@todoist/sdk 18.0.0 → 19.0.0

package/dist/esm/test-utils/test-defaults.js

@@ -297,6 +297,7 @@ export const DEFAULT_APP = {
     iconMd: 'https://example.com/icon-md.png',
     iconLg: 'https://example.com/icon-lg.png',
     appTokenScopes: ['data:read', 'task:add'],
+    clientType: 'confidential',
 };
 export const DEFAULT_APP_WITH_USER_COUNT = Object.assign(Object.assign({}, DEFAULT_APP), { userCount: 12 });
 export const DEFAULT_APP_SECRETS = {

package/dist/esm/types/apps/types.js

@@ -130,6 +130,11 @@ export const AppTokenScopesSchema = z
         return [];
     return value.split(',').filter(Boolean);
 });
+/**
+ * Available OAuth client types for a developer application (RFC 6749 §2.1).
+ */
+export const APP_CLIENT_TYPES = ['confidential', 'public'];
+export const AppClientTypeSchema = z.enum(APP_CLIENT_TYPES);
 /**
  * Schema for a developer application.
  * @see https://developer.todoist.com/api/v1/#tag/Apps
@@ -148,6 +153,7 @@ export const AppSchema = z.object({
     iconMd: z.string().nullable(),
     iconLg: z.string().nullable(),
     appTokenScopes: AppTokenScopesSchema,
+    clientType: AppClientTypeSchema,
 });
 /**
  * Schema for a developer application that includes the user count.

package/dist/types/types/apps/requests.d.ts

@@ -1,6 +1,6 @@
 import type { Permission } from '../../authentication.js';
 import type { AppIconSize } from '../../consts/endpoints.js';
-import type { InstallationType, WebhookEvent, WebhookVersion } from './types.js';
+import type { AppClientType, InstallationType, WebhookEvent, WebhookVersion } from './types.js';
 /**
  * Arguments for creating a new developer application.
  */
@@ -35,6 +35,16 @@ export type UpdateAppArgs = {
      * to `updateApp()` without casts.
      */
     appTokenScopes?: readonly (Permission | (string & {}))[] | null;
+    /**
+     * Updated OAuth client type. Set to `'public'` for apps that cannot keep a
+     * secret (native apps, browser extensions, CLIs), so they exchange
+     * authorization codes with PKCE alone. The client secret is kept, so
+     * switching back to `'confidential'` needs no new one.
+     *
+     * Dynamically registered clients cannot change it: the API rejects the
+     * update with `BAD_REQUEST`.
+     */
+    clientType?: AppClientType;
 };
 /**
  * Arguments for uploading an app icon.

