docs: align reference docs with current source

Cross-checked every doc against packages/* and corrected ~50 concrete
drifts surfaced by an audit:

- Replaced `client.state.sessionId` / `welcome.session_id` with
  `client.state.id` (the actual getter; session_id lives on the
  envelope, not the welcome payload).
- Replaced every "Zod" reference with Effect Schema (no Zod dep
  exists in the workspace).
- Corrected `SessionPhase` values to `opening | accepted | closing |
  rejected` everywhere; removed the fictional
  `pre-handshake/awaiting-welcome/closed` machine.
- Removed `leaseConstraints.budgets` — budgets ride on
  `lease["cost.budget"]` as `currency:decimal` patterns. Updated
  jobs, leases, and errors guides accordingly.
- Fixed `validateLeaseOp` signature to the real single-object form
  `{ lease, capability, target, ctx? }`.
- Rewrote docs/cli.md to match the actual CLI flags
  (packages/sdk/src/cli.ts).
- Fixed `startWebSocketServer` doc (no `path`/`allowedHosts`; those
  belong to `attachArcpUpgrade`).
- Corrected OTel middleware doc: span names are
  `arcp.send <type>`/`arcp.recv <type>`, attributes match source,
  removed the false "heartbeats are filtered" claim.
- Corrected runtime doc: `accept()` is sync, versioned agents use
  `registerAgentVersion`/`setDefaultAgentVersion`, file-layout
  matches the post-refactor module split.
- Corrected client doc: `listJobs` filter uses `status: string[]`,
  `client.send()` does NOT auto-fill `session_id`.
- Fixed CONFORMANCE.md spec link and refreshed file:line citations
  after the runtime refactor.
- Removed dead CODE_OF_CONDUCT link from CONTRIBUTING.md.
- Expanded CHANGELOG.md to record the v1.1 surface and feature flags
  shipped in 0.1.0.

Coverage added:
- New docs/effect.md — comprehensive map of the previously
  undocumented Effect-native surface (ARCPRuntimeLayer,
  ARCPClientLayer, JobService, EventLogService, tagged errors,
  OtelTracerLayer). Linked from docs/README.md.
- Effect-shaped twins surfaced in architecture and each package page.
- docs/README.md index now links the credentials guide.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: Nick Ficano

CHANGELOG.md

@@ -9,4 +9,18 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Added
 
-- Initial reference SDK release aligned with ARCP protocol v1.1 (see README status).
+- Initial reference SDK release aligned with ARCP protocol v1.1.
+- Wire envelopes carry `arcp: "1.1"` (`PROTOCOL_VERSION`).
+- v1.0 surface: sessions, jobs, leases, delegation, resume, idempotency,
+  WebSocket / stdio / in-memory transports, bearer auth.
+- v1.1 features negotiated via `capabilities.features`: `heartbeat`, `ack`,
+  `list_jobs`, `subscribe`, `lease_expires_at`, `cost.budget`, `progress`,
+  `result_chunk`, `agent_versions`, `model.use`, `provisioned_credentials`.
+- v1.1 error codes: `AGENT_VERSION_NOT_AVAILABLE`, `LEASE_EXPIRED`,
+  `BUDGET_EXHAUSTED` (15 codes total).
+- Packages: `@agentruntimecontrolprotocol/core`, `/client`, `/runtime`,
+  `/sdk`, plus host middleware `/node`, `/express`, `/fastify`, `/hono`,
+  `/bun`, and `/middleware-otel`.
+- Effect-native surface alongside the legacy Promise/class API
+  (`ARCPRuntimeLayer`, `ARCPClientLayer`, `JobService`, `LoggerLayer`,
+  etc.).

CONFORMANCE.md

@@ -3,7 +3,8 @@
 Thanks for your interest in improving the TypeScript SDK for ARCP. This
 document covers how to report issues, propose changes, and get a change merged.
 
-By participating you agree to the [Code of Conduct](CODE_OF_CONDUCT.md).
+Be respectful — assume good intent, keep critique focused on the work, and
+flag conduct issues to the maintainers.
 
