@pulog/contract 0.0.0-stage → 0.1.0

package/README.md

@@ -1,3 +1,14 @@
-# Temporary Holding Version
+# @pulog/contract
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Host <-> remote prop contract: `RemoteAppProps`, `CONTRACT_VERSION`, user/master types, maintenance types and the
+standalone handoff protocol. Dependency-free.
+
+Source: `src/contract.ts`, copied byte-for-byte from `tms_host/src/types/contract.ts`.
+
+**Status:** prepared, not consumed yet. `tms_host/src/types/contract.ts` is still the master and remotes still use
+`scripts/sync-contract.mjs`. When the host migrates, move the master here, delete the sync scripts, and bump
+`CONTRACT_VERSION` only for breaking prop/semantics changes (see the workspace CLAUDE.md).
+
+```ts
+import { CONTRACT_VERSION, type RemoteAppProps } from '@pulog/contract'
+```

package/dist/index.d.ts

@@ -0,0 +1,196 @@
+/**
+ * Bump when Host↔Remote props/semantics change in a way remotes must notice.
+ * Remotes without a declared version are treated as compatible with v1 (non-breaking).
+ * Host must not hard-fail on missing/older versions in production without a migration plan.
+ */
+declare const CONTRACT_VERSION = 1;
+interface User {
+    name: string;
+    email: string;
+    role?: string;
+}
+interface UserModule {
+    module: string;
+    role: string;
+    key_module: string;
+    url: string;
+    image_module: string;
+    platform: string;
+    id_module: number;
+    local_url: string;
+    api_url: string;
+    [key: string]: any;
+}
+interface DecodedUser {
+    username: string;
+    session_token: string;
+    full_name?: string;
+    nik?: string;
+    phone?: string;
+    wa_number?: string;
+    type?: string;
+    entity?: string;
+    division?: string;
+    department?: string;
+    position?: string;
+    email?: string;
+    address?: string;
+    image_url?: string;
+    project_name?: string;
+    work_location?: string;
+    [key: string]: any;
+}
+/** User profile returned by the SSO check-general-user endpoint. */
+interface SSOUserData {
+    id: number;
+    username: string;
+    full_name: string;
+    email: string;
+    is_confirm: boolean;
+    device_id: string | null;
+    type: string;
+    entity: string;
+    nik: string;
+    fullname: string;
+    address: string | null;
+    phone: string;
+    wa_number: string;
+    is_active: boolean;
+    image_url: string | null;
+    division: string;
+    department: string;
+    position: string;
+    customer_slug: string;
+    last_update_password_date: string;
+    project_name: string | null;
+    work_location: string | null;
+    mst_client_id: number[];
+    mst_entity_id: number[];
+    [key: string]: any;
+}
+interface MasterClient {
+    id?: number;
+    [key: string]: unknown;
+}
+interface MasterEntity {
+    id: number;
+    mst_client_id: number;
+    [key: string]: unknown;
+}
+interface MasterCustomer {
+    id: number;
+    erp_account_number: string;
+    erp_customer_id: string;
+    customer_name: string;
+    mst_entity_id?: string[];
+    [key: string]: unknown;
+}
+interface MenuItem {
+    id: number;
+    remote_access: string;
+    base_url: string;
+    menu_name: string;
+    menu_url: string;
+    menu_icon: string;
+    menu_parent: number;
+    menu_order: number;
+    visibility: boolean | string;
+    component: string;
+    access: string[];
+    /** Menu-level maintenance flag set via tms_remote_access (Kelola Menu). */
+    maintenance?: boolean;
+    children?: MenuItem[];
+}
+type MaintenanceScope = 'remote' | 'menu';
+interface MaintenanceSchedule {
+    scope: MaintenanceScope;
+    /** Remote slug (remote_access) for scope 'remote', or menu_url for scope 'menu'. */
+    target: string;
+    /** Server timestamp (epoch ms) when maintenance becomes active. */
+    startsAt: number;
+    /** Estimated completion timestamp (epoch ms). */
+    endsAt?: number;
+    /** Countdown length the admin configured (e.g. 60). */
+    noticeSeconds: number;
+    reason?: string;
+    /** Admin-authored maintenance message (HTML from the remark rich-text editor) — sanitize before rendering. */
+    remark?: string;
+}
+/** SSE event names broadcast by the backend (authoritative set). */
+type MaintenanceEventType = 'warning' | 'countdown' | 'active' | 'resolved';
+interface RemoteAppProps {
+    user: User | null;
+    token: string | null;
+    currentPath: string;
+    onLogout: () => void;
+    onNavigate?: (path: string) => void;
+    userModules?: UserModule[];
+    currentModule?: UserModule;
+    ssoData?: DecodedUser;
+    userData?: SSOUserData;
+    clientData?: MasterClient[];
+    entityData?: MasterEntity[];
+    customerData?: MasterCustomer[];
+    /** Active role selected via the host's role switcher (auth.roleActive). */
+    roleActive?: string;
+    menus?: MenuItem[];
+    debugSource?: 'host' | 'standalone';
+    isDark?: boolean;
+    palette?: string;
+    /** BCP 47 locale selected by the host (e.g. `en`, `id-ID`). */
+    locale?: string;
+    /**
+     * Optional. Host may send CONTRACT_VERSION so remotes can log/adapt.
