macp-sdk-typescript 0.15.0 → 0.16.0

package/CHANGELOG.md

@@ -4,6 +4,13 @@ All notable changes to `macp-sdk-typescript` are documented here. The format
 follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and the
 project uses [Semantic Versioning](https://semver.org/).
 
+## [0.16.0](https://github.com/multiagentcoordinationprotocol/macp-sdk-typescript/compare/v0.15.0...v0.16.0) (2026-10-18)
+
+
+### Features
+
+* **watchers:** SignalWatcher.events() surfaces sender_authenticated (runtime 0.9.0) ([#172](https://github.com/multiagentcoordinationprotocol/macp-sdk-typescript/issues/172)) ([57491cd](https://github.com/multiagentcoordinationprotocol/macp-sdk-typescript/commit/57491cd8e156c9f1650a918e36eea5ff9d2bdab1))
+
 ## [0.15.0](https://github.com/multiagentcoordinationprotocol/macp-sdk-typescript/compare/v0.14.1...v0.15.0) (2026-10-17)
 
 

package/dist/version.d.ts

@@ -4,4 +4,4 @@
  * Kept in sync with package.json by release-please (see the
  * `x-release-please-version` annotation).
  */
-export declare const VERSION = "0.15.0";
+export declare const VERSION = "0.16.0";

package/dist/version.js

@@ -7,4 +7,4 @@ exports.VERSION = void 0;
  * Kept in sync with package.json by release-please (see the
  * `x-release-please-version` annotation).
  */
-exports.VERSION = '0.15.0'; // x-release-please-version
+exports.VERSION = '0.16.0'; // x-release-please-version

package/dist/watchers.d.ts

@@ -53,13 +53,33 @@ export declare class RootsWatcher {
  * A missing/invalid credential surfaces as `code === 'UNAUTHENTICATED'` — fix
  * auth, do not reconnect.
  */
+/**
+ * One `WatchSignals` frame: the Signal envelope plus whether the runtime
+ * authenticated its `sender` (RFC-MACP-0004 §4.1, runtime ≥ 0.9.0).
+ */
+export interface SignalEvent {
+    envelope: Envelope;
+    /**
+     * `true` only when the runtime authenticated the Signal's `sender` (JWT or
+     * static-token auth). `false` in dev mode and on runtimes that predate the
+     * field — the safe direction. A Signal with `false` MUST NOT influence
+     * operational decisions (RFC-MACP-0004 §4.1).
+     */
+    senderAuthenticated: boolean;
+}
 export declare class SignalWatcher {
     private readonly client;
     private readonly auth?;
     constructor(client: MacpClient, options?: {
         auth?: AuthConfig;
     });
+    /**
+     * Signal envelopes only. Does not say whether a Signal's `sender` was
+     * authenticated — use {@link events} wherever a Signal can drive a decision.
+     */
     signals(signal?: AbortSignal): AsyncGenerator<Envelope, void, void>;
+    /** Signal envelopes paired with the runtime's `sender_authenticated` verdict. */
+    events(signal?: AbortSignal): AsyncGenerator<SignalEvent, void, void>;
     watch(handler: (envelope: Envelope) => void | Promise<void>): Promise<void>;
     nextSignal(): Promise<Envelope>;
 }

package/dist/watchers.js

@@ -166,16 +166,6 @@ class RootsWatcher {
     }
 }
 exports.RootsWatcher = RootsWatcher;
-/**
- * Watches the ambient signal plane. **Requires auth** as of runtime 0.5.0: if
- * no credential is configured on the watcher or the client, iterating
- * {@link SignalWatcher.signals} throws immediately (via `client.watchSignals`).
- *
- * Consumer lag terminates the stream with a coded `MacpTransportError`
- * (`code === 'RESOURCE_EXHAUSTED'`); the correct response is to reconnect.
- * A missing/invalid credential surfaces as `code === 'UNAUTHENTICATED'` — fix
- * auth, do not reconnect.
- */
 class SignalWatcher {
     client;
     auth;
@@ -183,15 +173,25 @@ class SignalWatcher {
         this.client = client;
         this.auth = options?.auth;
     }
+    /**
+     * Signal envelopes only. Does not say whether a Signal's `sender` was
+     * authenticated — use {@link events} wherever a Signal can drive a decision.
+     */
     async *signals(signal) {
+        for await (const event of this.events(signal))
+            yield event.envelope;
+    }
+    /** Signal envelopes paired with the runtime's `sender_authenticated` verdict. */
+    async *events(signal) {
         const stream = this.client.watchSignals(this.auth);
         if (signal) {
             signal.addEventListener('abort', () => stream.cancel(), { once: true });
         }
         const gen = serverStreamToAsyncGenerator(stream);
         for await (const response of gen) {
+            // Strict `=== true`: anything but an explicit true is unauthenticated.
             if (response.envelope)
-                yield response.envelope;
+                yield { envelope: response.envelope, senderAuthenticated: response.senderAuthenticated === true };
         }
     }
     async watch(handler) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "macp-sdk-typescript",
-  "version": "0.15.0",
+  "version": "0.16.0",
   "description": "TypeScript SDK for the MACP Rust runtime",
   "license": "Apache-2.0",
   "type": "commonjs",