@harness-gw/sdk 0.3.0 → 0.4.0

package/README.md

@@ -63,7 +63,7 @@ You need a running harness. Hermes is the primary one; see
    docker run --rm \
      -v "$PWD/config.yaml:/run/harness-gw/config.yaml:ro" \
      -v "$PWD/hermes-token:/run/secrets/hermes-token:ro" \
-     ghcr.io/almogbaku/harness-gw:0.3.0 \
+     ghcr.io/almogbaku/harness-gw:0.4.0 \
      config check --config /run/harness-gw/config.yaml
    ```
 
@@ -73,7 +73,7 @@ You need a running harness. Hermes is the primary one; see
    docker run --rm -p 127.0.0.1:4100:4100 \
      -v "$PWD/config.yaml:/run/harness-gw/config.yaml:ro" \
      -v "$PWD/hermes-token:/run/secrets/hermes-token:ro" \
-     ghcr.io/almogbaku/harness-gw:0.3.0 \
+     ghcr.io/almogbaku/harness-gw:0.4.0 \
      serve --config /run/harness-gw/config.yaml
    ```
 
@@ -97,7 +97,7 @@ Without Docker, run the same CLI from a checkout with `bun run serve --config
 ## Use the SDK
 
 ```bash
-npm install @harness-gw/sdk @agentclientprotocol/sdk @modelcontextprotocol/sdk zod
+npm install @harness-gw/sdk @agentclientprotocol/sdk @modelcontextprotocol/core zod
 ```
 
 ```ts

package/dist/chunks/index.js

@@ -1,3 +1,6 @@
+// protocol/acp.ts
+import { z as z2 } from "zod";
+
 // protocol/index.ts
 import { z } from "zod";
 var SESSION_CATALOG_MAX_WINDOW2 = 1000;
@@ -128,8 +131,8 @@ var SessionSchema2 = z.strictObject({
   agentId: IdentifierSchema,
   title: z.string().min(1).max(4096).optional(),
   archived: z.boolean(),
-  createdAt: z.string().datetime().optional(),
-  updatedAt: z.string().datetime().optional(),
+  createdAt: z.iso.datetime().optional(),
+  updatedAt: z.iso.datetime().optional(),
   status: SessionStatusSchema2,
   unread: z.boolean().optional(),
   pinned: z.boolean().optional(),
@@ -216,8 +219,8 @@ var SessionMessagePartSchema = z.discriminatedUnion("type", [
     kind: z.enum(Object.values(ToolKind2)).optional(),
     locations: z.array(ToolLocationSchema2).max(256).optional(),
     diffs: z.array(ToolDiffSchema2).max(64).optional(),
-    startedAt: z.string().datetime().optional(),
-    completedAt: z.string().datetime().optional(),
+    startedAt: z.iso.datetime().optional(),
+    completedAt: z.iso.datetime().optional(),
     durationMs: z.number().int().nonnegative().optional(),
     app: z.literal(true).optional()
   }),
@@ -248,8 +251,8 @@ var SessionMessageSchema2 = z.strictObject({
   role: z.enum(["user", "assistant", "system"]),
   content: z.array(SessionMessagePartSchema).max(2000),
   attachments: z.array(SessionMessageAttachmentSchema).max(16).optional(),
-  createdAt: z.string().datetime(),
-  completedAt: z.string().datetime().optional(),
+  createdAt: z.iso.datetime(),
+  completedAt: z.iso.datetime().optional(),
   status: z.union([
     z.strictObject({
       type: z.literal("requires-action"),
@@ -556,7 +559,7 @@ var SessionContextResponseSchema2 = z.strictObject({
     messageTokens: z.number().int().min(0)
   }).optional(),
   cost: z.strictObject({
-    amount: z.number().finite().min(0),
+    amount: z.number().min(0),
     currency: z.string().min(1)
   }).optional()
 });
@@ -571,7 +574,7 @@ var ArtifactDescriptorSchema2 = z.strictObject({
       encoding: z.enum(["utf8", "base64"]),
       data: z.string()
     }),
-    z.strictObject({ type: z.literal("url"), url: z.string().url() }),
+    z.strictObject({ type: z.literal("url"), url: z.url() }),
     z.strictObject({
       type: z.literal("provider"),
       reference: z.string().min(1)
@@ -676,7 +679,6 @@ var ErrorResponseSchema2 = z.strictObject({
 });
 
 // protocol/acp.ts
-import { z as z2 } from "zod";
 var ACP_PROTOCOL_VERSION2 = 2;
 var HGW_API_PREFIX2 = "/api/v1";
