docs: plain English for the long docs, and keep the npm lock's version in step - #197

A second plain-English pass over the docs, after #139, plus four small fixes to the docs and release config.

Plain English

docs/CONSUMING.md and docs/SESSION-STATE.md follow the same rules #139 used: short sentences, one idea each, and em-dash chains and semicolon lists turned into sentences, bullets or tables. #139 only lightly touched CONSUMING, and never touched SESSION-STATE.

Counted in prose, outside code blocks:

SESSION-STATE keeps three em-dashes, all in code blocks that quote what the runtime actually prints. Every heading is unchanged, so links into either page still work.

Every function, class, environment variable and default the two pages name was checked against src/. Four things were wrong:

• CONSUMING said SESSION-STATE has six worked scenarios. It has four.
• CONSUMING said the web client speaks seven routes. There are eight since GET /threads.
• CONSUMING called mcp_agent_api three layers, above a table of four.
• The README listed the state route as GET /threads/{id}/state. It is GET /threads/{id}/state/{key}.

SESSION-STATE's Snapshot sketch now matches the code: a NamedTuple holding a TurnState.

History a reader no longer needs

• CONSUMING §6, "Migrating off the in-repo workspace", is gone. It was for the two repos that copied the runtime before it was a package, and both have since moved to PyPI. "Upgrading to 0.11" is now §6. The README's mentions of the old packages went with it.
• Release numbers cited as evidence in CONTRIBUTING. "The two most recent releases show it: 0.9.1… 0.9.0…" stopped being true several releases ago.
• "now" and "has always" measured against versions nobody runs: a 422 that a client "now" gets, a container that "has always seen /mcp", what "every consumer got before this was configurable", what a host "has today".
• The agui-events example's bug log ("What running it has caught"), which said "both of these" above a single bug fixed months ago. A line about "an earlier version of this example" went too.

The 0.10 to 0.11 upgrade guide stays: anyone still on 0.10 needs it.

Small fixes

• The npm lock keeps its version. release-please bumped js/mcp-view/package.json but not package-lock.json, which was still at 0.10.3. The lock's two version fields are now extra-files, and caught up to 0.11.0 by hand.
• CONTRIBUTING says which commit types release. docs does, on its own. build, so every dependency bump, does not.
• The README says --install also writes AGENTS.md, and that every route answers 503 while the agent is not built.
• docs/proposals/ is ignored. Local design notes were swept into pushed commits three times.

This is a docs commit, so it cuts 0.11.1, which also ships the fastapi and typer bumps merged today.

🤖 Generated with Claude Code