull requests without having to manage a separate app project.
 
--   `npm install`
--   Add a file named `scratch.ts` in the `src` folder.
--   Configure your IDE to run the scratch file with `ts-node` (instructions for [VSCode](https://medium.com/@dupski/debug-typescript-in-vs-code-without-compiling-using-ts-node-9d1f4f9a94a), [WebStorm](https://www.jetbrains.com/help/webstorm/running-and-debugging-typescript.html#ws_ts_run_debug_server_side_ts_node)), or you can optionally run ts-node in a terminal using instructions [here](https://github.com/TypeStrong/ts-node) (`npx ts-node ./src/scratch.ts` should be enough).
--   Import and call the relevant modules and run the scratch file.
+- `npm install`
+- Add a file named `scratch.ts` in the `src` folder.
+- Configure your IDE to run the scratch file with `ts-node` (instructions for [VSCode](https://medium.com/@dupski/debug-typescript-in-vs-code-without-compiling-using-ts-node-9d1f4f9a94a), [WebStorm](https://www.jetbrains.com/help/webstorm/running-and-debugging-typescript.html#ws_ts_run_debug_server_side_ts_node)), or you can optionally run ts-node in a terminal using instructions [here](https://github.com/TypeStrong/ts-node) (`npx ts-node ./src/scratch.ts` should be enough).
+- Import and call the relevant modules and run the scratch file.
 
 Example scratch.ts file:
 
@@ -169,10 +169,10 @@ This project uses [Release Please](https://github.com/googleapis/release-please)
 
 When making changes, use conventional commit messages:
 
--   `feat:` - New features (triggers a minor version bump)
--   `fix:` - Bug fixes (triggers a patch version bump)
--   `feat!:` or `BREAKING CHANGE:` - Breaking changes (triggers a major version bump)
--   `chore:`, `docs:`, `refactor:`, `perf:` - Other changes (included in changelog)
+- `feat:` - New features (triggers a minor version bump)
+- `fix:` - Bug fixes (triggers a patch version bump)
+- `feat!:` or `BREAKING CHANGE:` - Breaking changes (triggers a major version bump)
+- `chore:`, `docs:`, `refactor:`, `perf:` - Other changes (included in changelog)
 
 Example:
 
@@ -187,7 +187,6 @@ feat!: remove deprecated getTask method
 The release process is fully automated:
 
 1. **Automatic PR Creation**: When commits are merged to `main`, Release Please automatically creates or updates a release PR with:
-
     - Updated version in `package.json`
     - Updated `CHANGELOG.md`
     - Aggregated changes since the last release

