v3: full TypeScript monorepo rewrite (C#-aligned wire format)

.gitattributes

@@ -0,0 +1 @@
+* text=auto eol=lf

.github/workflows/ci.yml

@@ -0,0 +1,157 @@
+name: ci
+
+on:
+  push:
+    branches: ['**']
+  pull_request:
+    branches: ['**']
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+# A new push to a PR / branch cancels the previous in-flight run for the same ref.
+concurrency:
+  group: ci-${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  build-and-test:
+    name: Build + unit tests (${{ matrix.os }})
+    runs-on: ${{ matrix.os }}
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, windows-latest]
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22.x
+          cache: pnpm
+      - name: Install
+        run: pnpm install --frozen-lockfile
+      - name: Build (packages)
+        run: pnpm exec turbo run build --filter='!@serviceconnect/website'
+      # Lint is OS-independent; run it once (Linux) to avoid redundant work and CRLF noise.
+      - name: Lint
+        if: matrix.os == 'ubuntu-latest'
+        run: pnpm lint
+      # Cross-platform unit suites only. The MongoDB and stress packages rely on
+      # Testcontainers (Docker / Linux containers) and run in the Linux-only jobs below.
+      - name: Unit tests
+        run: >-
+          pnpm exec turbo run test
+          --filter=@serviceconnect/core
+          --filter=@serviceconnect/telemetry
+          --filter=@serviceconnect/healthchecks
+          --filter=@serviceconnect/persistence-memory
+          --filter=@serviceconnect/rabbitmq
+
+  e2e:
+    name: E2E + MongoDB integration (Linux)
+    runs-on: ubuntu-latest
+    # Testcontainers spins up RabbitMQ + MongoDB; ubuntu-latest runners have Docker preinstalled.
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22.x
+          cache: pnpm
+      - name: Install
+        run: pnpm install --frozen-lockfile
+      - name: Build (packages)
+        run: pnpm exec turbo run build --filter='!@serviceconnect/website'
+      - name: MongoDB store tests
+        run: pnpm --filter @serviceconnect/persistence-mongodb test
+      - name: RabbitMQ end-to-end tests
+        run: pnpm --filter @serviceconnect/rabbitmq test:e2e
+
+  pack-validate:
+    name: Pack validation (dry-run)
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22.x
+          cache: pnpm
+      - name: Install
+        run: pnpm install --frozen-lockfile
+      - name: Build (packages)
+        run: pnpm exec turbo run build --filter='!@serviceconnect/website'
+      - name: Pack publishable packages
+        run: |
+          mkdir -p "$GITHUB_WORKSPACE/artifacts"
+          pnpm --filter='./packages/*' exec -- npm pack --pack-destination "$GITHUB_WORKSPACE/artifacts"
+      - name: List produced tarballs
+        run: ls -la artifacts/
+      - name: Upload tarballs
+        uses: actions/upload-artifact@v4
+        with:
+          name: npm-tarballs
+          path: artifacts/*.tgz
+          if-no-files-found: error
+          retention-days: 14
+
+  stress-smoke:
+    name: Stress smoke (Linux)
+    needs: build-and-test
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22.x
+          cache: pnpm
+      - name: Install
+        run: pnpm install --frozen-lockfile
+      - name: Build (packages)
+        run: pnpm exec turbo run build --filter='!@serviceconnect/website'
+      - name: Stress smoke
+        run: pnpm --filter @serviceconnect/stress-harness smoke
+      - name: Upload report on failure
+        if: failure()
+        uses: actions/upload-artifact@v4
+        with:
+          name: stress-smoke-report
+          path: harness/stress/out/
+
+  examples-smoke:
+    name: Examples smoke (Linux)
+    needs: build-and-test
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22.x
+          cache: pnpm
+      - name: Install
+        run: pnpm install --frozen-lockfile
+      - name: Build (packages)
+        run: pnpm exec turbo run build --filter='!@serviceconnect/website'
+      - name: Run all examples
+        run: bash examples/run-all.sh

.github/workflows/docs.yml

@@ -0,0 +1,54 @@
+name: docs
+
+on:
+  push:
+    branches: [master]
+    paths:
+      - 'website/**'
+      - '.github/workflows/docs.yml'
+  workflow_dispatch: {}
+
+permissions:
+  contents: read
+  pages: write
+  id-token: write
+
+concurrency:
+  group: pages
+  cancel-in-progress: false
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22.x
+          cache: pnpm
+      - name: Install
+        run: pnpm install --frozen-lockfile
+      - name: Build website (Astro + Starlight)
+        run: pnpm --filter @serviceconnect/website build
+      - name: Setup Pages
+        uses: actions/configure-pages@v5
+      - name: Upload Pages artifact
+        uses: actions/upload-pages-artifact@v3
+        with:
+          path: website/dist
+
+  deploy:
+    needs: build
+    if: github.ref == 'refs/heads/master'
+    runs-on: ubuntu-latest
+    environment:
+      name: github-pages
+      url: ${{ steps.deployment.outputs.page_url }}
+    steps:
+      - name: Deploy to GitHub Pages
+        id: deployment
+        uses: actions/deploy-pages@v4