+     * Omitted by older hosts — remotes must treat missing as v1-compatible.
+     */
+    contractVersion?: number;
+}
+/** Query param carrying only a correlation nonce — never auth data. */
+declare const MFE_HANDOFF_QUERY_PARAM = "mfe_handoff";
+/** remote -> host: "I'm loaded and ready to receive the payload." */
+declare const MFE_HANDOFF_READY = "mfe:handoff-ready";
+/** host -> remote: the actual session/masterdata payload. */
+declare const MFE_HANDOFF_PAYLOAD = "mfe:handoff-payload";
+/** How long the host waits for a "ready" reply (and the remote waits for the payload) before giving up. */
+declare const MFE_HANDOFF_TIMEOUT_MS = 9000;
+interface MfeHandoffPayload {
+    user?: User | null;
+    token?: string | null;
+    /** JWT from the host's auth/token API (localStorage `tms_jwt_token`). Persisted by the
+     *  remote under its own `tms_jwt_token` key, never inside `tms_auth`. */
+    jwtToken?: string | null;
+    ssoData?: DecodedUser;
+    userData?: SSOUserData;
+    clientData?: MasterClient[];
+    entityData?: MasterEntity[];
+    customerData?: MasterCustomer[];
+    userModules?: UserModule[];
+    currentModule?: UserModule;
+    /** Active role selected via the host's role switcher (auth.roleActive). */
+    roleActive?: string;
+    menus?: MenuItem[];
+    /** Same trio the host already passes when embedding (RemoteAppProps) — sent here
+     *  so a standalone tab opened from the sidebar starts from the host's state too.
+     *  Remotes are free to ignore them (theme stays local in standalone). */
+    isDark?: boolean;
+    palette?: string;
+    /** BCP 47 locale selected by the host (e.g. `en`, `id-ID`). */
+    locale?: string;
+    /** Host contract version at handoff time; omit to mean v1-compatible. */
+    contractVersion?: number;
+}
+interface MfeHandoffReadyMessage {
+    type: typeof MFE_HANDOFF_READY;
+    nonce: string;
+}
+interface MfeHandoffPayloadMessage {
+    type: typeof MFE_HANDOFF_PAYLOAD;
+    nonce: string;
+    payload: MfeHandoffPayload;
+}
+declare function isMfeHandoffReadyMessage(data: unknown): data is MfeHandoffReadyMessage;
+declare function isMfeHandoffPayloadMessage(data: unknown): data is MfeHandoffPayloadMessage;
+declare function sanitizeHandoffPayload(payload: Record<string, unknown>): MfeHandoffPayload;
+
+export { CONTRACT_VERSION, MFE_HANDOFF_PAYLOAD, MFE_HANDOFF_QUERY_PARAM, MFE_HANDOFF_READY, MFE_HANDOFF_TIMEOUT_MS, isMfeHandoffPayloadMessage, isMfeHandoffReadyMessage, sanitizeHandoffPayload };
+export type { DecodedUser, MaintenanceEventType, MaintenanceSchedule, MaintenanceScope, MasterClient, MasterCustomer, MasterEntity, MenuItem, MfeHandoffPayload, MfeHandoffPayloadMessage, MfeHandoffReadyMessage, RemoteAppProps, SSOUserData, User, UserModule };

package/dist/index.js

@@ -0,0 +1,27 @@
+// src/contract.ts
+var CONTRACT_VERSION = 1;
+var MFE_HANDOFF_QUERY_PARAM = "mfe_handoff";
+var MFE_HANDOFF_READY = "mfe:handoff-ready";
+var MFE_HANDOFF_PAYLOAD = "mfe:handoff-payload";
+var MFE_HANDOFF_TIMEOUT_MS = 9e3;
+function isPlainRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isMfeHandoffReadyMessage(data) {
+  return isPlainRecord(data) && data.type === MFE_HANDOFF_READY && typeof data.nonce === "string";
+}
+function isMfeHandoffPayloadMessage(data) {
+  return isPlainRecord(data) && data.type === MFE_HANDOFF_PAYLOAD && typeof data.nonce === "string" && isPlainRecord(data.payload);
+}
+function sanitizeHandoffPayload(payload) {
+  const clean = {};