 var HGW_ACP_PATH2 = `${HGW_API_PREFIX2}/acp`;
@@ -780,7 +782,7 @@ var HgwSessionInfoMetaSchema2 = readObject({
   agentId: IdentifierSchema2,
   status: SessionStatusSchema2,
   archived: z2.boolean(),
-  createdAt: z2.string().datetime().optional(),
+  createdAt: z2.iso.datetime().optional(),
   unread: z2.boolean().optional(),
   pinned: z2.boolean().optional(),
   platform: SessionPlatformSchema2.optional()
@@ -889,7 +891,7 @@ var SubagentAttribution = {
 };
 var HgwStateMetaSchema2 = readObject({
   ...TurnMetaBase,
-  at: z2.string().datetime().optional(),
+  at: z2.iso.datetime().optional(),
   execution: z2.literal("stopping").optional(),
   code: z2.string().min(1).max(128).optional(),
   message: z2.string().max(4096).optional(),
@@ -907,8 +909,8 @@ var HgwToolCallMetaSchema2 = readObject({
   messageId: IdentifierSchema2,
   argsTextDelta: z2.string().optional(),
   argsText: z2.string().optional(),
-  startedAt: z2.string().datetime().optional(),
-  completedAt: z2.string().datetime().optional(),
+  startedAt: z2.iso.datetime().optional(),
+  completedAt: z2.iso.datetime().optional(),
   durationMs: CountSchema.optional(),
   subagent: HgwSubagentSchema2.optional(),
   app: z2.strictObject({}).optional()
@@ -928,7 +930,7 @@ var HgwAvailableCommandsMetaSchema2 = readObject({
 });
 var HgwPermissionMetaSchema2 = readObject({
   requestId: IdentifierSchema2,
-  expiresAt: z2.string().datetime().optional(),
+  expiresAt: z2.iso.datetime().optional(),
   message: z2.string().max(4096).optional()
 });
 var HgwQuestionOptionSchema2 = readObject({
@@ -946,7 +948,7 @@ var HgwQuestionSchema2 = readObject({
 });
 var HgwElicitationMetaSchema2 = readObject({
   requestId: IdentifierSchema2,
-  expiresAt: z2.string().datetime().optional(),
+  expiresAt: z2.iso.datetime().optional(),
   questions: z2.array(HgwQuestionSchema2).min(1).max(64)
 });
 var HgwArtifactDescriptorSchema2 = ArtifactDescriptorSchema2;
@@ -981,7 +983,7 @@ var HgwErrorNotificationSchema2 = readObject({
 var ActivityBase = {
   agentId: IdentifierSchema2,
   sessionId: IdentifierSchema2,
-  occurredAt: z2.string().datetime()
+  occurredAt: z2.iso.datetime()
 };
 var HgwActivityNotificationSchema2 = z2.discriminatedUnion("type", [
   readObject({
@@ -1040,7 +1042,7 @@ var PushMessageSchema2 = z3.strictObject({
   count: z3.number().int().min(1),
   agentId: IdentifierSchema2.optional(),
   sessionId: IdentifierSchema2.optional(),
-  occurredAt: z3.string().datetime(),
+  occurredAt: z3.iso.datetime(),
   locale: PushLocaleSchema2
 }).refine((message) => message.count === 1 === (message.agentId !== undefined && message.sessionId !== undefined), { message: "A single-Session push carries both ids; a count carries none" });
 var PushCategoriesSchema2 = z3.strictObject({
@@ -1077,7 +1079,7 @@ var PushUnregistrationSchema2 = z3.strictObject({
 import {
   CallToolResultSchema as CallToolResultSchema2,
   ReadResourceResultSchema as ReadResourceResultSchema2
-} from "@modelcontextprotocol/sdk/types.js";
+} from "@modelcontextprotocol/core";
 import { z as z4 } from "zod";
 var DomainListSchema = z4.array(z4.string().min(1).max(2048)).max(64);
 var McpUiCspSchema2 = z4.object({
@@ -1104,7 +1106,7 @@ var McpUiPermissionsSchema2 = z4.object({
 });
 var McpAppFilesSchema2 = z4.strictObject({
   addresses: z4.record(z4.string(), z4.string().startsWith("/").max(8192)),
-  expiresAt: z4.string().datetime().optional()
+  expiresAt: z4.iso.datetime().optional()
 });
 var McpAppViewSchema2 = z4.strictObject({
   html: z4.string().max(5000000),
@@ -1154,7 +1156,7 @@ var MCP_APP_SANDBOX_CSP2 = [
     ...LOOPBACK_SOURCES("http"),
     ...LOOPBACK_SOURCES("ws")