package/dist/cjs/authentication.js

@@ -1,15 +1,27 @@
 "use strict";
+var __rest = (this && this.__rest) || function (s, e) {
+    var t = {};
+    for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p) && e.indexOf(p) < 0)
+        t[p] = s[p];
+    if (s != null && typeof Object.getOwnPropertySymbols === "function")
+        for (var i = 0, p = Object.getOwnPropertySymbols(s); i < p.length; i++) {
+            if (e.indexOf(p[i]) < 0 && Object.prototype.propertyIsEnumerable.call(s, p[i]))
+                t[p[i]] = s[p[i]];
+        }
+    return t;
+};
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.PERMISSIONS = void 0;
+exports.TOKEN_ENDPOINT_AUTH_METHODS = exports.PERMISSIONS = void 0;
 exports.getAuthStateParameter = getAuthStateParameter;
 exports.getAuthorizationUrl = getAuthorizationUrl;
 exports.getAuthToken = getAuthToken;
 exports.revokeToken = revokeToken;
 exports.migratePersonalToken = migratePersonalToken;
-const http_client_1 = require("./transport/http-client");
+exports.registerClient = registerClient;
 const uuid_1 = require("uuid");
-const types_1 = require("./types");
 const endpoints_1 = require("./consts/endpoints");
+const http_client_1 = require("./transport/http-client");
+const types_1 = require("./types");
 /** Available OAuth2 permission scopes. */
 exports.PERMISSIONS = [
     'task:add',
@@ -19,6 +31,12 @@ exports.PERMISSIONS = [
     'project:delete',
     'backups:read',
 ];
+/** Supported token endpoint authentication methods for dynamic client registration. */
+exports.TOKEN_ENDPOINT_AUTH_METHODS = [
+    'client_secret_post',
+    'client_secret_basic',
+    'none',
+];
 /**
  * Creates a Basic Authentication header value from client credentials.
  * @param clientId - The OAuth client ID
@@ -48,13 +66,17 @@ function getAuthStateParameter() {
 /**
  * Generates the authorization URL for the OAuth2 flow.
  *
+ * The `clientId` can be either a traditional client ID string (e.g. from
+ * {@link registerClient}) or an HTTPS URL pointing to a client metadata document,
+ * as defined in {@link https://drafts.ietf.org/doc/draft-ietf-oauth-client-id-metadata-document/ RFC draft-ietf-oauth-client-id-metadata-document}.
+ *
  * @example
  * ```typescript
- * const url = getAuthorizationUrl(
- *   'your-client-id',
- *   ['data:read', 'task:add'],
- *   state
- * )
+ * const url = getAuthorizationUrl({
+ *   clientId: 'your-client-id',
+ *   permissions: ['data:read', 'task:add'],
+ *   state,
+ * })
  * // Redirect user to url
  * ```
  *
@@ -66,7 +88,7 @@ function getAuthorizationUrl({ clientId, permissions, state, baseUrl, }) {
         throw new Error('At least one scope value should be passed for permissions.');
     }
     const scope = permissions.join(',');
-    return `${(0, endpoints_1.getAuthBaseUri)(baseUrl)}${endpoints_1.ENDPOINT_AUTHORIZATION}?client_id=${clientId}&scope=${scope}&state=${state}`;
+    return `${(0, endpoints_1.getAuthBaseUri)(baseUrl)}${endpoints_1.ENDPOINT_AUTHORIZATION}?client_id=${encodeURIComponent(clientId)}&scope=${scope}&state=${state}`;
 }
 /**
  * Exchanges an authorization code for an access token.
@@ -202,3 +224,48 @@ async function migratePersonalToken(args, options) {
         throw new types_1.TodoistRequestError('Personal token migration failed.', err.httpStatusCode, err.responseData);
     }
 }
+/**
+ * Registers a new OAuth client via Dynamic Client Registration (RFC 7591).
+ *
+ * @example
+ * ```typescript
+ * const client = await registerClient({
+ *   redirectUris: ['https://example.com/callback'],
+ *   clientName: 'My App',
+ *   scope: ['data:read_write', 'task:add'],
+ * })
+ * // Use client.clientId and client.clientSecret for OAuth flows
+ * ```
+ *
+ * @returns The registered client details
+ * @throws {@link TodoistRequestError} If the registration fails
+ * @see {@link https://datatracker.ietf.org/doc/html/rfc7591 RFC 7591}
+ */
+async function registerClient(args, options) {
+    var _a, _b;
+    const baseUrl = options === null || options === void 0 ? void 0 : options.baseUrl;
+    const customFetch = options === null || options === void 0 ? void 0 : options.customFetch;
+    try {
+        const response = await (0, http_client_1.request)({
+            httpMethod: 'POST',
+            baseUri: (0, endpoints_1.getAuthBaseUri)(baseUrl),
+            relativePath: endpoints_1.ENDPOINT_REGISTER,
+            apiToken: undefined,
+            payload: Object.assign(Object.assign({}, args), { scope: (_a = args.scope) === null || _a === void 0 ? void 0 : _a.join(' ') }),
+            customFetch,
+        });
+        if (!(0, http_client_1.isSuccess)(response) || !((_b = response.data) === null || _b === void 0 ? void 0 : _b.clientId)) {
+            throw new types_1.TodoistRequestError('Dynamic client registration failed.', response.status, response.data);
+        }
+        const _c = response.data, { clientIdIssuedAt, clientSecretExpiresAt, scope } = _c, rest = __rest(_c, ["clientIdIssuedAt", "clientSecretExpiresAt", "scope"]);
+        return Object.assign(Object.assign({}, rest), { scope: scope ? scope.split(' ') : undefined, clientIdIssuedAt: clientIdIssuedAt !== undefined ? new Date(clientIdIssuedAt * 1000) : undefined, clientSecretExpiresAt: clientSecretExpiresAt === undefined
+                ? undefined
+                : clientSecretExpiresAt === 0
+                    ? null
+                    : new Date(clientSecretExpiresAt * 1000) });
+    }
+    catch (error) {
+        const err = error;
+        throw new types_1.TodoistRequestError('Dynamic client registration failed.', err.httpStatusCode, err.responseData);
+    }
+}