+  for (const key of Object.keys(payload)) {
+    if (key === "__proto__" || key === "constructor" || key === "prototype") continue;
+    clean[key] = payload[key];
+  }
+  return clean;
+}
+
+export { CONTRACT_VERSION, MFE_HANDOFF_PAYLOAD, MFE_HANDOFF_QUERY_PARAM, MFE_HANDOFF_READY, MFE_HANDOFF_TIMEOUT_MS, isMfeHandoffPayloadMessage, isMfeHandoffReadyMessage, sanitizeHandoffPayload };
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/contract.ts"],"names":[],"mappings":";AAsBO,IAAM,gBAAA,GAAmB;AA2MzB,IAAM,uBAAA,GAA0B;AAEhC,IAAM,iBAAA,GAAoB;AAE1B,IAAM,mBAAA,GAAsB;AAE5B,IAAM,sBAAA,GAAyB;AAwCtC,SAAS,cAAc,KAAA,EAAkD;AACvE,EAAA,OAAO,OAAO,UAAU,QAAA,IAAY,KAAA,KAAU,QAAQ,CAAC,KAAA,CAAM,QAAQ,KAAK,CAAA;AAC5E;AAQO,SAAS,yBAAyB,IAAA,EAA+C;AACtF,EAAA,OAAO,aAAA,CAAc,IAAI,CAAA,IAAK,IAAA,CAAK,SAAS,iBAAA,IAAqB,OAAO,KAAK,KAAA,KAAU,QAAA;AACzF;AAEO,SAAS,2BAA2B,IAAA,EAAiD;AAC1F,EAAA,OACE,aAAA,CAAc,IAAI,CAAA,IAClB,IAAA,CAAK,IAAA,KAAS,mBAAA,IACd,OAAO,IAAA,CAAK,KAAA,KAAU,QAAA,IACtB,aAAA,CAAc,IAAA,CAAK,OAAO,CAAA;AAE9B;AAMO,SAAS,uBAAuB,OAAA,EAAqD;AAC1F,EAAA,MAAM,QAAiC,EAAC;AACxC,EAAA,KAAA,MAAW,GAAA,IAAO,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA,EAAG;AACtC,IAAA,IAAI,GAAA,KAAQ,WAAA,IAAe,GAAA,KAAQ,aAAA,IAAiB,QAAQ,WAAA,EAAa;AACzE,IAAA,KAAA,CAAM,GAAG,CAAA,GAAI,OAAA,CAAQ,GAAG,CAAA;AAAA,EAC1B;AACA,EAAA,OAAO,KAAA;AACT","file":"index.js","sourcesContent":["// ─────────────────────────────────────────────────────────────────────────────\r\n// HOST ↔ REMOTE CONTRACT — SINGLE SOURCE OF TRUTH\r\n//\r\n// Master copy: mfe-host/src/types/contract.ts\r\n// Synced copies (must stay byte-identical):\r\n//   - tms_billing/src/types/contract.ts\r\n//   - tms_master_data/src/types/contract.ts\r\n//   - tms_remote_access/src/types/contract.ts\r\n//\r\n// Do not edit a remote's copy directly — edit the master here, then run\r\n// `node scripts/sync-contract.mjs --write` in each remote. A sync-check\r\n// (`node scripts/sync-contract.mjs` or `npm run check:contract`) compares the\r\n// two and fails on drift.\r\n//\r\n// Keep this file dependency-free.\r\n// ─────────────────────────────────────────────────────────────────────────────\r\n\r\n/**\r\n * Bump when Host↔Remote props/semantics change in a way remotes must notice.\r\n * Remotes without a declared version are treated as compatible with v1 (non-breaking).\r\n * Host must not hard-fail on missing/older versions in production without a migration plan.\r\n */\r\nexport const CONTRACT_VERSION = 1\r\n\r\n// ─────────────────────────────────────────────────────────────────────────────\r\n// PERFORMANCE CONTRACT (applies to every remote and to the host mount site)\r\n//\r\n// 1. Every context Provider mounted above/around a remote-facing tree MUST wrap\r\n//    its `value={...}` in useMemo, and every function in that value MUST be\r\n//    useCallback-wrapped. Reference implementations: tms_host's\r\n//    src/components/ui/sidebar.tsx (SidebarContext) and tms_master_data's\r\n//    src/context/MenuAccessContext.tsx (MenuAccessContext).\r\n// 2. Any prop crossing the Host→Remote boundary (RemoteAppProps below) that is\r\n//    an array, object, or function MUST be referentially stable across\r\n//    re-renders that do not change its logical value — i.e. it must come from\r\n//    useMemo/useCallback or from state that is only replaced on real updates,\r\n//    never from an inline literal or arrow function in JSX.\r\n// 3. The remote's exposed `./App` component MUST be wrapped in React.memo.