 ## Where changes belong
 

CONTRIBUTING.md

@@ -15,6 +15,7 @@ go deeper into each subsystem.
 - [Architecture](./architecture.md) — how `@agentruntimecontrolprotocol/core`, `@agentruntimecontrolprotocol/client`, and `@agentruntimecontrolprotocol/runtime` fit together.
 - [Transports](./transports.md) — WebSocket, stdio, in-memory; when to pick each.
 - [CLI](./cli.md) — the `arcp` binary shipped by `@agentruntimecontrolprotocol/sdk`.
+- [Effect-native surface](./effect.md) — Layers, Services, and ManagedRuntime for Effect-shaped callers.
 
 ## Guides (one per spec section)
 
@@ -26,6 +27,7 @@ go deeper into each subsystem.
 | [Jobs](./guides/jobs.md)                           | §7   |
 | [Job events](./guides/job-events.md)               | §8   |
 | [Leases](./guides/leases.md)                       | §9   |
+| [Credentials](./guides/credentials.md)             | §9.7–§9.8 |
 | [Delegation](./guides/delegation.md)               | §10  |
 | [Observability](./guides/observability.md)         | §11  |
 | [Errors](./guides/errors.md)                       | §12  |

docs/README.md

@@ -8,7 +8,8 @@
 ## Layering
 
 The SDK is a pnpm monorepo. Every package is ESM-only and strictly
-typed against TypeScript 5.6 with `exactOptionalPropertyTypes`.
+typed with `exactOptionalPropertyTypes`. The workspace pins
+TypeScript `^6.0.3`.
 
 ```
 @agentruntimecontrolprotocol/sdk           — meta, re-exports the three below; ships `arcp` CLI
@@ -34,29 +35,41 @@ Middleware packages are optional adapters around `@agentruntimecontrolprotocol/c
 The shared kernel: nothing in here knows about being a client or a
 runtime. It exports:
 
-- **Envelope schema** — Zod definitions for every message type, plus
-  `Envelope` as a discriminated union and helpers like `buildEnvelope()`,
-  `messageEnvelope()`, `isPreSessionType()`.
+- **Envelope schema** — Effect `Schema` definitions for every message
+  type, plus `Envelope` as a discriminated union and helpers like
+  `buildEnvelope()`, `messageEnvelope()`, `isPreSessionType()`.
 - **Branded IDs** — `JobId`, `SessionId`, `MessageId`, `TraceId`, and
   `EventSeq` are brand types; you cannot mix them up by accident, and
   schema validation enforces format constraints (e.g., `TraceId` must
   be 32 lowercase hex chars).
-- **Error taxonomy** — one class per code in `ERROR_CODES`; the base
-  is `ARCPError`. All errors carry a structured `ErrorPayload` for
-  wire emission.
+- **Error taxonomy** — one class per code in `ERROR_CODES` (15 codes
+  in v1.1); the base is `ARCPError`. All errors carry a structured
+  `ErrorPayload` for wire emission. An Effect-tagged twin
+  (`TaggedAgentNotAvailable`, etc.) lives in `errors-tagged.ts` for
+  typed-error pipelines.
 - **Transports** — `Transport` interface plus three implementations:
   `MemoryTransport` (pair via `pairMemoryTransports()`),
   `StdioTransport`, `WebSocketTransport` + `startWebSocketServer()`.
+  Each also exposes an Effect-shaped twin
+  (`memoryTransportEffect`, `stdioTransportEffect`,
+  `websocketTransportEffect`) producing `Stream`-based incoming.
 - **Session state** — `SessionState` is the phase machine
-  (`pre-handshake` → `awaiting-welcome` → `accepted` → `closed`), and
+  (`opening` → `accepted` → `closing | rejected`), and
   `PendingRegistry` tracks awaiting request/response correlations.
-- **Event log** — `EventLog` interface with a SQLite-backed default
-  for replay during resume (§6.3).
+  `SessionStateService` is the Effect-shaped twin backed by a
+  `SynchronizedRef` for concurrent fibers.
+- **Event log** — `EventLog` class (SQLite-backed via
+  `better-sqlite3`, defaults to `:memory:`) for replay during resume
+  (§6.3). Effect-aware callers use `EventLogService` + `eventLogLayer`.
 - **Auth verifier** — `BearerVerifier` interface and
-  `StaticBearerVerifier` for tests.
-- **Capability negotiation** — `negotiateCapabilities()` computes the
-  intersection of advertised features, with `V1_1_FEATURES` as the
-  default opt-in set.
+  `StaticBearerVerifier` for tests, with `BearerVerifierService` and
+  `staticBearerVerifierLayer` for Effect consumers.
+- **Capability negotiation** — `negotiateCapabilities()` and
+  `intersectFeatures()` compute the effective feature set, with
+  `V1_1_FEATURES` as the default opt-in.
+- **Logging** — `rootLogger` / `sessionLogger(parent, sessionId)` /
+  `silentLogger` (pino), plus `PinoLogger` and `LoggerLayer` for
+  Effect's logger.
 
 See [packages/core.md](./packages/core.md).
 
@@ -82,9 +95,18 @@ See [packages/client.md](./packages/client.md).
 
 Two main classes: `ARCPServer` and `SessionContext`. `ARCPServer`
 holds the agent registry and shared resources (event log, bearer