   ].join(" "),
-  "worker-src 'self' blob:",
+  "worker-src 'self' blob: data:",
   "frame-src https:",
   "base-uri https:",
   "object-src 'none'",

package/dist/client/hgw-client.d.ts

@@ -275,12 +275,21 @@ export declare class HgwRemoteClient {
             })[];
             _meta?: {
                 [x: string]: unknown;
-                progressToken?: string | number | undefined;
-                "io.modelcontextprotocol/related-task"?: {
-                    taskId: string;
+                "io.modelcontextprotocol/serverInfo"?: {
+                    version: string;
+                    name: string;
+                    websiteUrl?: string | undefined;
+                    description?: string | undefined;
+                    icons?: {
+                        src: string;
+                        mimeType?: string | undefined;
+                        sizes?: string[] | undefined;
+                        theme?: "light" | "dark" | undefined;
+                    }[] | undefined;
+                    title?: string | undefined;
                 } | undefined;
             } | undefined;
-            structuredContent?: Record<string, unknown> | undefined;
+            structuredContent?: unknown;
             isError?: boolean | undefined;
         } | undefined;
         files?: {
@@ -369,12 +378,21 @@ export declare class HgwRemoteClient {
         })[];
         _meta?: {
             [x: string]: unknown;
-            progressToken?: string | number | undefined;
-            "io.modelcontextprotocol/related-task"?: {
-                taskId: string;
+            "io.modelcontextprotocol/serverInfo"?: {
+                version: string;
+                name: string;
+                websiteUrl?: string | undefined;
+                description?: string | undefined;
+                icons?: {
+                    src: string;
+                    mimeType?: string | undefined;
+                    sizes?: string[] | undefined;
+                    theme?: "light" | "dark" | undefined;
+                }[] | undefined;
+                title?: string | undefined;
             } | undefined;
         } | undefined;
-        structuredContent?: Record<string, unknown> | undefined;
+        structuredContent?: unknown;
         isError?: boolean | undefined;
     }>;
     /** A resource read the App view makes, answered by the proxy's MCP server. */
@@ -393,9 +411,18 @@ export declare class HgwRemoteClient {
         })[];
         _meta?: {
             [x: string]: unknown;
-            progressToken?: string | number | undefined;
-            "io.modelcontextprotocol/related-task"?: {
-                taskId: string;
+            "io.modelcontextprotocol/serverInfo"?: {
+                version: string;
+                name: string;
+                websiteUrl?: string | undefined;
+                description?: string | undefined;
+                icons?: {
+                    src: string;
+                    mimeType?: string | undefined;
+                    sizes?: string[] | undefined;
+                    theme?: "light" | "dark" | undefined;
+                }[] | undefined;
+                title?: string | undefined;
             } | undefined;
         } | undefined;
     }>;

package/dist/protocol/acp.d.ts

@@ -1,3 +1,4 @@
+import type { UnknownVariant } from "@agentclientprotocol/sdk/experimental/v2";
 import { z } from "zod";
 import { type ArtifactDescriptor } from "./index.js";
 /**
@@ -14,6 +15,20 @@ import { type ArtifactDescriptor } from "./index.js";
  * adds a key never costs the browser the whole payload. The gateway's builders
  * stay exact through the inferred types.