package/dist/cjs/consts/endpoints.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ENDPOINT_REST_ID_MAPPINGS = exports.ENDPOINT_REST_EMAILS = exports.ENDPOINT_REST_BACKUPS_DOWNLOAD = exports.ENDPOINT_REST_BACKUPS = exports.ENDPOINT_REST_ACCESS_TOKENS_MIGRATE = exports.ENDPOINT_REST_TEMPLATES_IMPORT_FROM_ID = exports.ENDPOINT_REST_TEMPLATES_IMPORT_FROM_FILE = exports.ENDPOINT_REST_TEMPLATES_CREATE_FROM_FILE = exports.ENDPOINT_REST_TEMPLATES_URL = exports.ENDPOINT_REST_TEMPLATES_FILE = exports.ENDPOINT_REST_TASKS_COMPLETED = exports.ENDPOINT_REST_PROJECTS_MOVE_TO_PERSONAL = exports.ENDPOINT_REST_PROJECTS_MOVE_TO_WORKSPACE = exports.SECTION_UNARCHIVE = exports.SECTION_ARCHIVE = exports.ENDPOINT_REST_PROJECT_JOIN = exports.ENDPOINT_REST_PROJECT_FULL = exports.ENDPOINT_REST_PROJECTS_PERMISSIONS = exports.ENDPOINT_REST_PROJECTS_ARCHIVED_COUNT = exports.PROJECT_UNARCHIVE = exports.PROJECT_ARCHIVE = exports.ENDPOINT_REST_UPLOADS = exports.ENDPOINT_REST_ACTIVITIES = exports.ENDPOINT_REST_PRODUCTIVITY = exports.ENDPOINT_REST_USER = exports.ENDPOINT_REST_PROJECT_COLLABORATORS = exports.ENDPOINT_REST_PROJECTS_ARCHIVED = exports.ENDPOINT_REST_PROJECTS_SEARCH = exports.ENDPOINT_REST_PROJECTS = exports.ENDPOINT_REST_TASK_MOVE = exports.ENDPOINT_REST_TASK_REOPEN = exports.ENDPOINT_REST_TASK_CLOSE = exports.ENDPOINT_REST_LOCATION_REMINDERS = exports.ENDPOINT_REST_REMINDERS = exports.ENDPOINT_REST_COMMENTS = exports.ENDPOINT_REST_LABELS_SHARED_REMOVE = exports.ENDPOINT_REST_LABELS_SHARED_RENAME = exports.ENDPOINT_REST_LABELS_SHARED = exports.ENDPOINT_REST_LABELS_SEARCH = exports.ENDPOINT_REST_LABELS = exports.ENDPOINT_REST_SECTIONS_SEARCH = exports.ENDPOINT_REST_SECTIONS = exports.ENDPOINT_REST_TASKS_COMPLETED_SEARCH = exports.ENDPOINT_REST_TASKS_COMPLETED_BY_DUE_DATE = exports.ENDPOINT_REST_TASKS_COMPLETED_BY_COMPLETION_DATE = exports.ENDPOINT_REST_TASKS_FILTER = exports.ENDPOINT_REST_TASKS = exports.API_BASE_URI = exports.API_VERSION = exports.TODOIST_WEB_URI = void 0;
-exports.ENDPOINT_WORKSPACE_MEMBERS = exports.ENDPOINT_WORKSPACE_USERS = exports.ENDPOINT_WORKSPACE_PLAN_DETAILS = exports.ENDPOINT_WORKSPACE_LOGO = exports.ENDPOINT_WORKSPACE_JOIN = exports.ENDPOINT_WORKSPACE_INVITATIONS_DELETE = exports.ENDPOINT_WORKSPACE_INVITATIONS_ALL = exports.ENDPOINT_WORKSPACE_INVITATIONS = exports.ENDPOINT_REST_WORKSPACES = exports.ENDPOINT_REST_FOLDERS = exports.ENDPOINT_REVOKE = exports.ENDPOINT_GET_TOKEN = exports.ENDPOINT_AUTHORIZATION = exports.ENDPOINT_SYNC = exports.ENDPOINT_SYNC_QUICK_ADD = exports.ENDPOINT_REST_MOVED_IDS = void 0;
+exports.ENDPOINT_WORKSPACE_MEMBERS = exports.ENDPOINT_WORKSPACE_USERS = exports.ENDPOINT_WORKSPACE_PLAN_DETAILS = exports.ENDPOINT_WORKSPACE_LOGO = exports.ENDPOINT_WORKSPACE_JOIN = exports.ENDPOINT_WORKSPACE_INVITATIONS_DELETE = exports.ENDPOINT_WORKSPACE_INVITATIONS_ALL = exports.ENDPOINT_WORKSPACE_INVITATIONS = exports.ENDPOINT_REST_WORKSPACES = exports.ENDPOINT_REST_FOLDERS = exports.ENDPOINT_REGISTER = exports.ENDPOINT_REVOKE = exports.ENDPOINT_GET_TOKEN = exports.ENDPOINT_AUTHORIZATION = exports.ENDPOINT_SYNC = exports.ENDPOINT_SYNC_QUICK_ADD = exports.ENDPOINT_REST_MOVED_IDS = void 0;
 exports.getSyncBaseUri = getSyncBaseUri;
 exports.getAuthBaseUri = getAuthBaseUri;
 exports.getWorkspaceInvitationAcceptEndpoint = getWorkspaceInvitationAcceptEndpoint;
@@ -84,6 +84,7 @@ exports.ENDPOINT_SYNC = 'sync';
 exports.ENDPOINT_AUTHORIZATION = 'authorize';
 exports.ENDPOINT_GET_TOKEN = 'access_token';
 exports.ENDPOINT_REVOKE = 'revoke';
+exports.ENDPOINT_REGISTER = 'register';
 exports.ENDPOINT_REST_FOLDERS = 'folders';
 // Workspace endpoints
 exports.ENDPOINT_REST_WORKSPACES = 'workspaces';

