Update examples and README

Author: federicociner

src/examples/README.md

@@ -99,4 +99,10 @@ Or run the WebSocket client:
 npx tsx src/examples/ws-client.ts
 ```
 
-The HTTP example sends a bearer token through custom request headers. The WebSocket example passes the Node `ws` constructor so custom headers can be sent during the WebSocket handshake. Browser WebSocket clients can use `createWebSocketStream` too, but browsers do not allow custom WebSocket headers.
+The HTTP example sends a bearer token through custom request headers. `createHttpStream` includes cookies by default for the lifetime of one stream: it sends credentials on fetch requests, captures exposed `Set-Cookie` headers, merges them with caller-provided `Cookie` headers, and reuses them for connection SSE, session SSE, POST, and DELETE requests. Pass `cookies: "omit"` to disable this behavior for stateless transports.
+
+The WebSocket server example uses `createNodeWebSocketUpgradeHandler`, which creates the ACP connection before the upgrade completes and adds `Acp-Connection-Id` to the `101 Switching Protocols` response. Frameworks that only expose an already-upgraded WebSocket socket cannot add that response header, so prefer an upgrade hook when building compliant servers.
+
+The WebSocket client example passes the Node `ws` constructor so custom headers can be sent during the WebSocket handshake. Browser WebSocket clients can use `createWebSocketStream` too, but browsers do not allow custom WebSocket headers. Use cookies or URL-level authentication for browser WebSocket authentication instead of relying on custom handshake headers.
+
+The included Node HTTP server is an HTTP/1.1 compatibility adapter. HTTP/2 deployment guidance is still tracked separately in the transport hardening plan.

src/examples/http-client.ts

@@ -34,8 +34,7 @@ const stream = createHttpStream(serverUrl, {
   headers: {
     Authorization: "Bearer example-token",
   },
-  // To use cookies, pass a cookie-aware fetch implementation here instead of relying on a built-in cookie jar.
-  // fetch: cookieAwareFetch,
+  // Cookies are included by default and scoped to this stream. Use `cookies: "omit"` for stateless requests.
 });
 const connection = new acp.ClientSideConnection(
   (_agent) => new HttpExampleClient(),

src/examples/http-server.ts

@@ -71,6 +71,7 @@ const acpServer = new AcpServer({
 });
 const acpHttpHandler = createNodeHttpHandler(acpServer);
 const webSocketServer = new WebSocketServer({ noServer: true });
+// Use the ACP upgrade helper so the 101 response includes Acp-Connection-Id.
 const acpWebSocketUpgradeHandler = createNodeWebSocketUpgradeHandler(
   acpServer,
   webSocketServer,