-verifier, idempotency cache); `SessionContext` is created per
-accepted transport and runs the per-session machinery (dispatch,
-heartbeat, ack tracking, subscription set).
+verifier, idempotency cache); `SessionContext` (in
+`session-context.ts`) is created per accepted transport and runs the
+per-session machinery (dispatch, heartbeat, ack tracking,
+subscription set). `JobRunner` (`job-runner.ts`) drives a single
+in-flight job through its state machine.
+
+An Effect-native surface lives alongside the class API:
+`ARCPRuntimeLayer` / `ARCPServerService` (and `makeARCPServerRuntime`)
+wrap the server in a `ManagedRuntime`; `JobService` / `jobLayer` and
+`JobManagerService` / `jobManagerLayer` expose the per-job pipeline;
+`acceptSessionEffect` and `resumeSweepDaemon` are the Effect-shaped
+entry points for the same lifecycle the class drives via callbacks.
 
 Agents are functions registered by name:
 
@@ -141,7 +163,7 @@ Every message is one JSON object with a small fixed envelope:
 | ------------ | ---------------------------------------- | ---------------------------------------------------- |
 | `arcp`       | always                                   | `"1.1"` (the v1.1 wire-format version literal)       |
 | `id`         | always                                   | ULID or UUIDv7, unique per message                   |
-| `type`       | always                                   | discriminator (`"session.hello"`, `"job.submit"`, …) |
+| `type`       | always                                   | discriminator (`"session.hello"`, `"job.submit"`, ...) |
 | `payload`    | always                                   | type-specific body                                   |
 | `session_id` | after handshake                          | absent on pre-session frames                         |
 | `job_id`     | job-scoped envelopes                     | set on `job.*` types                                 |
@@ -156,7 +178,7 @@ round-tripped per §15 — see [vendor-extensions.md](./guides/vendor-extensions
 
 - Envelope schemas: [`packages/core/src/envelope.ts`](../packages/core/src/envelope.ts) and [`packages/core/src/messages/`](../packages/core/src/messages/)
 - Transports: [`packages/core/src/transport/`](../packages/core/src/transport/)
-- Client: [`packages/client/src/client.ts`](../packages/client/src/client.ts)
-- Server + dispatch: [`packages/runtime/src/server.ts`](../packages/runtime/src/server.ts)
-- Job + JobContext: [`packages/runtime/src/job.ts`](../packages/runtime/src/job.ts)
-- Lease validation: [`packages/runtime/src/lease.ts`](../packages/runtime/src/lease.ts)
+- Client: [`packages/client/src/client.ts`](../packages/client/src/client.ts); Effect twin: [`packages/client/src/client-effect.ts`](../packages/client/src/client-effect.ts)
+- Server + dispatch: [`packages/runtime/src/server.ts`](../packages/runtime/src/server.ts) and [`packages/runtime/src/session-context.ts`](../packages/runtime/src/session-context.ts); Effect twin: [`packages/runtime/src/server-effect.ts`](../packages/runtime/src/server-effect.ts)
+- Job + JobContext + JobRunner: [`packages/runtime/src/job.ts`](../packages/runtime/src/job.ts), [`packages/runtime/src/job-context.ts`](../packages/runtime/src/job-context.ts), [`packages/runtime/src/job-runner.ts`](../packages/runtime/src/job-runner.ts); Effect twins: [`packages/runtime/src/job-effect.ts`](../packages/runtime/src/job-effect.ts)
+- Lease validation: [`packages/runtime/src/lease.ts`](../packages/runtime/src/lease.ts); Effect twin: [`packages/runtime/src/lease-effect.ts`](../packages/runtime/src/lease-effect.ts)

docs/architecture.md

@@ -1,7 +1,7 @@
 # CLI
 
 The `@agentruntimecontrolprotocol/sdk` package ships an `arcp` binary. It's a thin
-operational tool for running runtimes, submitting jobs, and replaying
+operational tool for running runtimes, submitting jobs, and inspecting
 event logs.
 
 ## Install
@@ -16,11 +16,15 @@ If you've cloned the monorepo, the binary is at
 [`packages/sdk/src/cli.ts`](../packages/sdk/src/cli.ts) and can be run
 with `pnpm tsx`.
 
+Run `arcp --version` to print the implementation and protocol versions
+(e.g., `0.2.0 (protocol 1.1)`).
+
 ## `arcp serve`
 
-Start a runtime that hosts a single named echo-style agent. Most
-real deployments embed `ARCPServer` programmatically; `serve` is for
-ad-hoc testing and reproductions.
+Start a runtime that accepts a configurable bearer token. Most real
+deployments embed `ARCPServer` programmatically; `serve` is for ad-hoc
+testing and reproductions, and registers no agents by default — submits
+return `AGENT_NOT_AVAILABLE` unless you wire your own server.
 