package/dist/cjs/test-utils/msw-setup.js

@@ -7,11 +7,11 @@ exports.getAllRequests = getAllRequests;
 exports.clearCapturedRequests = clearCapturedRequests;
 exports.mockApiResponse = mockApiResponse;
 exports.mockApiError = mockApiError;
-const vitest_1 = require("vitest");
-const node_1 = require("msw/node");
 const msw_1 = require("msw");
 Object.defineProperty(exports, "http", { enumerable: true, get: function () { return msw_1.http; } });
 Object.defineProperty(exports, "HttpResponse", { enumerable: true, get: function () { return msw_1.HttpResponse; } });
+const node_1 = require("msw/node");
+const vitest_1 = require("vitest");
 // Request capture storage
 const capturedRequests = [];
 // Helper function to capture requests

package/dist/cjs/todoist-api.js

@@ -12,20 +12,21 @@ var __rest = (this && this.__rest) || function (s, e) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.TodoistApi = void 0;
+const zod_1 = require("zod");
+const endpoints_1 = require("./consts/endpoints");
+const http_client_1 = require("./transport/http-client");
 const projects_1 = require("./types/projects");
 const reminders_1 = require("./types/reminders");
-const http_client_1 = require("./transport/http-client");
-const endpoints_1 = require("./consts/endpoints");
-const validators_1 = require("./utils/validators");
-const url_helpers_1 = require("./utils/url-helpers");
-const multipart_upload_1 = require("./utils/multipart-upload");
-const case_conversion_1 = require("./utils/case-conversion");
+const goals_1 = require("./types/sync/resources/goals");
 const activity_helpers_1 = require("./utils/activity-helpers");
+const case_conversion_1 = require("./utils/case-conversion");
+const multipart_upload_1 = require("./utils/multipart-upload");
 const uncompletable_helpers_1 = require("./utils/uncompletable-helpers");
-const zod_1 = require("zod");
+const url_helpers_1 = require("./utils/url-helpers");
+const validators_1 = require("./utils/validators");
 const uuid_1 = require("uuid");
-const sync_1 = require("./types/sync");
 const types_1 = require("./types");
+const sync_1 = require("./types/sync");
 const MAX_COMMAND_COUNT = 100;
 /**
  * Joins path segments using `/` separator.
@@ -135,7 +136,11 @@ class TodoistApi {
                 throw new types_1.TodoistRequestError(value.error, value.httpCode, value.errorExtra);
             });
         }
-        return response.data;
+        const data = response.data;
+        if (data.goals) {
+            data.goals = data.goals.map((goal) => goals_1.GoalSchema.parse(goal));
+        }
+        return data;
     }
     /**
      * Executes a raw Sync API request.

package/dist/cjs/types/reminders/requests.js

@@ -2,8 +2,8 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.UpdateLocationReminderArgsSchema = exports.UpdateReminderArgsSchema = exports.UpdateAbsoluteReminderArgsSchema = exports.UpdateRelativeReminderArgsSchema = exports.AddLocationReminderArgsSchema = exports.AddReminderArgsSchema = exports.AddAbsoluteReminderArgsSchema = exports.AddRelativeReminderArgsSchema = exports.ReminderDueDateSchema = exports.ReminderIdSchema = exports.ReminderDeliveryServiceSchema = exports.REMINDER_DELIVERY_SERVICES = void 0;
 const zod_1 = require("zod");
-const types_1 = require("../tasks/types");
 const reminders_1 = require("../sync/resources/reminders");
+const types_1 = require("../tasks/types");
 /** Available reminder delivery services. */
 exports.REMINDER_DELIVERY_SERVICES = ['email', 'push'];
 exports.ReminderDeliveryServiceSchema = zod_1.z.enum(exports.REMINDER_DELIVERY_SERVICES);

package/dist/cjs/types/sync/commands/goals.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/types/sync/commands/index.js