\r\n//    The host's <RemoteApp> mount wrapper MUST also be wrapped in React.memo.\r\n// 4. Background/polling work (analytics, telemetry, sync) MUST: (a) run via\r\n//    requestIdleCallback (or an equivalent yield point), never synchronously\r\n//    on the critical path of a mount effect; (b) enforce a retention/eviction\r\n//    bound on any client-side storage it writes to; (c) use indexed queries\r\n//    (e.g. Dexie .where()) instead of .filter() over an unbounded collection.\r\n// ─────────────────────────────────────────────────────────────────────────────\r\n\r\nexport interface User {\r\n  name: string\r\n  email: string\r\n  role?: string\r\n}\r\n\r\nexport interface UserModule {\r\n  module: string\r\n  role: string\r\n  key_module: string\r\n  url: string\r\n  image_module: string\r\n  platform: string\r\n  id_module: number\r\n  local_url: string\r\n  api_url: string\r\n  [key: string]: any\r\n}\r\n\r\nexport interface DecodedUser {\r\n  username: string\r\n  session_token: string\r\n  full_name?: string\r\n  nik?: string\r\n  phone?: string\r\n  wa_number?: string\r\n  type?: string\r\n  entity?: string\r\n  division?: string\r\n  department?: string\r\n  position?: string\r\n  email?: string\r\n  address?: string\r\n  image_url?: string\r\n  project_name?: string\r\n  work_location?: string\r\n  [key: string]: any\r\n}\r\n\r\n/** User profile returned by the SSO check-general-user endpoint. */\r\nexport interface SSOUserData {\r\n  id: number\r\n  username: string\r\n  full_name: string\r\n  email: string\r\n  is_confirm: boolean\r\n  device_id: string | null\r\n  type: string\r\n  entity: string\r\n  nik: string\r\n  fullname: string\r\n  address: string | null\r\n  phone: string\r\n  wa_number: string\r\n  is_active: boolean\r\n  image_url: string | null\r\n  division: string\r\n  department: string\r\n  position: string\r\n  customer_slug: string\r\n  last_update_password_date: string\r\n  project_name: string | null\r\n  work_location: string | null\r\n  mst_client_id: number[]\r\n  mst_entity_id: number[]\r\n  [key: string]: any\r\n}\r\n\r\nexport interface MasterClient {\r\n  id?: number\r\n  [key: string]: unknown\r\n}\r\n\r\nexport interface MasterEntity {\r\n  id: number\r\n  mst_client_id: number\r\n  [key: string]: unknown\r\n}\r\n\r\nexport interface MasterCustomer {\r\n  id: number\r\n  erp_account_number: string\r\n  erp_customer_id: string\r\n  customer_name: string\r\n  // API returns a Postgres array literal string (e.g. \"{1,2}\"); host normalizes it to\r\n  // a plain string array (e.g. [\"1\",\"2\"]) before this reaches remotes.\r\n  mst_entity_id?: string[]\r\n  [key: string]: unknown\r\n}\r\n\r\n\r\nexport interface MenuItem {\r\n  id: number\r\n  remote_access: string\r\n  base_url: string\r\n  menu_name: string\r\n  menu_url: string\r\n  menu_icon: string\r\n  menu_parent: number\r\n  menu_order: number\r\n  visibility: boolean | string\r\n  component: string\r\n  access: string[]\r\n  /** Menu-level maintenance flag set via tms_remote_access (Kelola Menu). */\r\n  maintenance?: boolean\r\n  children?: MenuItem[]\r\n}\r\n\r\n// ─────────────────────────────────────────────────────────────────────────────\r\n// MAINTENANCE SCHEDULING (host)\r\n//\r\n// Super admin schedules maintenance (remote- or menu-level) via tms_remote_access\r\n// by submitting the existing save endpoints with extra `countdown` +\r\n// `estimate_time` payload. The backend then broadcasts SSE events\r\n// (WARNING → COUNTDOWN ticks → ACTIVE → RESOLVED) carrying absolute server\r\n// timestamps; the host derives the schedule from those events.