  */
+/**
+ * An ACP value either end builds, as opposed to one it received. The SDK
+ * brands the variants it does not know so only received values can carry them;
+ * that brand also stops TypeScript from checking a built value whose tag is
+ * computed (`stopReason: stopping ? "cancelled" : "end_turn"`) against the
+ * known variants. Dropping the branded members at every depth restores that
+ * check, and a `Built` value is still a plain `T`. The gateway builds every
+ * update it sends this way; a browser test builds the updates it feeds in.
+ */
+export type Built<T> = T extends UnknownVariant<unknown> ? never : T extends object ? {
+    [K in keyof T]: Built<T[K]>;
+} : T;
+/**
+ */
 export declare const ACP_PROTOCOL_VERSION: 2;
 /**
  * Every gateway route sits below this prefix, on both listeners: which
@@ -169,7 +184,7 @@ export declare const HgwSessionInfoMetaSchema: z.ZodObject<{
         failed: "failed";
     }>;
     archived: z.ZodBoolean;
-    createdAt: z.ZodOptional<z.ZodString>;
+    createdAt: z.ZodOptional<z.ZodISODateTime>;
     unread: z.ZodOptional<z.ZodBoolean>;
     pinned: z.ZodOptional<z.ZodBoolean>;
     platform: z.ZodOptional<z.ZodEnum<{
@@ -449,7 +464,7 @@ export declare const HgwSubagentSchema: z.ZodObject<{
 export type HgwSubagent = z.infer<typeof HgwSubagentSchema>;
 /** `state_update._meta.hgw` */
 export declare const HgwStateMetaSchema: z.ZodObject<{
-    at: z.ZodOptional<z.ZodString>;
+    at: z.ZodOptional<z.ZodISODateTime>;
     execution: z.ZodOptional<z.ZodLiteral<"stopping">>;
     code: z.ZodOptional<z.ZodString>;
     message: z.ZodOptional<z.ZodString>;
@@ -474,8 +489,8 @@ export declare const HgwToolCallMetaSchema: z.ZodObject<{
     messageId: z.ZodString;
     argsTextDelta: z.ZodOptional<z.ZodString>;
     argsText: z.ZodOptional<z.ZodString>;
-    startedAt: z.ZodOptional<z.ZodString>;
-    completedAt: z.ZodOptional<z.ZodString>;
+    startedAt: z.ZodOptional<z.ZodISODateTime>;
+    completedAt: z.ZodOptional<z.ZodISODateTime>;
     durationMs: z.ZodOptional<z.ZodNumber>;
     subagent: z.ZodOptional<z.ZodObject<{
         id: z.ZodString;
@@ -707,7 +722,7 @@ export declare const HgwAvailableCommandsMetaSchema: z.ZodObject<{
 /** `RequestPermissionRequest._meta.hgw` */
 export declare const HgwPermissionMetaSchema: z.ZodObject<{
     requestId: z.ZodString;
-    expiresAt: z.ZodOptional<z.ZodString>;
+    expiresAt: z.ZodOptional<z.ZodISODateTime>;
     message: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export declare const HgwQuestionOptionSchema: z.ZodObject<{
@@ -731,7 +746,7 @@ export type HgwQuestion = z.infer<typeof HgwQuestionSchema>;
 /** `CreateElicitationRequest._meta.hgw`: lossless projection of the questions. */
 export declare const HgwElicitationMetaSchema: z.ZodObject<{
     requestId: z.ZodString;
-    expiresAt: z.ZodOptional<z.ZodString>;
+    expiresAt: z.ZodOptional<z.ZodISODateTime>;
     questions: z.ZodArray<z.ZodObject<{
         id: z.ZodOptional<z.ZodString>;
         header: z.ZodOptional<z.ZodString>;
@@ -760,7 +775,7 @@ export declare const HgwArtifactDescriptorSchema: z.ZodObject<{
         data: z.ZodString;
     }, z.core.$strict>, z.ZodObject<{
         type: z.ZodLiteral<"url">;
-        url: z.ZodString;
+        url: z.ZodURL;
     }, z.core.$strict>, z.ZodObject<{
         type: z.ZodLiteral<"provider">;
         reference: z.ZodString;
@@ -801,7 +816,7 @@ export declare const HgwActivityNotificationSchema: z.ZodDiscriminatedUnion<[z.Z