@@ -27,6 +27,7 @@ __exportStar(require("./workspaces"), exports);
 __exportStar(require("./folders"), exports);
 __exportStar(require("./workspace-filters"), exports);
 __exportStar(require("./workspace-goals"), exports);
+__exportStar(require("./goals"), exports);
 __exportStar(require("./notifications"), exports);
 __exportStar(require("./sharing"), exports);
 __exportStar(require("./view-options"), exports);

package/dist/cjs/types/sync/resource-types.js

@@ -32,6 +32,7 @@ exports.SYNC_RESOURCE_TYPES = [
     'role_actions',
     'folders',
     'workspace_goals',
+    'goals',
     'day_orders',
     'calendars',
     'calendar_accounts',

package/dist/cjs/types/sync/resources/goals.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GoalSchema = exports.GoalProgressSchema = exports.GOAL_OWNER_TYPES = void 0;
+const zod_1 = require("zod");
+/** Available goal owner types. */
+exports.GOAL_OWNER_TYPES = ['USER', 'WORKSPACE'];
+exports.GoalProgressSchema = zod_1.z
+    .object({
+    totalItemCount: zod_1.z.number().int(),
+    completedItemCount: zod_1.z.number().int(),
+    percentage: zod_1.z.number(),
+})
+    .passthrough();
+exports.GoalSchema = zod_1.z
+    .object({
+    id: zod_1.z.string(),
+    ownerType: zod_1.z.enum(exports.GOAL_OWNER_TYPES),
+    ownerId: zod_1.z.string(),
+    name: zod_1.z.string(),
+    description: zod_1.z.string().nullable(),
+    deadline: zod_1.z.string().nullable(),
+    parentGoalId: zod_1.z.string().nullable(),
+    childOrder: zod_1.z.number().int(),
+    isCompleted: zod_1.z.boolean(),
+    completedAt: zod_1.z.coerce.date().nullable(),
+    responsibleUid: zod_1.z.string().nullable(),
+    isDeleted: zod_1.z.boolean(),
+    progress: exports.GoalProgressSchema.optional(),
+    creatorUid: zod_1.z.string(),
+    createdAt: zod_1.z.coerce.date(),
+    updatedAt: zod_1.z.coerce.date(),
+})
+    .passthrough();

package/dist/cjs/types/sync/resources/index.js

@@ -21,6 +21,7 @@ __exportStar(require("./tooltips"), exports);
 __exportStar(require("./notes"), exports);
 __exportStar(require("./workspace-filters"), exports);
 __exportStar(require("./workspace-goals"), exports);
+__exportStar(require("./goals"), exports);
 __exportStar(require("./calendars"), exports);
 __exportStar(require("./reminders"), exports);
 __exportStar(require("./completed-info"), exports);

package/dist/cjs/types/tasks/types.js

@@ -2,8 +2,8 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.TaskSchema = exports.DeadlineSchema = exports.DurationSchema = exports.DURATION_UNITS = exports.DueDateSchema = void 0;
 const zod_1 = require("zod");
-const url_helpers_1 = require("../../utils/url-helpers");
 const uncompletable_helpers_1 = require("../../utils/uncompletable-helpers");
+const url_helpers_1 = require("../../utils/url-helpers");
 exports.DueDateSchema = zod_1.z
     .object({
     isRecurring: zod_1.z.boolean(),