 ```sh
 arcp serve \
@@ -32,15 +36,18 @@ arcp serve \
 
 Flags:
 
-| Flag                      | Default     | Notes                                             |
-| ------------------------- | ----------- | ------------------------------------------------- |
-| `--transport <ws\|stdio>` | `ws`        | `stdio` makes this a subprocess agent.            |
-| `--host <host>`           | `127.0.0.1` | Bind address for WebSocket.                       |
-| `--port <port>`           | `7777`      | Bind port for WebSocket.                          |
-| `--path <path>`           | `/arcp`     | URL path for the WS upgrade.                      |
-| `--token <token>`         | —           | Required. Static bearer accepted by the verifier. |
-| `--principal <id>`        | —           | Principal returned when the token verifies.       |
-| `--db <path>`             | none        | If set, persist events to this SQLite file.       |
+| Flag                      | Default          | Notes                                                                   |
+| ------------------------- | ---------------- | ----------------------------------------------------------------------- |
+| `--transport <ws\|stdio>` | `ws`             | `stdio` makes this a subprocess agent.                                  |
+| `--host <host>`           | `127.0.0.1`      | Bind address for WebSocket.                                             |
+| `--port <port>`           | `0` (ephemeral)  | Bind port for WebSocket. The bound URL is printed to stdout.            |
+| `--token <token>`         | `tok`            | Static bearer accepted by the verifier.                                 |
+| `--principal <id>`        | `anonymous`      | Principal returned when the token verifies.                             |
+| `--db <path>`             | `:memory:`       | SQLite event log path. Defaults to an in-memory log (not persisted).    |
+
+`startWebSocketServer` accepts every connection on the root path; there
+is no `--path` flag. For path-routed mounts on an existing `http.Server`
+use [`attachArcpUpgrade`](./packages/node.md) instead.
 