package/dist/types/types/apps/types.d.ts

@@ -146,6 +146,22 @@ export declare const InstallationTypeSchema: z.ZodEnum<{
  * read and write shapes line up and information is not lost.
  */
 export declare const AppTokenScopesSchema: z.ZodPipe<z.ZodNullable<z.ZodString>, z.ZodTransform<string[] | null, string | null>>;
+/**
+ * Available OAuth client types for a developer application (RFC 6749 §2.1).
+ */
+export declare const APP_CLIENT_TYPES: readonly ["confidential", "public"];
+/**
+ * OAuth client type of a developer application: whether it can keep a client secret.
+ *
+ * - `confidential` apps authenticate with their client secret at the token endpoint.
+ * - `public` apps (native apps, browser extensions, CLIs) cannot keep a secret: they
+ *   must use PKCE, and exchange authorization codes with the `code_verifier` alone.
+ */
+export type AppClientType = (typeof APP_CLIENT_TYPES)[number];
+export declare const AppClientTypeSchema: z.ZodEnum<{
+    public: "public";
+    confidential: "confidential";
+}>;
 /**
  * Schema for a developer application.
  * @see https://developer.todoist.com/api/v1/#tag/Apps
@@ -166,6 +182,10 @@ export declare const AppSchema: z.ZodObject<{
     iconMd: z.ZodNullable<z.ZodString>;
     iconLg: z.ZodNullable<z.ZodString>;
     appTokenScopes: z.ZodPipe<z.ZodNullable<z.ZodString>, z.ZodTransform<string[] | null, string | null>>;
+    clientType: z.ZodEnum<{
+        public: "public";
+        confidential: "confidential";
+    }>;
 }, z.core.$strip>;
 /**
  * A developer application.
@@ -191,6 +211,10 @@ export declare const AppWithUserCountSchema: z.ZodObject<{
     iconMd: z.ZodNullable<z.ZodString>;
     iconLg: z.ZodNullable<z.ZodString>;
     appTokenScopes: z.ZodPipe<z.ZodNullable<z.ZodString>, z.ZodTransform<string[] | null, string | null>>;
+    clientType: z.ZodEnum<{
+        public: "public";
+        confidential: "confidential";
+    }>;
     userCount: z.ZodNumber;
 }, z.core.$strip>;
 /**
@@ -344,6 +368,10 @@ export declare const InstalledIntegrationSchema: z.ZodObject<{
     iconMd: z.ZodNullable<z.ZodString>;
     iconLg: z.ZodNullable<z.ZodString>;
     appTokenScopes: z.ZodPipe<z.ZodNullable<z.ZodString>, z.ZodTransform<string[] | null, string | null>>;
+    clientType: z.ZodEnum<{
+        public: "public";
+        confidential: "confidential";
+    }>;
 }, z.core.$strip>;
 /**
  * Embedded app info on an installation record.
@@ -376,6 +404,10 @@ export declare const AppInstallationSchema: z.ZodObject<{
         iconMd: z.ZodNullable<z.ZodString>;
         iconLg: z.ZodNullable<z.ZodString>;
         appTokenScopes: z.ZodPipe<z.ZodNullable<z.ZodString>, z.ZodTransform<string[] | null, string | null>>;
+        clientType: z.ZodEnum<{
+            public: "public";
+            confidential: "confidential";
+        }>;
     }, z.core.$strip>>;
 }, z.core.$strip>;
 /**

package/dist/types/utils/validators.d.ts

@@ -1701,6 +1701,7 @@ export declare const validateApp: (input: unknown) => {
     iconMd: string | null;
     iconLg: string | null;
     appTokenScopes: string[] | null;
+    clientType: "public" | "confidential";
 }, validateAppArray: (input: unknown) => {
     id: string;
     clientId: string;
@@ -1715,6 +1716,7 @@ export declare const validateApp: (input: unknown) => {
     iconMd: string | null;
     iconLg: string | null;
     appTokenScopes: string[] | null;
+    clientType: "public" | "confidential";
 }[];
 export declare const validateAppWithUserCount: (input: unknown) => {
     id: string;
@@ -1730,6 +1732,7 @@ export declare const validateAppWithUserCount: (input: unknown) => {
     iconMd: string | null;
     iconLg: string | null;
     appTokenScopes: string[] | null;
+    clientType: "public" | "confidential";
     userCount: number;
 };
 export declare const validateAppSecrets: (input: unknown) => {
@@ -1784,6 +1787,7 @@ export declare const validateAppInstallation: (input: unknown) => {
         iconMd: string | null;
         iconLg: string | null;
         appTokenScopes: string[] | null;
+        clientType: "public" | "confidential";
     } | null;
 }, validateAppInstallationArray: (input: unknown) => {
     id: string;
@@ -1805,6 +1809,7 @@ export declare const validateAppInstallation: (input: unknown) => {
         iconMd: string | null;
         iconLg: string | null;
         appTokenScopes: string[] | null;
+        clientType: "public" | "confidential";
     } | null;
 }[];
 export declare const validateUserAuthorization: (input: unknown) => {

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@todoist/sdk",
-    "version": "18.0.0",
+    "version": "19.0.0",
     "description": "The official TypeScript SDK for the Todoist REST API.",
     "author": "Doist developers",
     "repository": "https://github.com/todoist/todoist-sdk-typescript",