package/dist/cjs/utils/validators.js

@@ -7,18 +7,18 @@ exports.isPersonalProject = isPersonalProject;
 exports.validateProject = validateProject;
 exports.validateProjectArray = validateProjectArray;
 exports.validateWorkspaceUserArray = validateWorkspaceUserArray;
-const types_1 = require("../types/tasks/types");
-const types_2 = require("../types/projects/types");
-const types_3 = require("../types/sections/types");
-const types_4 = require("../types/labels/types");
-const types_5 = require("../types/comments/types");
-const types_6 = require("../types/users/types");
+const types_1 = require("../types/activity/types");
+const types_2 = require("../types/backups/types");
+const types_3 = require("../types/comments/types");
+const types_4 = require("../types/id-mappings/types");
+const types_5 = require("../types/insights/types");
+const types_6 = require("../types/labels/types");
 const types_7 = require("../types/productivity/types");
-const types_8 = require("../types/activity/types");
-const types_9 = require("../types/workspaces/types");
-const types_10 = require("../types/insights/types");
-const types_11 = require("../types/backups/types");
-const types_12 = require("../types/id-mappings/types");
+const types_8 = require("../types/projects/types");
+const types_9 = require("../types/sections/types");
+const types_10 = require("../types/tasks/types");
+const types_11 = require("../types/users/types");
+const types_12 = require("../types/workspaces/types");
 const resources_1 = require("../types/sync/resources");
 function createValidator(schema) {
     return (input) => schema.parse(input);
@@ -27,7 +27,7 @@ function createArrayValidator(validateItem) {
     return (input) => input.map(validateItem);
 }
 // Entity validators
-exports.validateTask = createValidator(types_1.TaskSchema);
+exports.validateTask = createValidator(types_10.TaskSchema);
 exports.validateTaskArray = createArrayValidator(exports.validateTask);
 /**
  * Type guard to check if a project is a workspace project.
@@ -52,53 +52,53 @@ function isPersonalProject(project) {
  */
 function validateProject(input) {
     if ('workspaceId' in input) {
-        return types_2.WorkspaceProjectSchema.parse(input);
+        return types_8.WorkspaceProjectSchema.parse(input);
     }
-    return types_2.PersonalProjectSchema.parse(input);
+    return types_8.PersonalProjectSchema.parse(input);
 }
 function validateProjectArray(input) {
     return input.map(validateProject);
 }
-exports.validateSection = createValidator(types_3.SectionSchema);
+exports.validateSection = createValidator(types_9.SectionSchema);
 exports.validateSectionArray = createArrayValidator(exports.validateSection);
-exports.validateLabel = createValidator(types_4.LabelSchema);
+exports.validateLabel = createValidator(types_6.LabelSchema);
 exports.validateLabelArray = createArrayValidator(exports.validateLabel);
-exports.validateComment = createValidator(types_5.CommentSchema);
+exports.validateComment = createValidator(types_3.CommentSchema);
 exports.validateCommentArray = createArrayValidator(exports.validateComment);
-exports.validateUser = createValidator(types_6.UserSchema);
+exports.validateUser = createValidator(types_11.UserSchema);
 exports.validateUserArray = createArrayValidator(exports.validateUser);
 exports.validateProductivityStats = createValidator(types_7.ProductivityStatsSchema);
-exports.validateCurrentUser = createValidator(types_6.CurrentUserSchema);
-exports.validateActivityEvent = createValidator(types_8.ActivityEventSchema);
+exports.validateCurrentUser = createValidator(types_11.CurrentUserSchema);
+exports.validateActivityEvent = createValidator(types_1.ActivityEventSchema);