 ## `arcp submit`
 
@@ -49,7 +56,7 @@ and CI.
 
 ```sh
 arcp submit \
-  --url ws://127.0.0.1:7777/arcp \
+  --url ws://127.0.0.1:7777 \
   --token tok \
   --agent my-agent \
   --input '{"hi":1}' \
@@ -58,55 +65,70 @@ arcp submit \
 
 Flags:
 
-| Flag                      | Notes                             |
-| ------------------------- | --------------------------------- |
-| `--url <ws-url>`          | Runtime URL.                      |
-| `--token <token>`         | Bearer token.                     |
-| `--agent <name>`          | Registered agent name.            |
-| `--input <json>`          | Inline JSON payload.              |
-| `--input-file <path>`     | Read payload from a file.         |
-| `--idempotency-key <key>` | Optional dedupe key (§7.2).       |
-| `--max-runtime-sec <n>`   | Hard wall clock for the job.      |
-| `--lease <json>`          | Lease object (§9).                |
-| `--trace-id <hex>`        | 32-hex W3C trace id to propagate. |
-
-Stdout receives the final `job.result` payload as JSON; the process
-exit code is `0` on `success`, non-zero otherwise. Events are streamed
-to stderr in a human-readable form (`[seq] kind message`).
+| Flag                      | Notes                                                   |
+| ------------------------- | ------------------------------------------------------- |
+| `--url <ws-url>`          | Required. Runtime WebSocket URL.                        |
+| `--token <token>`         | Required. Bearer token.                                 |
+| `--agent <name>`          | Required. Registered agent name (`name` or `name@ver`). |
+| `--input <json>`          | Inline JSON payload. Default `{}`.                      |
+| `--idempotency-key <key>` | Optional dedupe key (§7.2).                             |
+| `--max-runtime <sec>`     | Hard wall clock for the job, in seconds.                |
+
+Stdout receives the final `job.result` / `job.error` payload as JSON.
+The process exits non-zero on submission failure or a rejected promise.
+Per-event streaming is not built into the CLI; for that, use the SDK
+programmatically and register `client.on("job.event", ...)`.
+
+For richer submit flags (lease, lease constraints, trace id, file
+input), drive `ARCPClient` directly — the CLI is intentionally minimal.
 
 ## `arcp replay`
 
-Replay events from a SQLite event log. Useful for postmortems and for
+Dump events from a SQLite event log. Useful for postmortems and for
 testing resume behavior offline.
 
 ```sh
 arcp replay \
   --db arcp.db \
-  --session sess_01J4XY… \
+  --session sess_01J4XY... \
   --after-seq 0
 ```
 
 Flags:
 
-| Flag              | Notes                                  |
-| ----------------- | -------------------------------------- |
-| `--db <path>`     | SQLite event log to read.              |
-| `--session <id>`  | Filter to a specific session.          |
-| `--job <id>`      | Filter to a specific job.              |
-| `--after-seq <n>` | Start strictly after this `event_seq`. |
-| `--until-seq <n>` | Stop at this `event_seq`.              |
+| Flag              | Notes                                                                   |
+| ----------------- | ----------------------------------------------------------------------- |
+| `--db <path>`     | Required. SQLite event log to read (opened read-only).                  |
+| `--session <id>`  | Required. Filter to a specific session.                                 |
+| `--after-seq <n>` | Start strictly after this `event_seq`. Default `0`.                     |
 
-Events are printed one per line, newest envelope at the bottom.
+Events are printed one envelope per line as JSON, oldest first.
+
+## `arcp manifest`
+
+Print the CLI's package manifest (name, implementation version, and
+protocol version) as JSON. Useful for tooling that needs to assert the
+on-disk binary matches an expected version.
+
+```sh
+arcp manifest
+# → { "name": "arcp", "version": "0.2.0", "protocol_version": "1.1" }
+```
 
 ## stdio
 
 `--transport stdio` makes `arcp serve` read envelopes from stdin and
 write them to stdout. The runtime is the child; the parent process is
 the ARCP client. Pipe agent logs to stderr or silence them — any
-non-envelope byte on stdout will crash the channel.
+non-envelope byte on stdout will crash the channel. On startup the
+child writes a single readiness line (`arcp serve: stdio transport
+ready`) to **stderr**, not stdout, so the wire stays clean.
+
+```ts
+// In a parent process:
+import { spawn } from "node:child_process";
+import { StdioTransport } from "@agentruntimecontrolprotocol/sdk";
 
-```sh
-# In a parent process:
 const child = spawn("arcp", [
   "serve", "--transport", "stdio",
   "--token", "tok", "--principal", "me",
@@ -118,12 +140,3 @@ const transport = new StdioTransport({
 ```
 
 See [transports.md#stdio](./transports.md#stdio) for the full pattern.
-
-## Exit codes
-
-| Code | Meaning                                                   |
-| ---- | --------------------------------------------------------- |
-| 0    | Job completed with `final_status: "success"`.             |
-| 1    | Runtime/server error (auth, bind failure, unknown agent). |
-| 2    | Job terminated with `error`, `cancelled`, or `timed_out`. |
-| 64   | Bad CLI arguments.                                        |