docs: add contract event schema documentation

.commitlintrc.json

@@ -0,0 +1,3 @@
+{
+  "extends": ["@commitlint/config-conventional"]
+}

.env.example

@@ -0,0 +1,45 @@
+# Server Configuration
+PORT=3000
+NODE_ENV=development
+CORS_ALLOWED_ORIGINS=http://localhost:3000,http://localhost:5173
+
+# API Keys (comma-separated for multiple keys, legacy auth)
+API_KEYS=your-api-key-here,another-api-key
+
+# JWT Authentication (#245)
+JWT_SECRET=change-me-use-a-long-random-secret
+
+# Stellar Configuration
+# Default network when X-Network header is absent (testnet | mainnet)
+STELLAR_NETWORK=testnet
+
+# Testnet
+TESTNET_RPC_URL=https://soroban-testnet.stellar.org
+TESTNET_STREAM_CONTRACT_ID=your-testnet-stream-contract-id
+TESTNET_TOKEN_CONTRACT_ID=your-testnet-token-contract-id
+TESTNET_DATABASE_URL=postgres://paystream:password@localhost:5432/paystream_testnet
+
+# Mainnet
+MAINNET_RPC_URL=https://mainnet.stellar.validationcloud.io/v1/soroban/rpc
+MAINNET_STREAM_CONTRACT_ID=your-mainnet-stream-contract-id
+MAINNET_TOKEN_CONTRACT_ID=your-mainnet-token-contract-id
+MAINNET_DATABASE_URL=postgres://paystream:password@localhost:5432/paystream_mainnet
+
+# Redis Configuration (for BullMQ job queue)
+REDIS_URL=redis://localhost:6379
+
+# Optional dependency probes
+DATABASE_URL=postgres://paystream:password@localhost:5432/paystream
+REDIS_URL=redis://127.0.0.1:6379
+
+# AWS Secrets Manager
+USE_AWS_SECRETS_MANAGER=false
+AWS_SECRETS_MANAGER_SECRET_NAME=paystream/secrets
+AWS_REGION=us-east-1
+
+# Rate Limiting
+RATE_LIMIT_WINDOW_MS=900000
+RATE_LIMIT_MAX_REQUESTS=100
+
+# Logging
+LOG_LEVEL=info

.github/CODEOWNERS

@@ -0,0 +1,20 @@
+# Smart contract files
+/contracts/ @security-team
+src/lib.rs @security-team
+src/contract*.rs @security-team
+
+# CI/CD pipelines and configuration
+.github/workflows/ @devops-team
+Dockerfile @devops-team
+docker-compose.yml @devops-team
+Makefile @devops-team
+
+# Root configuration files
+Cargo.toml @devops-team
+Cargo.lock @devops-team
+rust-toolchain.toml @devops-team
+
+# Documentation and policies
+SECURITY.md @security-team
+CONTRIBUTING.md @security-team
+DEPLOYMENT_CHECKLIST.md @devops-team

.github/ISSUE_TEMPLATE/bug_report.md

@@ -0,0 +1,33 @@
+---
+name: Bug Report
+about: Report a bug to help us improve
+title: "[BUG] "
+labels: bug
+assignees: ''
+
+---
+
+## Description
+A clear and concise description of what the bug is.
+
+## Steps to Reproduce
+1. Go to '...'
+2. Click on '...'
+3. See error
+
+## Expected Behavior
+A clear description of what you expected to happen.
+
+## Actual Behavior
+What actually happened instead.
+
+## Environment
+- OS: [e.g., macOS, Linux]
+- Rust version: [output of `rustc --version`]
+- Soroban SDK version: [e.g., 22.0.0]
+
+## Additional Context
+Any other context about the problem here.
+
+## References
+See [CONTRIBUTING.md](../CONTRIBUTING.md) for contribution guidelines.

.github/ISSUE_TEMPLATE/feature_request.md

@@ -0,0 +1,26 @@
+---
+name: Feature Request
+about: Suggest an idea for this project
+title: "[FEATURE] "
+labels: enhancement
+assignees: ''
+
+---
+
+## Description
+A clear and concise description of the feature you'd like to see.
+
+## Use Case
+Explain the problem your feature solves. What's the user benefit?
+
+## Proposed Solution
+How do you think this feature should work?
+
+## Alternatives Considered
+Any alternative approaches you've considered.
+
+## Additional Context
+Any other context or screenshots.
+
+## References
+See [CONTRIBUTING.md](../CONTRIBUTING.md) for contribution guidelines.

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,31 @@
+## Description
+Brief description of the changes in this PR.
+
+## Type of Change
+- [ ] Bug fix (non-breaking change that fixes an issue)
+- [ ] New feature (non-breaking change that adds functionality)
+- [ ] Breaking change (fix or feature that would cause existing functionality to change)
+- [ ] Documentation update
+- [ ] Chore (dependency updates, configuration changes)
+
+## Changes Checklist
+- [ ] My code follows the style guidelines of this project
+- [ ] I have performed a self-review of my own code
+- [ ] I have commented my code, particularly in hard-to-understand areas
+- [ ] I have made corresponding changes to the documentation
+- [ ] My changes generate no new warnings
+- [ ] I have added tests that prove my fix is effective or that my feature works
+- [ ] New and existing unit tests pass locally with my changes
+- [ ] Any dependent changes have been merged and published
+
+## Testing
+Describe the tests you ran and how to reproduce them.
+
+## Breaking Changes
+Describe any breaking changes and migration path for users.
+
+## References
+Closes #
+
+---
+See [CONTRIBUTING.md](../CONTRIBUTING.md) for more details.