 exports.validateActivityEventArray = createArrayValidator(exports.validateActivityEvent);
-exports.validateAttachment = createValidator(types_5.AttachmentSchema);
-exports.validateWorkspaceUser = createValidator(types_9.WorkspaceUserSchema);
+exports.validateAttachment = createValidator(types_3.AttachmentSchema);
+exports.validateWorkspaceUser = createValidator(types_12.WorkspaceUserSchema);
 function validateWorkspaceUserArray(input) {
     if (!Array.isArray(input)) {
         throw new Error(`Expected array for workspace users, got ${typeof input}`);
     }
     return input.map(exports.validateWorkspaceUser);
 }
-exports.validateWorkspaceInvitation = createValidator(types_9.WorkspaceInvitationSchema);
+exports.validateWorkspaceInvitation = createValidator(types_12.WorkspaceInvitationSchema);
 exports.validateWorkspaceInvitationArray = createArrayValidator(exports.validateWorkspaceInvitation);
-exports.validateWorkspacePlanDetails = createValidator(types_9.WorkspacePlanDetailsSchema);
-exports.validateJoinWorkspaceResult = createValidator(types_9.JoinWorkspaceResultSchema);
-exports.validateWorkspace = createValidator(types_9.WorkspaceSchema);
+exports.validateWorkspacePlanDetails = createValidator(types_12.WorkspacePlanDetailsSchema);
+exports.validateJoinWorkspaceResult = createValidator(types_12.JoinWorkspaceResultSchema);
+exports.validateWorkspace = createValidator(types_12.WorkspaceSchema);
 exports.validateWorkspaceArray = createArrayValidator(exports.validateWorkspace);
-exports.validateMemberActivityInfo = createValidator(types_9.MemberActivityInfoSchema);
+exports.validateMemberActivityInfo = createValidator(types_12.MemberActivityInfoSchema);
 exports.validateMemberActivityInfoArray = createArrayValidator(exports.validateMemberActivityInfo);
-exports.validateWorkspaceUserTask = createValidator(types_9.WorkspaceUserTaskSchema);
+exports.validateWorkspaceUserTask = createValidator(types_12.WorkspaceUserTaskSchema);
 exports.validateWorkspaceUserTaskArray = createArrayValidator(exports.validateWorkspaceUserTask);
-exports.validateProjectActivityStats = createValidator(types_10.ProjectActivityStatsSchema);
-exports.validateProjectHealth = createValidator(types_10.ProjectHealthSchema);
-exports.validateProjectHealthContext = createValidator(types_10.ProjectHealthContextSchema);
-exports.validateProjectProgress = createValidator(types_10.ProjectProgressSchema);
-exports.validateWorkspaceInsights = createValidator(types_10.WorkspaceInsightsSchema);
-exports.validateBackup = createValidator(types_11.BackupSchema);
+exports.validateProjectActivityStats = createValidator(types_5.ProjectActivityStatsSchema);
+exports.validateProjectHealth = createValidator(types_5.ProjectHealthSchema);
+exports.validateProjectHealthContext = createValidator(types_5.ProjectHealthContextSchema);
+exports.validateProjectProgress = createValidator(types_5.ProjectProgressSchema);
+exports.validateWorkspaceInsights = createValidator(types_5.WorkspaceInsightsSchema);
+exports.validateBackup = createValidator(types_2.BackupSchema);
 exports.validateBackupArray = createArrayValidator(exports.validateBackup);
-exports.validateIdMapping = createValidator(types_12.IdMappingSchema);
+exports.validateIdMapping = createValidator(types_4.IdMappingSchema);
 exports.validateIdMappingArray = createArrayValidator(exports.validateIdMapping);
-exports.validateMovedId = createValidator(types_12.MovedIdSchema);
+exports.validateMovedId = createValidator(types_4.MovedIdSchema);
 exports.validateMovedIdArray = createArrayValidator(exports.validateMovedId);
 // Sync resource validators
 exports.validateFilter = createValidator(resources_1.FilterSchema);

