backlog-mcp-server 0.20.1 → 0.20.2

package/README.md

@@ -307,6 +307,7 @@ Tools for managing issues, their comments, and related items like priorities, ca
 - `remove_related_issue`: Removes the relation between an issue and a related issue.
 - `get_priorities`: Returns list of priorities.
 - `get_categories`: Returns list of categories for a project.
+- `add_category`: Creates a new category for a project.
 - `get_custom_fields`: Returns list of custom fields for a project.
 - `get_issue_types`: Returns list of issue types for a project.
 - `get_resolutions`: Returns list of issue resolutions.

package/build/auth/oauthRoutes.js

@@ -6,6 +6,8 @@ import { buildBacklogAuthorizationUrl, exchangeBacklogCode, refreshBacklogToken,
 import { logger } from '../utils/logger.js';
 const AUTH_CODE_TTL_MS = 10 * 60 * 1000;
 const REFRESH_TOKEN_TTL_MS = 30 * 24 * 60 * 60 * 1000; // 30 days
+/** Seconds left until `expiresAt`, floored at zero so it is never negative. */
+const remainingSeconds = (expiresAt) => Math.max(0, Math.floor((expiresAt - Date.now()) / 1000));
 const LOCALHOST_HOSTS = ['localhost', '127.0.0.1', '[::1]'];
 const SUPPORTED_AUTH_METHODS = ['client_secret_post', 'none'];
 function verifyPkce(codeVerifier, codeChallenge) {
@@ -278,6 +280,9 @@ export function createOAuthRoutes(config, store, mcpPath) {
         store.storeAuthCode(mcpCode, {
             mcpClientId: pending.mcpClientId,
             backlogTokens,
+            // Resolved here, against the response just received, rather than at
+            // `/token` where `expires_in` would be counted from the wrong instant.
+            backlogAccessTokenExpiresAt: Date.now() + backlogTokens.expires_in * 1000,
             codeChallenge: pending.codeChallenge,
             redirectUri: pending.redirectUri,
             resource: pending.resource,
@@ -336,7 +341,7 @@ export function createOAuthRoutes(config, store, mcpPath) {
             store.storeMcpToken(mcpAccessToken, {
                 backlogAccessToken: entry.backlogTokens.access_token,
                 clientId,
-                expiresAt: Date.now() + entry.backlogTokens.expires_in * 1000,
+                expiresAt: entry.backlogAccessTokenExpiresAt,
             });
             store.storeMcpRefreshToken(mcpRefreshToken, {
                 backlogRefreshToken: entry.backlogTokens.refresh_token,
@@ -346,7 +351,10 @@ export function createOAuthRoutes(config, store, mcpPath) {
             return c.json({
                 access_token: mcpAccessToken,
                 token_type: 'bearer',
-                expires_in: entry.backlogTokens.expires_in,
+                // What is left, not what Backlog reported at `/callback`. A client
+                // uses this to decide when to refresh, so handing it the original
+                // duration would have it wait past the real expiry.
+                expires_in: remainingSeconds(entry.backlogAccessTokenExpiresAt),
                 refresh_token: mcpRefreshToken,
             });
         }

package/build/auth/tokenStore.d.ts

@@ -28,6 +28,17 @@ type PendingAuthorization = {
 type AuthCodeEntry = {
     mcpClientId: string;
     backlogTokens: BacklogTokenData;
+    /**
+     * When the Backlog access token in `backlogTokens` actually expires, in
+     * epoch milliseconds, resolved at `/callback`.
+     *
+     * `backlogTokens.expires_in` is a duration counted from the moment Backlog
+     * answered, and this entry then sits here until the client redeems the code
+     * — up to `AUTH_CODE_TTL_MS`. Re-basing that duration at `/token` would put
+     * the expiry later than the real one by however long the redemption took,
+     * leaving a window where this server treats a spent Backlog token as live.
+     */
+    backlogAccessTokenExpiresAt: number;
     codeChallenge: string;
     redirectUri: string;
     resource?: string;

