@todoist/sdk 0.0.0-stage → 18.0.0

package/dist/types/utils/view-options.d.ts

@@ -0,0 +1,11 @@
+import type { ViewOptions, ViewOptionsTombstone, ViewType } from '../types/sync/index.js';
+export type FindViewOptionsArgs = {
+    /** View types that identify the logical view. */
+    viewTypes: readonly ViewType[];
+    /** Object ID for object-backed views. Omit for singleton views. */
+    objectId?: string | null;
+};
+/** Returns whether saved view options are active rather than a deletion tombstone. */
+export declare function isActiveViewOption(options: ViewOptions | ViewOptionsTombstone): options is ViewOptions;
+/** Finds the active saved options for one logical view. */
+export declare function findViewOptions(options: readonly (ViewOptions | ViewOptionsTombstone)[], args: FindViewOptionsArgs): ViewOptions | undefined;

package/dist/types/utils/webhook-parser.d.ts

@@ -0,0 +1,48 @@
+import { type WebhookPayload } from '../types/webhooks/types.js';
+/**
+ * Parses an incoming webhook request body into a typed payload.
+ *
+ * The backend sends snake_case keys (e.g. `event_name`, `user_id`, `added_at`);
+ * this converts them to camelCase and validates against
+ * {@link WebhookPayloadSchema}. Event-specific `eventData` is returned as
+ * `unknown` for events that are not yet narrowed per-resource.
+ *
+ * Pass the parsed JSON body (or any unknown value) — validation throws on
+ * unexpected shape.
+ */
+export declare function parseWebhookPayload(raw: unknown): WebhookPayload;
+/**
+ * Arguments for {@link verifyWebhookSignature}.
+ */
+export type VerifyWebhookSignatureArgs = {
+    /**
+     * The raw (unparsed) request body exactly as received. Parsing and
+     * re-serialising JSON before hashing will change whitespace and byte order
+     * and cause verification to fail.
+     */
+    rawBody: string | Uint8Array;
+    /**
+     * The value of the `X-Todoist-Hmac-SHA256` request header — a base64
+     * encoded HMAC-SHA256 digest.
+     */
+    signature: string;
+    /**
+     * The app's OAuth client secret, used as the HMAC key.
+     */
+    clientSecret: string;
+};
+/**
+ * Verifies a webhook request's HMAC signature.
+ *
+ * Todoist signs webhook deliveries with an HMAC-SHA256 of the raw request body
+ * using the app's `client_secret` as the key, base64-encoded in the
+ * `X-Todoist-Hmac-SHA256` header.
+ *
+ * Uses the Web Crypto API (`crypto.subtle`), which is available in Node ≥ 20,
+ * modern browsers, React Native (with polyfills), and edge runtimes. The
+ * comparison is constant-time.
+ *
+ * @returns `true` when the signature is valid, `false` otherwise. Never throws
+ * on malformed input.
+ */
+export declare function verifyWebhookSignature({ rawBody, signature, clientSecret, }: VerifyWebhookSignatureArgs): Promise<boolean>;

package/package.json

@@ -1,6 +1,89 @@
 {
-  "name": "@todoist/sdk",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+    "name": "@todoist/sdk",
+    "version": "18.0.0",
+    "description": "The official TypeScript SDK for the Todoist REST API.",
+    "author": "Doist developers",
+    "repository": "https://github.com/todoist/todoist-sdk-typescript",
+    "homepage": "https://doist.github.io/todoist-sdk-typescript/",
+    "license": "MIT",
+    "type": "module",
+    "types": "dist/types/index.d.ts",
+    "exports": {
+        ".": {
+            "types": "./dist/types/index.d.ts",
+            "default": "./dist/esm/index.js"
+        }
+    },
+    "publishConfig": {
+        "access": "public",
+        "provenance": true
+    },
+    "sideEffects": false,
+    "engines": {
+        "node": ">=24",
+        "npm": ">=11"
+    },
+    "scripts": {
+        "clean": "rimraf dist",
+        "check": "oxlint src .agents/scripts && oxfmt --check",
+        "check:fix": "oxlint src .agents/scripts --fix && oxfmt",
+        "ts-compile-check": "npx tsc -p tsconfig.typecheck.json",
+        "type-check": "npx tsc --noEmit -p tsconfig.esm.json && npx tsc --noEmit -p .agents/scripts",
+        "audit": "npm audit --audit-level=moderate",
+        "test": "vitest run",
+        "test:watch": "vitest",
+        "test:coverage": "vitest run --coverage",
+        "verify": "node .agents/scripts/verify.mjs",
+        "review:worktree": "node .agents/scripts/review-worktree.ts",
+        "api:request": "node ./scripts/todoist-api-request.cjs",
+        "build:esm": "npx tsc -p tsconfig.esm.json",
+        "build:fix-esm": "node scripts/fix-esm-imports.cjs",
+        "build:fix-dts": "node scripts/fix-dts-imports.cjs",
+        "build": "npm-run-all clean build:esm build:fix-esm build:fix-dts",
+        "attw": "attw --pack --ignore-rules cjs-resolves-to-esm",
+        "integrity-checks": "npm-run-all clean check type-check test build attw",
+        "prepublishOnly": "npm run integrity-checks",
+        "prepare": "node -e \"require('fs').existsSync('.git') && require('child_process').execSync('lefthook install --reset-hooks-path', { stdio: 'inherit' })\" && npm run build"
+    },
+    "overrides": {
+        "fflate": "0.8.2"
+    },
+    "dependencies": {
+        "@doist/sdk-kmp": "0.6.0",
+        "camelcase": "6.3.0",
+        "emoji-regex": "10.6.0",
+        "ts-custom-error": "^3.2.0",
+        "undici": "^7.29.0",
+        "uuid": "11.1.1",
+        "zod": "4.6.6"
+    },
+    "devDependencies": {
+        "@arethetypeswrong/cli": "0.18.2",
+        "@semantic-release/changelog": "6.0.3",
+        "@semantic-release/git": "10.0.1",
+        "@types/node": "24.9.2",
+        "conventional-changelog-conventionalcommits": "9.3.1",
+        "dotenv": "17.4.1",
+        "lefthook": "2.2.2",
+        "msw": "2.13.2",
+        "npm-run-all2": "8.0.4",
+        "obsidian": "^1.10.2-1",
+        "oxfmt": "0.73.0",
+        "oxlint": "1.57.0",
+        "rimraf": "6.1.3",
+        "semantic-release": "25.0.3",
+        "ts-node": "10.9.2",
+        "type-fest": "^5.0.0",
+        "typescript": "5.9.3",
+        "vitest": "4.1.12"
+    },
+    "peerDependencies": {
+        "type-fest": "^4.12.0 || ^5.5.0"
+    },
+    "files": [
+        "dist/esm/**/*",
+        "dist/types/**/*",
+        "!dist/**/*.test.js",
+        "!dist/**/*.test.d.ts"
+    ]
+}