.github/workflows/release.yml

@@ -0,0 +1,103 @@
+name: release
+
+# Triggered on a `v*` tag push (e.g. `v1.0.0`, or a pre-release `v1.0.0-beta.1`). The tag value
+# drives the published version for every package — release the same source tree against a new tag
+# by retagging, not by editing package.json versions. Pre-release tags (those with a SemVer
+# `-suffix`) publish under the `next` dist-tag instead of `latest`, so `npm install <pkg>` never
+# picks them up — the npm equivalent of a NuGet pre-release.
+
+on:
+  push:
+    tags:
+      - 'v*'
+  workflow_dispatch:
+    inputs:
+      version:
+        description: 'Version override (without leading v). Used only for manual dispatch; tag pushes use the tag value.'
+        required: false
+
+permissions:
+  contents: read
+
+jobs:
+  release:
+    name: Build + publish to npm
+    runs-on: ubuntu-latest
+    environment:
+      name: npm
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          # Full history so the release guard can test whether the tagged commit is contained in
+          # origin/master; the ancestry walk needs the commit graph, not just the tag tip.
+          fetch-depth: 0
+
+      # Releases are cut from master only. A v* tag (or a manual dispatch ref) can point at any
+      # commit, so gate the publish on the tagged commit being reachable from origin/master: a tag
+      # pushed on a feature branch fails here, before anything is built or published.
+      - name: Verify tag is on master
+        run: |
+          git fetch origin master --quiet
+          if ! git merge-base --is-ancestor "$GITHUB_SHA" origin/master; then
+            echo "::error::Tag ${GITHUB_REF#refs/tags/} ($GITHUB_SHA) is not contained in origin/master; refusing to release."
+            exit 1
+          fi
+          echo "Tag commit $GITHUB_SHA is contained in origin/master — proceeding."
+
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22.x
+          cache: pnpm
+          registry-url: https://registry.npmjs.org
+
+      - name: Resolve and validate version
+        id: version
+        run: |
+          if [ -n "${{ inputs.version }}" ]; then
+            VERSION="${{ inputs.version }}"
+          else
+            # github.ref is "refs/tags/v1.0.0"; strip the prefix.
+            VERSION="${GITHUB_REF#refs/tags/v}"
+          fi
+          # Validate SemVer (with optional pre-release / build metadata).
+          if ! echo "$VERSION" | grep -Eq '^[0-9]+\.[0-9]+\.[0-9]+(-[0-9A-Za-z.-]+)?(\+[0-9A-Za-z.-]+)?$'; then
+            echo "::error::'$VERSION' is not a valid SemVer version."
+            exit 1
+          fi
+          # Pre-release tags (anything with a "-suffix") publish under the `next` dist-tag.
+          if echo "$VERSION" | grep -q '-'; then DIST_TAG=next; else DIST_TAG=latest; fi
+          echo "version=$VERSION" >> "$GITHUB_OUTPUT"
+          echo "dist_tag=$DIST_TAG" >> "$GITHUB_OUTPUT"
+          echo "Resolved version: $VERSION (dist-tag: $DIST_TAG)"
+
+      - name: Install
+        run: pnpm install --frozen-lockfile
+
+      # The tag is the single source of truth for the version, so stamp it onto every workspace
+      # package. pnpm rewrites the internal `workspace:*` dependencies to this version on publish.
+      - name: Set package versions from tag
+        run: pnpm -r exec -- npm pkg set version="${{ steps.version.outputs.version }}"
+
+      - name: Build
+        run: pnpm build
+
+      # Re-run the full suite against the exact tagged commit before publishing. CI already gates
+      # merges to master, but a tag can point at any commit and npm versions cannot be unpublished
+      # after 72h — a green run here is the last line of defence.
+      - name: Lint
+        run: pnpm lint
+      - name: Tests
+        run: pnpm test
+      - name: RabbitMQ end-to-end tests
+        run: pnpm --filter @serviceconnect/rabbitmq test:e2e
+
+      - name: Publish to npm
+        # --no-git-checks because the version stamp above leaves the tree dirty.
+        run: pnpm -r publish --access public --no-git-checks --tag "${{ steps.version.outputs.dist_tag }}"
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

.github/workflows/soak.yml

@@ -0,0 +1,36 @@
+name: soak
+
+on:
+  schedule:
+    - cron: "0 2 * * *"
+  workflow_dispatch: {}
+
+permissions:
+  contents: read
+
+jobs:
+  soak:
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22.x
+          cache: pnpm
+      - name: Install
+        run: pnpm install --frozen-lockfile
+      - name: Build
+        run: pnpm build
+      - name: Soak
+        run: pnpm --filter @serviceconnect/stress-harness exec tsx src/index.ts --mode soak --duration 300 --memory-budget-mb 256
+      - name: Upload report
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: soak-report
+          path: harness/stress/out/