✓ Todoist

Keep a paper's task list in Todoist, and see it beside the writing.

Identifier	com.yaz.todoist
Version	0.1.0
Needs yaz	0.3.0 or newer
Asks for	credential, net, fs-project
Source	texyaz/yaz-todoist

Keep a paper's task list in Todoist, and see it beside the writing.

Writing a paper is three jobs and yaz is good at one of them. Zotero manages the sources, Todoist manages what is left to do, and yaz manages the writing — so this plugin is a bridge. It does not add a task list to yaz; it shows one that lives in Todoist and lets you add to it without leaving the document.

What it does

Sign in	A personal API token, kept in your system keychain — Settings → Plugins → Todoist
Link a paper	Choose a Todoist project, or create one — Connections → Todoist in the ribbon
See the list	In the Tasks tab, beside the editor
Add a task	From the tab, or from the selected text with a command
Tick one off	The checkbox in the tab
Read one	Click it: description, when it is due, when it was made, priority and section — in the Details tab
Change one	All of those, from the same place. The title renames on a double-click

Sub-tasks nest under their parent, and priority shows as colour on the checkbox — red, orange, blue, and plain for the rest.

A due date is edited with a picker and a text field over the same value, side by side. Neither is enough alone: a picker cannot say "every Monday", and a text field means knowing what date next Tuesday is. What is typed goes to Todoist as words rather than as a parsed day, so its own date parsing gets the chance — turning "every Monday" into a single date here would quietly drop the recurrence.

Todoist counts priorities backwards

Its API numbers its most urgent priority 4 and its least 1, which is the reverse of what it calls them in its own interface, where the urgent one is p1. The plugin translates into yaz's scale, where 1 is the most urgent. That translation is the reason the scale is fixed in the API contract rather than passed through: a tab colouring whatever number arrived would paint Todoist's trivial tasks red.

Two settings in two places, because they are two different things. The token is per install — one sign-in serves every paper on this machine — so it lives in the plugin's own settings panel. The list a paper uses is per project, so it lives under Connections and is stored in that project's own yaz.toml, where it travels with the paper rather than being re-made on every machine. A thesis and a conference paper are different work with different lists.

Two Todoist APIs, because Todoist has two

Todoist replaced its REST v2 API with a unified v1, and which one an account answers on depends on when it was migrated. Guessing wrong looks exactly like a bad token — a request fails and nothing says why — so the plugin tries the newer one, falls back to the older, and remembers which answered. The two also disagree about shape: v1 wraps a list in {results: [...]} and v2 returns the bare array. Both are read.

When a request does fail, the reason Todoist gave is what you are shown. An earlier version reported "Todoist refused it" for a mistyped token, a revoked token, a firewall and a retired endpoint alike, which is not something anybody can act on.

Where the token lives

In the operating system's credential store — Windows Credential Manager, the macOS Keychain, or the Secret Service on Linux. Never in a configuration file, which would put it in every backup and every synced folder.

This plugin cannot read it. It says which request to make and yaz attaches the token in the Rust process, against api.todoist.com and no other host. See ADR-0026.

Forgetting a token removes it from this computer. It does not revoke it — only Todoist can do that, in its own settings.

Roadmap

• OAuth instead of a pasted token. The better sign-in, and a real feature: a loopback listener, a registered client, and a round trip through the system browser. A personal token is a copy and a paste and is exactly as revocable, so it is what this starts with.
• Due dates and priorities when adding. They can be set on a task that already exists; the box that adds one still takes only a title, so a task made from a selection needs a second visit to Details to be dated.
• A task from a citation or a figure. "Chase the DIN 277 page number" knows which citation it came from; a link back to that spot in the document would make the tab a way around the paper rather than only a list.

Not planned

• Being a task manager. If Todoist is not open, yaz does not keep a shadow copy or queue writes for later. A bridge that silently diverged from the thing it bridges to would be worse than one that says it cannot reach it.

Licence

MIT. The application is AGPL-3.0, but its plugin API is MIT and so is this, so that anyone can copy it as a starting point without inheriting a licence they did not choose.