chore: rename PyPI distribution to agentruntimecontrolprotocol

Renames the distribution from `arcp` to `agentruntimecontrolprotocol`
and reorganizes dependencies into extras so users can opt into
runtime-only deps (`pip install agentruntimecontrolprotocol[runtime]`).
Import name stays `arcp` — no code changes required.

Extras: `[client]` (alias), `[runtime]` adds aiosqlite + pyjwt[crypto],
`[otel]` adds opentelemetry-api, `[jwks]` adds httpx, `[all]` pulls in
everything. Default install keeps websockets + click so `import arcp`
and the CLI work out of the box.

Publish workflow now also creates a GitHub Release with the wheel +
sdist attached on every `v*` tag — GitHub Packages has no native
Python registry, so Releases is the equivalent surface.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: nficano

.github/workflows/publish.yml

@@ -1,22 +1,18 @@
-name: Publish to PyPI
+name: Publish
 
 on:
   push:
     tags:
       - "v*"
 
 permissions:
-  id-token: write  # Required for OIDC trusted publishing
-  contents: read
+  id-token: write  # OIDC trusted publishing to PyPI
+  contents: write  # Creating GitHub Releases
 
 jobs:
-  build-and-publish:
-    name: Build and publish to PyPI
+  build:
+    name: Build sdist + wheel
     runs-on: ubuntu-latest
-    environment:
-      name: pypi
-      url: https://pypi.org/p/arcp
-
     steps:
       - uses: actions/checkout@v6
 
@@ -31,5 +27,52 @@ jobs:
       - name: Build package
         run: hatch build
 
+      - name: Upload build artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: dist
+          path: dist/
+
+  publish-pypi:
+    name: Publish to PyPI
+    needs: build
+    runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: https://pypi.org/p/agentruntimecontrolprotocol
+    steps:
+      - name: Download build artifacts
+        uses: actions/download-artifact@v4
+        with:
+          name: dist
+          path: dist/
+
       - name: Publish to PyPI
         uses: pypa/gh-action-pypi-publish@release/v1
+
+  publish-github-release:
+    name: Publish GitHub Release
+    needs: build
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+
+      - name: Download build artifacts
+        uses: actions/download-artifact@v4
+        with:
+          name: dist
+          path: dist/
+
+      # Attaches the wheel + sdist to a GitHub Release for the pushed
+      # tag. GitHub Packages has no native Python registry, so this is
+      # the "GitHub-hosted" distribution surface — users can
+      # `pip install` directly from the release URL if they need an
+      # off-PyPI source.
+      - name: Create GitHub Release
+        uses: softprops/action-gh-release@v2
+        with:
+          files: |
+            dist/*.whl
+            dist/*.tar.gz
+          generate_release_notes: true
+          fail_on_unmatched_files: true

Makefile

@@ -1,4 +1,4 @@
-.PHONY: diagrams
+.PHONY: diagrams build clean publish publish-test
 
 DIAGRAMS := arch-overview session-lifecycle job-lifecycle capability-negotiation heartbeat-ack result-chunk-progress
 DIAGRAM_DIR := docs/diagrams
@@ -11,3 +11,15 @@ diagrams:
 		echo "rendering $$name-dark.svg"; \
 		dot -Tsvg $(DIAGRAM_DIR)/$$name-dark.dot  -o $(DIAGRAM_DIR)/$$name-dark.svg; \
 	done
+
+clean:
+	rm -rf dist build *.egg-info
+
+build: clean
+	uv build
+
+# Publish to PyPI. Reads credentials from ~/.pypirc ([pypi] section) by
+# default; override with UV_PUBLISH_TOKEN if you'd rather not touch the
+# rc file. Run `make build` first or this target will fail.
+publish: build
+	uv publish

pyproject.toml

@@ -1,24 +1,48 @@
 [project]
-name = "arcp"
+name = "agentruntimecontrolprotocol"
 version = "1.1.0"
 description = "Reference Python implementation of the Agent Runtime Control Protocol (ARCP) v1.1"
 readme = "README.md"
 requires-python = ">=3.11"
 license = { text = "Apache-2.0" }
 authors = [{ name = "ARCP Reference" }]
+# Core (always installed): everything `import arcp` and the `arcp` CLI
+# need out of the box — envelope, messages, transports (stdio,
+# in-memory, websocket), and the CLI replay tool. Heavier server-side
+# deps live in extras below.
 dependencies = [
     "pydantic>=2.13.4,<3",
-    "aiosqlite>=0.22.1",
-    "websockets>=16.0",
     "structlog>=25.5.0",
-    "pyjwt[crypto]>=2.13.0",
-    "click>=8.4.1",
     "python-ulid>=3.1.0",
-    "opentelemetry-api>=1.42.1,<2",
+    "websockets>=16.0",
+    "click>=8.4.1",
 ]
 
 [project.optional-dependencies]
+# `pip install agentruntimecontrolprotocol[client]` — client side.
+# Everything you need is already in core; this extra exists for
+# symmetry with `[runtime]` and for forward compatibility.
+client = []
+# `pip install agentruntimecontrolprotocol[runtime]` — required to
+# `import arcp.runtime`. Adds JWT bearer verification and sqlite-backed
+# event logs.
+runtime = [
+    "aiosqlite>=0.22.1",
+    "pyjwt[crypto]>=2.13.0",
+]
+# OpenTelemetry middleware (`arcp.middleware.otel`).
+otel = [
+    "opentelemetry-api>=1.42.1,<2",
+]
+# JWKS fetching for `JWTVerifier` over HTTPS.
 jwks = ["httpx>=0.28.1"]
+# Everything — pulls in runtime + otel + jwks.
+all = [
+    "aiosqlite>=0.22.1",
+    "pyjwt[crypto]>=2.13.0",
+    "opentelemetry-api>=1.42.1,<2",
+    "httpx>=0.28.1",
+]
 
 [dependency-groups]
 dev = [