     turnId: z.ZodString;
     agentId: z.ZodString;
     sessionId: z.ZodString;
-    occurredAt: z.ZodString;
+    occurredAt: z.ZodISODateTime;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"attention-requested">;
     requestId: z.ZodString;
@@ -811,18 +826,18 @@ export declare const HgwActivityNotificationSchema: z.ZodDiscriminatedUnion<[z.Z
     }>;
     agentId: z.ZodString;
     sessionId: z.ZodString;
-    occurredAt: z.ZodString;
+    occurredAt: z.ZodISODateTime;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"attention-resolved">;
     requestId: z.ZodString;
     agentId: z.ZodString;
     sessionId: z.ZodString;
-    occurredAt: z.ZodString;
+    occurredAt: z.ZodISODateTime;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"unread-changed">;
     unread: z.ZodBoolean;
     agentId: z.ZodString;
     sessionId: z.ZodString;
-    occurredAt: z.ZodString;
+    occurredAt: z.ZodISODateTime;
 }, z.core.$strip>], "type">;
 export type HgwActivityNotification = z.infer<typeof HgwActivityNotificationSchema>;

package/dist/protocol/index.d.ts

@@ -300,8 +300,8 @@ export declare const SessionSchema: z.ZodObject<{
     agentId: z.ZodString;
     title: z.ZodOptional<z.ZodString>;
     archived: z.ZodBoolean;
-    createdAt: z.ZodOptional<z.ZodString>;
-    updatedAt: z.ZodOptional<z.ZodString>;
+    createdAt: z.ZodOptional<z.ZodISODateTime>;
+    updatedAt: z.ZodOptional<z.ZodISODateTime>;
     status: z.ZodEnum<{
         unknown: "unknown";
         idle: "idle";
@@ -329,8 +329,8 @@ export declare const SessionCatalogResponseSchema: z.ZodObject<{
         agentId: z.ZodString;
         title: z.ZodOptional<z.ZodString>;
         archived: z.ZodBoolean;
-        createdAt: z.ZodOptional<z.ZodString>;
-        updatedAt: z.ZodOptional<z.ZodString>;
+        createdAt: z.ZodOptional<z.ZodISODateTime>;
+        updatedAt: z.ZodOptional<z.ZodISODateTime>;
         status: z.ZodEnum<{
             unknown: "unknown";
             idle: "idle";
@@ -496,8 +496,8 @@ export declare const SessionMessageSchema: z.ZodObject<{
             }, z.core.$strict>]>>;
             patch: z.ZodOptional<z.ZodString>;
         }, z.core.$strict>>>;
-        startedAt: z.ZodOptional<z.ZodString>;
-        completedAt: z.ZodOptional<z.ZodString>;
+        startedAt: z.ZodOptional<z.ZodISODateTime>;
+        completedAt: z.ZodOptional<z.ZodISODateTime>;
         durationMs: z.ZodOptional<z.ZodNumber>;
         app: z.ZodOptional<z.ZodLiteral<true>>;
     }, z.core.$strict>, z.ZodObject<{
@@ -515,8 +515,8 @@ export declare const SessionMessageSchema: z.ZodObject<{
         }, z.core.$strict>;
         content: z.ZodArray<z.ZodNever>;
     }, z.core.$strict>>>;
-    createdAt: z.ZodString;
-    completedAt: z.ZodOptional<z.ZodString>;
+    createdAt: z.ZodISODateTime;
+    completedAt: z.ZodOptional<z.ZodISODateTime>;
     status: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
         type: z.ZodLiteral<"requires-action">;
         reason: z.ZodLiteral<"interrupt">;
@@ -618,8 +618,8 @@ export declare const SessionHistoryResponseSchema: z.ZodObject<{
                 }, z.core.$strict>]>>;
                 patch: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>>;
-            startedAt: z.ZodOptional<z.ZodString>;
-            completedAt: z.ZodOptional<z.ZodString>;
+            startedAt: z.ZodOptional<z.ZodISODateTime>;
+            completedAt: z.ZodOptional<z.ZodISODateTime>;