.github/dependabot.yml

@@ -0,0 +1,61 @@
+version: 2
+updates:
+  - package-ecosystem: "cargo"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 10
+    commit-message:
+      prefix: "chore"
+      include: "scope"
+    groups:
+      patch-updates:
+        update-types:
+          - "patch"
+
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 10
+    commit-message:
+      prefix: "chore"
+      include: "scope"
+    groups:
+      patch-updates:
+        update-types:
+          - "patch"
+
+  - package-ecosystem: "npm"
+    directory: "/demo"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 10
+    commit-message:
+      prefix: "chore"
+      include: "scope"
+    groups:
+      patch-updates:
+        update-types:
+          - "patch"
+
+  - package-ecosystem: "npm"
+    directory: "/sdk"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 10
+    commit-message:
+      prefix: "chore"
+      include: "scope"
+    groups:
+      patch-updates:
+        update-types:
+          - "patch"
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    commit-message:
+      prefix: "chore"
+      include: "scope"

.github/workflows/audit.yml

@@ -20,7 +20,7 @@ jobs:
         uses: dtolnay/rust-toolchain@stable
 
       - name: Cache cargo audit binary
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: ~/.cargo/bin/cargo-audit
           key: cargo-audit-${{ runner.os }}-v0.21

.github/workflows/ci.yml

@@ -24,7 +24,7 @@ jobs:
           components: rustfmt, clippy
 
       - name: Cache cargo
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: |
             ~/.cargo/registry
@@ -34,13 +34,62 @@ jobs:
           restore-keys: ${{ runner.os }}-cargo-
 
       - name: Check formatting
-        run: cargo fmt --check
+        run: make fmt-check
 
       - name: Clippy
-        run: cargo clippy --all-targets -- -D warnings
+        run: make lint
 
       - name: Test
-        run: cargo test
+        run: make test
+
+  coverage:
+    name: Coverage
+    runs-on: ubuntu-latest
+    needs: test
+    permissions:
+      pull-requests: write
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Install Rust toolchain
+        uses: dtolnay/rust-toolchain@master
+        with:
+          toolchain: stable
+          components: llvm-tools-preview
+
+      - name: Cache cargo
+        uses: actions/cache@v5
+        with:
+          path: |
+            ~/.cargo/registry
+            ~/.cargo/git
+            target
+          key: ${{ runner.os }}-cargo-cov-${{ hashFiles('**/Cargo.lock') }}
+          restore-keys: ${{ runner.os }}-cargo-cov-
+
+      - name: Install cargo-llvm-cov
+        uses: taiki-e/install-action@v2
+        with:
+          tool: cargo-llvm-cov
+
+      - name: Generate coverage
+        run: cargo llvm-cov --all-features --lcov --output-path lcov.info
+
+      - name: Upload to Codecov
+        uses: codecov/codecov-action@v6
+        with:
+          files: lcov.info
+          fail_ci_if_error: true
+        env:
+          CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
+
+      - name: Post coverage comment on PR
+        if: github.event_name == 'pull_request'
+        uses: romeovs/lcov-reporter-action@v0.4.0
+        with:
+          lcov-file: lcov.info
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          delete-old-comments: true
 
   build-wasm:
     name: Build WASM
@@ -56,7 +105,7 @@ jobs:
           targets: wasm32-unknown-unknown
 
       - name: Cache cargo
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: |
             ~/.cargo/registry
@@ -77,3 +126,46 @@ jobs:
         with:
           name: wasm-contracts
           path: target/wasm32-unknown-unknown/release/*.wasm
+  geiger:
+    name: Unsafe Code Check
+    runs-on: ubuntu-latest
+    needs: test
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Install Rust toolchain
+        uses: dtolnay/rust-toolchain@master
+        with:
+          toolchain: stable
+
+      - name: Cache cargo
+        uses: actions/cache@v5
+        with:
+          path: |
+            ~/.cargo/registry
+            ~/.cargo/git
+            target
+          key: ${{ runner.os }}-cargo-geiger-${{ hashFiles('**/Cargo.lock') }}
+          restore-keys: ${{ runner.os }}-cargo-geiger-
+
+      - name: Install cargo-geiger
+        uses: taiki-e/install-action@v2
+        with:
+          tool: cargo-geiger
+
+      - name: Run cargo-geiger
+        run: cargo geiger --all-features --deny-unsafe
+
+  commitlint:
+    name: Lint Commit Messages
+    runs-on: ubuntu-latest
+    if: github.event_name == 'pull_request'
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+      - run: npm install --save-dev @commitlint/cli@19 @commitlint/config-conventional@19
+      - run: npx commitlint --from ${{ github.event.pull_request.base.sha }} --to ${{ github.event.pull_request.head.sha }} --verbose

.github/workflows/codeql.yml

@@ -20,12 +20,12 @@ jobs:
       - uses: actions/checkout@v4
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v3
+        uses: github/codeql-action/init@v4
         with:
           languages: rust
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@v3
+        uses: github/codeql-action/autobuild@v4
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v3
+        uses: github/codeql-action/analyze@v4