package/build/tools/addCategory.d.ts

@@ -0,0 +1,12 @@
+import { z } from 'zod';
+import type { Entity } from 'backlog-js';
+import { Backlog } from 'backlog-js';
+import { ToolDefinition } from '../types/tool.js';
+import { DescriptionHelper } from '../createDescriptionHelper.js';
+declare const addCategorySchema: (t: DescriptionHelper['t']) => {
+    projectId: z.ZodOptional<z.ZodNumber>;
+    projectKey: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+};
+export declare const addCategoryTool: (backlog: Backlog, { t }: DescriptionHelper) => ToolDefinition<ReturnType<typeof addCategorySchema>, Entity.Project.Category>;
+export {};

package/build/tools/addCategory.js

@@ -0,0 +1,39 @@
+import { z } from 'zod';
+import { buildToolSchema } from '../types/tool.js';
+import { outputFields } from '../types/outputFields.js';
+import { resolveIdOrKey } from '../utils/resolveIdOrKey.js';
+const addCategorySchema = buildToolSchema((t) => ({
+    projectId: z
+        .number()
+        .optional()
+        .describe(t('TOOL_ADD_CATEGORY_PROJECT_ID', 'The numeric ID of the project (e.g., 12345)')),
+    projectKey: z
+        .string()
+        .optional()
+        .describe(t('TOOL_ADD_CATEGORY_PROJECT_KEY', "The key of the project (e.g., 'PROJECT')")),
+    name: z
+        .string()
+        .describe(t('TOOL_ADD_CATEGORY_NAME', 'The name of the category')),
+}));
+export const addCategoryTool = (backlog, { t }) => {
+    return {
+        name: 'add_category',
+        description: t('TOOL_ADD_CATEGORY_DESCRIPTION', 'Creates a new category for a project'),
+        schema: z.object(addCategorySchema(t)),
+        importantFields: ['id', 'projectId', 'name'],
+        returnsList: false,
+        outputFields: outputFields()([
+            'id',
+            'projectId',
+            'name',
+            'displayOrder',
+        ]),
+        handler: async ({ projectId, projectKey, ...params }) => {
+            const result = resolveIdOrKey('project', { id: projectId, key: projectKey }, t);
+            if (!result.ok) {
+                throw result.error;
+            }
+            return backlog.postCategories(result.value, params);
+        },
+    };
+};

package/build/tools/tools.js

@@ -7,6 +7,7 @@ import { addWikiTool } from './addWiki.js';
 import { updateWikiTool } from './updateWiki.js';
 import { countIssuesTool } from './countIssues.js';
 import { deleteIssueTool } from './deleteIssue.js';
+import { addCategoryTool } from './addCategory.js';
 import { getCategoriesTool } from './getCategories.js';
 import { getCustomFieldsTool } from './getCustomFields.js';
 import { getGitRepositoriesTool } from './getGitRepositories.js';
@@ -108,6 +109,7 @@ export const allTools = (backlog, helper) => {
                     removeRelatedIssueTool(backlog, helper),
                     getPrioritiesTool(backlog, helper),
                     getCategoriesTool(backlog, helper),
+                    addCategoryTool(backlog, helper),
                     getCustomFieldsTool(backlog, helper),
                     getIssueTypesTool(backlog, helper),
                     getResolutionsTool(backlog, helper),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "backlog-mcp-server",
-  "version": "0.20.1",
+  "version": "0.20.2",
   "type": "module",
   "bin": {
     "backlog-mcp-server": "./build/index.js"
@@ -42,20 +42,20 @@
     "js-yaml": "^5.4.1",
     "pino": "^10.3.1",
     "yargs": "^18.1.0",
-    "zod": "^4.4.3"
+    "zod": "^4.5.4"
   },
   "devDependencies": {
     "@types/js-yaml": "^4.0.9",
-    "@types/node": "^26.4.0",
+    "@types/node": "^26.4.1",
     "@types/yargs": "^17.0.35",
-    "@vitest/coverage-v8": "^4.1.11",
-    "oxfmt": "^0.65.0",
-    "oxlint": "^1.80.0",
+    "@vitest/coverage-v8": "^5.0.0",
+    "oxfmt": "^0.66.0",
+    "oxlint": "^1.81.0",
     "oxlint-tsgolint": "^7.0.2001",
     "pino-pretty": "^13.1.3",
-    "tsx": "^4.23.12",
+    "tsx": "^4.23.13",
     "typescript": "^7.0.2",
-    "vitest": "^4.1.11"
+    "vitest": "^5.0.0"
   },
   "scripts": {
     "preinstall": "npx only-allow pnpm",