             durationMs: z.ZodOptional<z.ZodNumber>;
             app: z.ZodOptional<z.ZodLiteral<true>>;
         }, z.core.$strict>, z.ZodObject<{
@@ -637,8 +637,8 @@ export declare const SessionHistoryResponseSchema: z.ZodObject<{
             }, z.core.$strict>;
             content: z.ZodArray<z.ZodNever>;
         }, z.core.$strict>>>;
-        createdAt: z.ZodString;
-        completedAt: z.ZodOptional<z.ZodString>;
+        createdAt: z.ZodISODateTime;
+        completedAt: z.ZodOptional<z.ZodISODateTime>;
         status: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
             type: z.ZodLiteral<"requires-action">;
             reason: z.ZodLiteral<"interrupt">;
@@ -1093,7 +1093,7 @@ export declare const ArtifactDescriptorSchema: z.ZodObject<{
         data: z.ZodString;
     }, z.core.$strict>, z.ZodObject<{
         type: z.ZodLiteral<"url">;
-        url: z.ZodString;
+        url: z.ZodURL;
     }, z.core.$strict>, z.ZodObject<{
         type: z.ZodLiteral<"provider">;
         reference: z.ZodString;

package/dist/protocol/mcp-apps.d.ts

@@ -1,4 +1,4 @@
-import { CallToolResultSchema, ReadResourceResultSchema, type CallToolResult, type ReadResourceResult } from "@modelcontextprotocol/sdk/types.js";
+import { CallToolResultSchema, ReadResourceResultSchema } from "@modelcontextprotocol/core";
 import { z } from "zod";
 /**
  * MCP Apps (spec 2026-01-26) as the gateway hands them to the browser. A tool
@@ -7,7 +7,8 @@ import { z } from "zod";
  * by the tool call that opened it, never the resource URI.
  */
 export { CallToolResultSchema, ReadResourceResultSchema };
-export type { CallToolResult, ReadResourceResult };
+export type CallToolResult = z.infer<typeof CallToolResultSchema>;
+export type ReadResourceResult = z.infer<typeof ReadResourceResultSchema>;
 /** A UI resource's `_meta.ui.csp`: the origins its view may reach. */
 export declare const McpUiCspSchema: z.ZodObject<{
     connectDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
@@ -39,7 +40,7 @@ export type McpUiPermissions = z.infer<typeof McpUiPermissionsSchema>;
  */
 export declare const McpAppFilesSchema: z.ZodObject<{
     addresses: z.ZodRecord<z.ZodString, z.ZodString>;
-    expiresAt: z.ZodOptional<z.ZodString>;
+    expiresAt: z.ZodOptional<z.ZodISODateTime>;
 }, z.core.$strict>;
 export type McpAppFiles = z.infer<typeof McpAppFilesSchema>;
 /** `GET` an MCP App view: its HTML, sandbox policy, and the call it renders. */
@@ -61,10 +62,22 @@ export declare const McpAppViewSchema: z.ZodObject<{
     toolInput: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     toolResult: z.ZodOptional<z.ZodObject<{
         _meta: z.ZodOptional<z.ZodObject<{
-            progressToken: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
-            "io.modelcontextprotocol/related-task": z.ZodOptional<z.ZodObject<{
-                taskId: z.ZodString;
-            }, z.core.$strip>>;
+            readonly "io.modelcontextprotocol/serverInfo": z.ZodCatch<z.ZodOptional<z.ZodObject<{
+                version: z.ZodString;
+                websiteUrl: z.ZodOptional<z.ZodString>;
+                description: z.ZodOptional<z.ZodString>;
+                icons: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                    src: z.ZodString;
+                    mimeType: z.ZodOptional<z.ZodString>;
+                    sizes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                    theme: z.ZodOptional<z.ZodEnum<{
