@bernierllc/contentful-webhook-handler 1.0.13 → 1.2.0

package/dist/__tests__/errors.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/__tests__/errors.test.js

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+/*
+Copyright (c) 2025 Bernier LLC
+*/
+const errors_1 = require("../errors");
+describe('ContentfulWebhookHandlerError', () => {
+    it('uses default code when none provided', () => {
+        const err = new errors_1.ContentfulWebhookHandlerError('boom');
+        expect(err.name).toBe('ContentfulWebhookHandlerError');
+        expect(err.code).toBe('CONTENTFUL_WEBHOOK_HANDLER_ERROR');
+        expect(err.message).toBe('boom');
+        expect(err.cause).toBeUndefined();
+        expect(err.context).toBeUndefined();
+    });
+    it('preserves cause and context', () => {
+        const cause = new Error('root');
+        const err = new errors_1.ContentfulWebhookHandlerError('wrap', { cause, code: 'OPERATION_FAILED', context: { foo: 'bar' } });
+        expect(err.cause).toBe(cause);
+        expect(err.code).toBe('OPERATION_FAILED');
+        expect(err.context).toEqual({ foo: 'bar' });
+    });
+    it('omits context when not provided', () => {
+        const err = new errors_1.ContentfulWebhookHandlerError('msg', { code: 'INVALID_INPUT' });
+        expect(err.code).toBe('INVALID_INPUT');
+        expect(err.context).toBeUndefined();
+    });
+});

package/dist/errors.d.ts

@@ -0,0 +1,11 @@
+export type ContentfulWebhookHandlerErrorCode = 'CONTENTFUL_WEBHOOK_HANDLER_ERROR' | 'INVALID_INPUT' | 'OPERATION_FAILED';
+export interface ContentfulWebhookHandlerErrorOptions {
+    cause?: Error;
+    code?: ContentfulWebhookHandlerErrorCode;
+    context?: Record<string, unknown>;
+}
+export declare class ContentfulWebhookHandlerError extends Error {
+    readonly code: ContentfulWebhookHandlerErrorCode;
+    readonly context?: Record<string, unknown>;
+    constructor(message: string, options?: ContentfulWebhookHandlerErrorOptions);
+}

package/dist/errors.js

@@ -0,0 +1,24 @@
+"use strict";
+/*
+Copyright (c) 2025 Bernier LLC
+
+This file is licensed to the client under a limited-use license.
+The client may use and modify this code only within the scope of the project it was delivered for.
+Redistribution or use in other products or commercial offerings is not permitted without written consent from Bernier LLC.
+*/
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ContentfulWebhookHandlerError = void 0;
+class ContentfulWebhookHandlerError extends Error {
+    code;
+    context;
+    constructor(message, options) {
+        super(message, options?.cause ? { cause: options.cause } : undefined);
+        this.name = 'ContentfulWebhookHandlerError';
+        this.code = options?.code ?? 'CONTENTFUL_WEBHOOK_HANDLER_ERROR';
+        if (options?.context !== undefined) {
+            this.context = options.context;
+        }
+        Error.captureStackTrace?.(this, this.constructor);
+    }
+}
+exports.ContentfulWebhookHandlerError = ContentfulWebhookHandlerError;

package/dist/index.d.ts

@@ -1,2 +1,3 @@
 export { ContentfulWebhookHandler, WebhookValidationResult, EventType, ContentfulWebhookHandlerOptions } from './ContentfulWebhookHandler';
+export { ContentfulWebhookHandlerError, ContentfulWebhookHandlerErrorCode, ContentfulWebhookHandlerErrorOptions, } from './errors';
 export type { ContentfulWebhookPayload, ContentfulWebhookTopic, ContentfulWebhookHeaders } from '@bernierllc/contentful-types';

package/dist/index.js

@@ -7,6 +7,8 @@ The client may use and modify this code *only within the scope of the project it
 Redistribution or use in other products or commercial offerings is not permitted without written consent from Bernier LLC.
 */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ContentfulWebhookHandler = void 0;
+exports.ContentfulWebhookHandlerError = exports.ContentfulWebhookHandler = void 0;
 var ContentfulWebhookHandler_1 = require("./ContentfulWebhookHandler");
 Object.defineProperty(exports, "ContentfulWebhookHandler", { enumerable: true, get: function () { return ContentfulWebhookHandler_1.ContentfulWebhookHandler; } });
+var errors_1 = require("./errors");
+Object.defineProperty(exports, "ContentfulWebhookHandlerError", { enumerable: true, get: function () { return errors_1.ContentfulWebhookHandlerError; } });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bernierllc/contentful-webhook-handler",
-  "version": "1.0.13",
+  "version": "1.2.0",
   "description": "Validates Contentful webhook signatures using HMAC-SHA256, parses webhook payloads, and provides type-safe interfaces for all webhook event types",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -19,8 +19,8 @@
     "directory": "packages/core/contentful-webhook-handler"
   },
   "dependencies": {
-    "@bernierllc/logger": "1.4.3",
-    "@bernierllc/contentful-types": "1.2.2"
+    "@bernierllc/contentful-types": "1.4.0",
+    "@bernierllc/logger": "1.6.0"
   },
   "devDependencies": {
     "@types/jest": "^29.5.12",
@@ -32,6 +32,11 @@
     "ts-jest": "^29.1.2",
     "typescript": "^5.4.2"
   },
+  "files": [
+    "dist/**/*",
+    "LICENSE.md",
+    "README.md"
+  ],
   "publishConfig": {
     "access": "public",
     "registry": "https://registry.npmjs.org/"