package/dist/esm/authentication.js

@@ -1,7 +1,18 @@
-import { request, isSuccess } from './transport/http-client.js';
+var __rest = (this && this.__rest) || function (s, e) {
+    var t = {};
+    for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p) && e.indexOf(p) < 0)
+        t[p] = s[p];
+    if (s != null && typeof Object.getOwnPropertySymbols === "function")
+        for (var i = 0, p = Object.getOwnPropertySymbols(s); i < p.length; i++) {
+            if (e.indexOf(p[i]) < 0 && Object.prototype.propertyIsEnumerable.call(s, p[i]))
+                t[p[i]] = s[p[i]];
+        }
+    return t;
+};
 import { v4 as uuid } from 'uuid';
+import { getAuthBaseUri, getSyncBaseUri, ENDPOINT_AUTHORIZATION, ENDPOINT_GET_TOKEN, ENDPOINT_REVOKE, ENDPOINT_REGISTER, ENDPOINT_REST_ACCESS_TOKENS_MIGRATE, } from './consts/endpoints.js';
+import { request, isSuccess } from './transport/http-client.js';
 import { TodoistRequestError } from './types/index.js';
-import { getAuthBaseUri, getSyncBaseUri, ENDPOINT_AUTHORIZATION, ENDPOINT_GET_TOKEN, ENDPOINT_REVOKE, ENDPOINT_REST_ACCESS_TOKENS_MIGRATE, } from './consts/endpoints.js';
 /** Available OAuth2 permission scopes. */
 export const PERMISSIONS = [
     'task:add',
@@ -11,6 +22,12 @@ export const PERMISSIONS = [
     'project:delete',
     'backups:read',
 ];
+/** Supported token endpoint authentication methods for dynamic client registration. */
+export const TOKEN_ENDPOINT_AUTH_METHODS = [
+    'client_secret_post',
+    'client_secret_basic',
+    'none',
+];
 /**
  * Creates a Basic Authentication header value from client credentials.
  * @param clientId - The OAuth client ID
@@ -40,13 +57,17 @@ export function getAuthStateParameter() {
 /**
  * Generates the authorization URL for the OAuth2 flow.
  *
+ * The `clientId` can be either a traditional client ID string (e.g. from
+ * {@link registerClient}) or an HTTPS URL pointing to a client metadata document,
+ * as defined in {@link https://drafts.ietf.org/doc/draft-ietf-oauth-client-id-metadata-document/ RFC draft-ietf-oauth-client-id-metadata-document}.
+ *
  * @example
  * ```typescript
- * const url = getAuthorizationUrl(
- *   'your-client-id',
- *   ['data:read', 'task:add'],
- *   state
- * )
+ * const url = getAuthorizationUrl({
+ *   clientId: 'your-client-id',
+ *   permissions: ['data:read', 'task:add'],
+ *   state,
+ * })
  * // Redirect user to url
  * ```
  *
@@ -58,7 +79,7 @@ export function getAuthorizationUrl({ clientId, permissions, state, baseUrl, })
         throw new Error('At least one scope value should be passed for permissions.');
     }
     const scope = permissions.join(',');
-    return `${getAuthBaseUri(baseUrl)}${ENDPOINT_AUTHORIZATION}?client_id=${clientId}&scope=${scope}&state=${state}`;
+    return `${getAuthBaseUri(baseUrl)}${ENDPOINT_AUTHORIZATION}?client_id=${encodeURIComponent(clientId)}&scope=${scope}&state=${state}`;
 }
 /**
  * Exchanges an authorization code for an access token.
@@ -194,3 +215,48 @@ export async function migratePersonalToken(args, options) {
         throw new TodoistRequestError('Personal token migration failed.', err.httpStatusCode, err.responseData);
     }
 }
+/**
+ * Registers a new OAuth client via Dynamic Client Registration (RFC 7591).
+ *
+ * @example
+ * ```typescript
+ * const client = await registerClient({
+ *   redirectUris: ['https://example.com/callback'],
+ *   clientName: 'My App',
+ *   scope: ['data:read_write', 'task:add'],
+ * })
+ * // Use client.clientId and client.clientSecret for OAuth flows
+ * ```
+ *
+ * @returns The registered client details
+ * @throws {@link TodoistRequestError} If the registration fails
+ * @see {@link https://datatracker.ietf.org/doc/html/rfc7591 RFC 7591}
+ */
+export async function registerClient(args, options) {
+    var _a, _b;
+    const baseUrl = options === null || options === void 0 ? void 0 : options.baseUrl;
+    const customFetch = options === null || options === void 0 ? void 0 : options.customFetch;
+    try {
+        const response = await request({
+            httpMethod: 'POST',
+            baseUri: getAuthBaseUri(baseUrl),
+            relativePath: ENDPOINT_REGISTER,
+            apiToken: undefined,
+            payload: Object.assign(Object.assign({}, args), { scope: (_a = args.scope) === null || _a === void 0 ? void 0 : _a.join(' ') }),
+            customFetch,
+        });
+        if (!isSuccess(response) || !((_b = response.data) === null || _b === void 0 ? void 0 : _b.clientId)) {
+            throw new TodoistRequestError('Dynamic client registration failed.', response.status, response.data);
+        }
+        const _c = response.data, { clientIdIssuedAt, clientSecretExpiresAt, scope } = _c, rest = __rest(_c, ["clientIdIssuedAt", "clientSecretExpiresAt", "scope"]);
+        return Object.assign(Object.assign({}, rest), { scope: scope ? scope.split(' ') : undefined, clientIdIssuedAt: clientIdIssuedAt !== undefined ? new Date(clientIdIssuedAt * 1000) : undefined, clientSecretExpiresAt: clientSecretExpiresAt === undefined
+                ? undefined
+                : clientSecretExpiresAt === 0
+                    ? null
+                    : new Date(clientSecretExpiresAt * 1000) });
+    }
+    catch (error) {
+        const err = error;
+        throw new TodoistRequestError('Dynamic client registration failed.', err.httpStatusCode, err.responseData);
+    }
+}

package/dist/esm/consts/endpoints.js

@@ -65,6 +65,7 @@ export const ENDPOINT_SYNC = 'sync';
 export const ENDPOINT_AUTHORIZATION = 'authorize';
 export const ENDPOINT_GET_TOKEN = 'access_token';
 export const ENDPOINT_REVOKE = 'revoke';
+export const ENDPOINT_REGISTER = 'register';
 export const ENDPOINT_REST_FOLDERS = 'folders';
 // Workspace endpoints
 export const ENDPOINT_REST_WORKSPACES = 'workspaces';

package/dist/esm/test-utils/msw-setup.js

@@ -1,6 +1,6 @@
-import { beforeAll, afterEach, afterAll } from 'vitest';
-import { setupServer } from 'msw/node';
 import { http, HttpResponse } from 'msw';
+import { setupServer } from 'msw/node';
+import { beforeAll, afterEach, afterAll } from 'vitest';
 // Request capture storage
 const capturedRequests = [];
 // Helper function to capture requests