macp-sdk-typescript 0.15.0 → 0.16.1

package/CHANGELOG.md

@@ -4,6 +4,21 @@ All notable changes to `macp-sdk-typescript` are documented here. The format
 follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and the
 project uses [Semantic Versioning](https://semver.org/).
 
+## [0.16.1](https://github.com/multiagentcoordinationprotocol/macp-sdk-typescript/compare/v0.16.0...v0.16.1) (2026-10-18)
+
+
+### Bug Fixes
+
+* **watchers:** type PolicyChange.observedAtUnixMs as string ([#175](https://github.com/multiagentcoordinationprotocol/macp-sdk-typescript/issues/175)) ([3ff812b](https://github.com/multiagentcoordinationprotocol/macp-sdk-typescript/commit/3ff812b00b96c2088364c9e521a1440eee91ca0a))
+* **watchers:** unwrap .change in ModeRegistryWatcher/RootsWatcher ([#163](https://github.com/multiagentcoordinationprotocol/macp-sdk-typescript/issues/163)) ([#174](https://github.com/multiagentcoordinationprotocol/macp-sdk-typescript/issues/174)) ([98cb23e](https://github.com/multiagentcoordinationprotocol/macp-sdk-typescript/commit/98cb23e9736ffd9c6eef24b85714f6faf5880b39))
+
+## [0.16.0](https://github.com/multiagentcoordinationprotocol/macp-sdk-typescript/compare/v0.15.0...v0.16.0) (2026-10-18)
+
+
+### Features
+
+* **watchers:** SignalWatcher.events() surfaces sender_authenticated (runtime 0.9.0) ([#172](https://github.com/multiagentcoordinationprotocol/macp-sdk-typescript/issues/172)) ([57491cd](https://github.com/multiagentcoordinationprotocol/macp-sdk-typescript/commit/57491cd8e156c9f1650a918e36eea5ff9d2bdab1))
+
 ## [0.15.0](https://github.com/multiagentcoordinationprotocol/macp-sdk-typescript/compare/v0.14.1...v0.15.0) (2026-10-17)
 
 

package/dist/version.d.ts

@@ -4,4 +4,4 @@
  * Kept in sync with package.json by release-please (see the
  * `x-release-please-version` annotation).
  */
-export declare const VERSION = "0.15.0";
+export declare const VERSION = "0.16.1";

package/dist/version.js

@@ -7,4 +7,4 @@ exports.VERSION = void 0;
  * Kept in sync with package.json by release-please (see the
  * `x-release-please-version` annotation).
  */
-exports.VERSION = '0.15.0'; // x-release-please-version
+exports.VERSION = '0.16.1'; // x-release-please-version

package/dist/watchers.d.ts

@@ -53,19 +53,44 @@ export declare class RootsWatcher {
  * A missing/invalid credential surfaces as `code === 'UNAUTHENTICATED'` — fix
  * auth, do not reconnect.
  */
+/**
+ * One `WatchSignals` frame: the Signal envelope plus whether the runtime
+ * authenticated its `sender` (RFC-MACP-0004 §4.1, runtime ≥ 0.9.0).
+ */
+export interface SignalEvent {
+    envelope: Envelope;
+    /**
+     * `true` only when the runtime authenticated the Signal's `sender` (JWT or
+     * static-token auth). `false` in dev mode and on runtimes that predate the
+     * field — the safe direction. A Signal with `false` MUST NOT influence
+     * operational decisions (RFC-MACP-0004 §4.1).
+     */
+    senderAuthenticated: boolean;
+}
 export declare class SignalWatcher {
     private readonly client;
     private readonly auth?;
     constructor(client: MacpClient, options?: {
         auth?: AuthConfig;
     });
+    /**
+     * Signal envelopes only. Does not say whether a Signal's `sender` was
+     * authenticated — use {@link events} wherever a Signal can drive a decision.
+     */
     signals(signal?: AbortSignal): AsyncGenerator<Envelope, void, void>;
+    /** Signal envelopes paired with the runtime's `sender_authenticated` verdict. */
+    events(signal?: AbortSignal): AsyncGenerator<SignalEvent, void, void>;
     watch(handler: (envelope: Envelope) => void | Promise<void>): Promise<void>;
     nextSignal(): Promise<Envelope>;
 }
 export interface PolicyChange {
     descriptors: PolicyDescriptor[];
-    observedAtUnixMs: number;
+    /**
+     * Unix ms as a decimal string — the proto field is `int64`, which the
+     * client decodes with `longs: String` (same as `RegistryChanged`,
+     * `RootsChanged` and `SessionLifecycleEvent`). Was mistyped `number`.
+     */
+    observedAtUnixMs: string;
 }
 export declare class PolicyWatcher {
     private readonly client;

