@ume/contracts

Shared TypeScript types and utilities for UME Group AS. This package defines the data contracts between Includu, Admetise, and the Player.

Public repository. This repo is intentionally public so Cloudflare Workers Builds (NGI) and CI can install @ume-group/contracts from GitHub Packages without authentication tokens. Verified 2026-03-29: contains only TypeScript type definitions and OpenAPI specifications — no secrets, API keys, or business logic. Any future EA audit should re-verify before adding sensitive content. See EA audit session log.

Setup

npm run build    # Compile with tsc
npm run dev      # Watch mode
npm run test     # Run tests

Exports

import { type Project, type Overlay, type PublishedManifest } from '@ume/contracts';
import { type Layer2Scene, type WebcamComposite } from '@ume/contracts/layer2';
import { type ChromaKeySettings } from '@ume/contracts/segmentation';

Publishing

Published to GitHub Packages as @ume-group/contracts. Consuming repos use npm alias:

"@ume/contracts": "npm:@ume-group/contracts@^0.1.0"

Visibility Policy

This repository and its npm package are public. This is a deliberate architectural decision:

• Rationale: Eliminates npm auth token management across all Cloudflare Workers Builds and CI pipelines
• Prerequisite: Repository must ONLY contain TypeScript types, OpenAPI specs, and test code — no secrets, credentials, or proprietary business logic
• Governance: Any change adding sensitive content must first make the repo private and configure auth tokens per ea-core-pm-documentation
• Audit trail: Decision made 2026-03-29 by Jørgen Scheel (CTO), documented in session log