+                        light: "light";
+                        dark: "dark";
+                    }>>;
+                }, z.core.$strip>>>;
+                name: z.ZodString;
+                title: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>>;
         }, z.core.$loose>>;
         content: z.ZodDefault<z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
             type: z.ZodLiteral<"text">;
@@ -153,12 +166,12 @@ export declare const McpAppViewSchema: z.ZodObject<{
             }, z.core.$strip>>;
             _meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
         }, z.core.$strip>]>>>;
-        structuredContent: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        structuredContent: z.ZodOptional<z.ZodUnknown>;
         isError: z.ZodOptional<z.ZodBoolean>;
     }, z.core.$loose>>;
     files: z.ZodOptional<z.ZodObject<{
         addresses: z.ZodRecord<z.ZodString, z.ZodString>;
-        expiresAt: z.ZodOptional<z.ZodString>;
+        expiresAt: z.ZodOptional<z.ZodISODateTime>;
     }, z.core.$strict>>;
 }, z.core.$strict>;
 export type McpAppView = z.infer<typeof McpAppViewSchema>;

package/dist/protocol/push.d.ts

@@ -44,7 +44,7 @@ export declare const PushMessageSchema: z.ZodObject<{
     count: z.ZodNumber;
     agentId: z.ZodOptional<z.ZodString>;
     sessionId: z.ZodOptional<z.ZodString>;
-    occurredAt: z.ZodString;
+    occurredAt: z.ZodISODateTime;
     locale: z.ZodEnum<{
         en: "en";
         he: "he";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@harness-gw/sdk",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "A gateway that puts Hermes, OpenClaw, and OpenCode behind one ACP WebSocket, and the browser client and protocol SDK for it.",
   "license": "Apache-2.0",
   "type": "module",
@@ -38,37 +38,39 @@
   },
   "dependencies": {
     "cockatiel": "4.0.0",
-    "pino": "10.3.1",
+    "pino": "10.4.0",
     "xstate": "5.33.2"
   },
   "peerDependencies": {
-    "@agentclientprotocol/sdk": "1.5.0",
-    "@modelcontextprotocol/sdk": "1.30.0",
-    "zod": "4.5.4"
+    "@agentclientprotocol/sdk": "^1.5.0",
+    "@modelcontextprotocol/core": "^2.3.1",
+    "zod": "^4.5.4"
   },
   "devDependencies": {
-    "@agentclientprotocol/sdk": "1.5.0",
+    "@agentclientprotocol/sdk": "1.8.0",
     "@block65/webcrypto-web-push": "^2.0.0",
-    "@eslint/js": "9",
-    "@modelcontextprotocol/sdk": "1.30.0",
-    "@openclaw/gateway-client": "2026.9.4",
-    "@openclaw/gateway-protocol": "2026.9.4",
-    "@opencode-ai/sdk": "1.18.29",
-    "@types/bun": "^1.4.1",
+    "@eslint/js": "10",
+    "@modelcontextprotocol/client": "2.3.1",
+    "@modelcontextprotocol/core": "2.3.1",
+    "@modelcontextprotocol/server": "2.3.1",
+    "@openclaw/gateway-client": "2026.10.2",
+    "@openclaw/gateway-protocol": "2026.10.2",
+    "@opencode-ai/sdk": "1.19.0",
+    "@types/bun": "^1.4.3",
     "@types/ms": "2.1.0",
-    "@types/node": "^20",
-    "commander": "14.0.3",
-    "eslint": "^9",
+    "@types/node": "^26",
+    "commander": "15.0.0",
+    "eslint": "^10",
     "globals": "^17.12.0",
-    "hono": "4.13.5",
+    "hono": "4.13.13",
     "ipaddr.js": "^2.5.0",
     "jose": "6.2.12",
     "ms": "2.1.3",
-    "prettier": "^3.8.3",
+    "prettier": "^3.9.10",
     "typescript": "^5",
-    "typescript-eslint": "^8.70.0",
-    "vitest": "^5.0.0",
-    "yaml": "2.9.0",
-    "zod": "4.5.4"
+    "typescript-eslint": "^8.71.1",
+    "vitest": "^5.0.4",
+    "yaml": "2.9.1",
+    "zod": "4.6.6"
   }
 }