\r\n// ─────────────────────────────────────────────────────────────────────────────\r\n\r\nexport type MaintenanceScope = 'remote' | 'menu'\r\n\r\nexport interface MaintenanceSchedule {\r\n  scope: MaintenanceScope\r\n  /** Remote slug (remote_access) for scope 'remote', or menu_url for scope 'menu'. */\r\n  target: string\r\n  /** Server timestamp (epoch ms) when maintenance becomes active. */\r\n  startsAt: number\r\n  /** Estimated completion timestamp (epoch ms). */\r\n  endsAt?: number\r\n  /** Countdown length the admin configured (e.g. 60). */\r\n  noticeSeconds: number\r\n  reason?: string\r\n  /** Admin-authored maintenance message (HTML from the remark rich-text editor) — sanitize before rendering. */\r\n  remark?: string\r\n}\r\n\r\n/** SSE event names broadcast by the backend (authoritative set). */\r\nexport type MaintenanceEventType = 'warning' | 'countdown' | 'active' | 'resolved'\r\n\r\n// Props passed Host → Remote (received by the remote's exposed `App`).\r\nexport interface RemoteAppProps {\r\n  user: User | null\r\n  token: string | null\r\n  currentPath: string\r\n  onLogout: () => void\r\n  onNavigate?: (path: string) => void\r\n  userModules?: UserModule[]\r\n  currentModule?: UserModule\r\n  ssoData?: DecodedUser\r\n  userData?: SSOUserData\r\n  clientData?: MasterClient[]\r\n  entityData?: MasterEntity[]\r\n  customerData?: MasterCustomer[]\r\n  /** Active role selected via the host's role switcher (auth.roleActive). */\r\n  roleActive?: string\r\n  menus?: MenuItem[]\r\n  debugSource?: 'host' | 'standalone'\r\n  isDark?: boolean\r\n  palette?: string\r\n  /** BCP 47 locale selected by the host (e.g. `en`, `id-ID`). */\r\n  locale?: string\r\n  /**\r\n   * Optional. Host may send CONTRACT_VERSION so remotes can log/adapt.\r\n   * Omitted by older hosts — remotes must treat missing as v1-compatible.\r\n   */\r\n  contractVersion?: number\r\n}\r\n\r\n// ─────────────────────────────────────────────────────────────────────────────\r\n// STANDALONE HANDOFF PROTOCOL (postMessage)\r\n//\r\n// When a host sidebar group is opened standalone (window.open, not federated),\r\n// session/masterdata is handed to the remote via a postMessage handshake instead\r\n// of a URL param — no data ever sits in the URL, and there is no practical size\r\n// limit. See tms_host/src/mf/remoteHandoff.ts (sender) and\r\n// tms_master_data/src/standalone/handoff.ts (receiver) for the implementation,\r\n// and that remote's src/standalone/README.md for the full sequence diagram.\r\n// ─────────────────────────────────────────────────────────────────────────────\r\n\r\n/** Query param carrying only a correlation nonce — never auth data. */\r\nexport const MFE_HANDOFF_QUERY_PARAM = 'mfe_handoff'\r\n/** remote -> host: \"I'm loaded and ready to receive the payload.\" */\r\nexport const MFE_HANDOFF_READY = 'mfe:handoff-ready'\r\n/** host -> remote: the actual session/masterdata payload. */\r\nexport const MFE_HANDOFF_PAYLOAD = 'mfe:handoff-payload'\r\n/** How long the host waits for a \"ready\" reply (and the remote waits for the payload) before giving up. */\r\nexport const MFE_HANDOFF_TIMEOUT_MS = 9000\r\n\r\nexport interface MfeHandoffPayload {\r\n  user?: User | null\r\n  token?: string | null\r\n  /** JWT from the host's auth/token API (localStorage `tms_jwt_token`). Persisted by the\r\n   *  remote under its own `tms_jwt_token` key, never inside `tms_auth`. */\r\n  jwtToken?: string | null\r\n  ssoData?: DecodedUser\r\n  userData?: SSOUserData\r\n  clientData?: MasterClient[]\r\n  entityData?: MasterEntity[]\r\n  customerData?: MasterCustomer[]\r\n  userModules?: UserModule[]\r\n  currentModule?: UserModule\r\n  /** Active role selected via the host's role switcher (auth.roleActive). */\r\n  roleActive?: string\r\n  menus?: MenuItem[]\r\n  /** Same trio the host already passes when embedding (RemoteAppProps) — sent here\r\n   *  so a standalone tab opened from the sidebar starts from the host's state too.\r\n   *  Remotes are free to ignore them (theme stays local in standalone). */\r\n  isDark?: boolean\r\n  palette?: string\r\n  /** BCP 47 locale selected by the host (e.g. `en`, `id-ID`). */\r\n  locale?: string\r\n  /** Host contract version at handoff time; omit to mean v1-compatible. */\r\n  contractVersion?: number\r\n}\r\n\r\nexport interface MfeHandoffReadyMessage {\r\n  type: typeof MFE_HANDOFF_READY\r\n  nonce: string\r\n}\r\n\r\nexport interface MfeHandoffPayloadMessage {\r\n  type: typeof MFE_HANDOFF_PAYLOAD\r\n  nonce: string\r\n  payload: MfeHandoffPayload\r\n}\r\n\r\nfunction isPlainRecord(value: unknown): value is Record<string, unknown> {\r\n  return typeof value === 'object' && value !== null && !Array.isArray(value)\r\n}\r\n\r\n// The real security boundary for the handoff is the event.source/event.origin\r\n// check each side already does before ever calling these — postMessage's origin\r\n// is set by the browser from the actual sender and cannot be spoofed by a page\r\n// script. These are defense-in-depth on top of that: never touch event.data's\r\n// shape (even from a same-origin sender) without validating it first, so a bug\r\n// upstream can't smuggle an unexpected structure into localStorage.\r\nexport function isMfeHandoffReadyMessage(data: unknown): data is MfeHandoffReadyMessage {\r\n  return isPlainRecord(data) && data.type === MFE_HANDOFF_READY && typeof data.nonce === 'string'\r\n}\r\n\r\nexport function isMfeHandoffPayloadMessage(data: unknown): data is MfeHandoffPayloadMessage {\r\n  return (\r\n    isPlainRecord(data) &&\r\n    data.type === MFE_HANDOFF_PAYLOAD &&\r\n    typeof data.nonce === 'string' &&\r\n    isPlainRecord(data.payload)\r\n  )\r\n}\r\n\r\n// Drop __proto__/constructor/prototype own-keys before the payload is destructured\r\n// or persisted. JSON.parse/object-spread don't let these mutate a real prototype by\r\n// themselves, but this keeps it that way even if a future change deep-merges this\r\n// object somewhere downstream.\r\nexport function sanitizeHandoffPayload(payload: Record<string, unknown>): MfeHandoffPayload {\r\n  const clean: Record<string, unknown> = {}\r\n  for (const key of Object.keys(payload)) {\r\n    if (key === '__proto__' || key === 'constructor' || key === 'prototype') continue\r\n    clean[key] = payload[key]\r\n  }\r\n  return clean as MfeHandoffPayload\r\n}\r\n"]}

package/package.json

@@ -1,6 +1,31 @@
 {
   "name": "@pulog/contract",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.0",
+  "description": "Host <-> remote prop contract (RemoteAppProps, CONTRACT_VERSION, handoff protocol). Dependency-free.",
+  "license": "UNLICENSED",
+  "type": "module",
+  "sideEffects": false,
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "main": "./dist/index.js",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "typecheck": "tsc --noEmit -p tsconfig.json",
+    "prepublishOnly": "npm run build"
+  }
+}