package/dist/watchers.js

@@ -116,11 +116,16 @@ class ModeRegistryWatcher {
         this.auth = options?.auth;
     }
     async *changes(signal) {
+        // The wire frame is `WatchModeRegistryResponse { RegistryChanged change = 1; }` — unwrap it
+        // (issue #163; yielding the frame itself left every field undefined).
         const stream = this.client.watchModeRegistry(this.auth);
         if (signal) {
             signal.addEventListener('abort', () => stream.cancel(), { once: true });
         }
-        yield* serverStreamToAsyncGenerator(stream);
+        for await (const response of serverStreamToAsyncGenerator(stream)) {
+            if (response.change)
+                yield response.change;
+        }
     }
     async watch(handler) {
         for await (const change of this.changes()) {
@@ -145,11 +150,16 @@ class RootsWatcher {
         this.auth = options?.auth;
     }
     async *changes(signal) {
+        // The wire frame is `WatchRootsResponse { RootsChanged change = 1; }` — unwrap it
+        // (issue #163; yielding the frame itself left every field undefined).
         const stream = this.client.watchRoots(this.auth);
         if (signal) {
             signal.addEventListener('abort', () => stream.cancel(), { once: true });
         }
-        yield* serverStreamToAsyncGenerator(stream);
+        for await (const response of serverStreamToAsyncGenerator(stream)) {
+            if (response.change)
+                yield response.change;
+        }
     }
     async watch(handler) {
         for await (const change of this.changes()) {
@@ -166,16 +176,6 @@ class RootsWatcher {
     }
 }
 exports.RootsWatcher = RootsWatcher;
-/**
- * Watches the ambient signal plane. **Requires auth** as of runtime 0.5.0: if
- * no credential is configured on the watcher or the client, iterating
- * {@link SignalWatcher.signals} throws immediately (via `client.watchSignals`).
- *
- * Consumer lag terminates the stream with a coded `MacpTransportError`
- * (`code === 'RESOURCE_EXHAUSTED'`); the correct response is to reconnect.
- * A missing/invalid credential surfaces as `code === 'UNAUTHENTICATED'` — fix
- * auth, do not reconnect.
- */
 class SignalWatcher {
     client;
     auth;
@@ -183,15 +183,25 @@ class SignalWatcher {
         this.client = client;
         this.auth = options?.auth;
     }
+    /**
+     * Signal envelopes only. Does not say whether a Signal's `sender` was
+     * authenticated — use {@link events} wherever a Signal can drive a decision.
+     */
     async *signals(signal) {
+        for await (const event of this.events(signal))
+            yield event.envelope;
+    }
+    /** Signal envelopes paired with the runtime's `sender_authenticated` verdict. */
+    async *events(signal) {
         const stream = this.client.watchSignals(this.auth);
         if (signal) {
             signal.addEventListener('abort', () => stream.cancel(), { once: true });
         }
         const gen = serverStreamToAsyncGenerator(stream);
         for await (const response of gen) {
+            // Strict `=== true`: anything but an explicit true is unauthenticated.
             if (response.envelope)
-                yield response.envelope;
+                yield { envelope: response.envelope, senderAuthenticated: response.senderAuthenticated === true };
         }
     }
     async watch(handler) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "macp-sdk-typescript",
-  "version": "0.15.0",
+  "version": "0.16.1",
   "description": "TypeScript SDK for the MACP Rust runtime",
   "license": "Apache-2.0",
   "type": "commonjs",