package/.eslintrc.cjs

@@ -1,36 +0,0 @@
-/*
-Copyright (c) 2025 Bernier LLC
-
-This file is licensed to the client under a limited-use license.
-The client may use and modify this code *only within the scope of the project it was delivered for*.
-Redistribution or use in other products or commercial offerings is not permitted without written consent from Bernier LLC.
-*/
-
-module.exports = {
-  parser: '@typescript-eslint/parser',
-  parserOptions: {
-    ecmaVersion: 2022,
-    sourceType: 'module',
-    project: './tsconfig.json',
-  },
-  plugins: ['@typescript-eslint'],
-  extends: [
-    'eslint:recommended',
-    'plugin:@typescript-eslint/recommended',
-    'plugin:@typescript-eslint/recommended-requiring-type-checking',
-  ],
-  rules: {
-    '@typescript-eslint/no-explicit-any': 'error',
-    '@typescript-eslint/no-unused-vars': ['error', { argsIgnorePattern: '^_' }],
-    '@typescript-eslint/explicit-function-return-type': 'off',
-    '@typescript-eslint/explicit-module-boundary-types': 'off',
-    '@typescript-eslint/no-unsafe-assignment': 'warn',
-    '@typescript-eslint/no-unsafe-member-access': 'warn',
-    '@typescript-eslint/no-unsafe-call': 'warn',
-    '@typescript-eslint/no-unsafe-return': 'warn',
-  },
-  env: {
-    node: true,
-    jest: true,
-  },
-};

package/CHANGELOG.md

@@ -1,85 +0,0 @@
-# Change Log
-
-All notable changes to this project will be documented in this file.
-See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
-
-## [1.0.13](https://github.com/bernierllc/tools/compare/@bernierllc/contentful-webhook-handler@1.0.12...@bernierllc/contentful-webhook-handler@1.0.13) (2026-05-19)
-
-**Note:** Version bump only for package @bernierllc/contentful-webhook-handler
-
-
-
-
-
-## [1.0.12](https://github.com/bernierllc/tools/compare/@bernierllc/contentful-webhook-handler@1.0.11...@bernierllc/contentful-webhook-handler@1.0.12) (2026-05-19)
-
-**Note:** Version bump only for package @bernierllc/contentful-webhook-handler
-
-
-
-
-
-## [1.0.11](https://github.com/bernierllc/tools/compare/@bernierllc/contentful-webhook-handler@1.0.10...@bernierllc/contentful-webhook-handler@1.0.11) (2026-03-30)
-
-**Note:** Version bump only for package @bernierllc/contentful-webhook-handler
-
-
-
-
-
-## [1.0.10](https://github.com/bernierllc/tools/compare/@bernierllc/contentful-webhook-handler@1.0.9...@bernierllc/contentful-webhook-handler@1.0.10) (2026-03-09)
-
-**Note:** Version bump only for package @bernierllc/contentful-webhook-handler
-
-
-
-
-
-## [1.0.9](https://github.com/bernierllc/tools/compare/@bernierllc/contentful-webhook-handler@1.0.8...@bernierllc/contentful-webhook-handler@1.0.9) (2026-03-03)
-
-**Note:** Version bump only for package @bernierllc/contentful-webhook-handler
-
-
-
-
-
-## 1.0.8 (2025-12-25)
-
-
-### Bug Fixes
-
-* **ci:** add lerna version step before publish ([3d20300](https://github.com/bernierllc/tools/commit/3d203002143bf353fffafe4f8a78a99009567347))
-* **ci:** fix release workflow + convert internal deps to workspace:* ([01c078b](https://github.com/bernierllc/tools/commit/01c078b49d6025f7eef750f79207a1c71c8d85dc))
-* update neverhub-adapter deps to workspace:* and publish 0.1.2 ([f0e3d04](https://github.com/bernierllc/tools/commit/f0e3d04d8d4f094e3bb899ddf81e93243d16e2c2))
-
-
-
-
-
-## 1.0.7 (2025-12-25)
-
-
-### Bug Fixes
-
-* **ci:** fix release workflow + convert internal deps to workspace:* ([01c078b](https://github.com/bernierllc/tools/commit/01c078b49d6025f7eef750f79207a1c71c8d85dc))
-* update neverhub-adapter deps to workspace:* and publish 0.1.2 ([f0e3d04](https://github.com/bernierllc/tools/commit/f0e3d04d8d4f094e3bb899ddf81e93243d16e2c2))
-
-
-
-
-
-# @bernierllc/contentful-webhook-handler
-
-## 1.0.6
-
-### Patch Changes
-
-- Updated dependencies [[`73c1d1e`](https://github.com/bernierllc/tools/commit/73c1d1e46114cf2ccfd5b74b83743361247f4502)]:
-  - @bernierllc/logger@1.1.0
-
-## 1.0.5
-
-### Patch Changes
-
-- Updated dependencies [[`24899fa`](https://github.com/bernierllc/tools/commit/24899fa4eaf80ae329f7bd74483cf97a132f5d4c)]:
-  - @bernierllc/logger@1.0.4

package/jest.config.cjs

@@ -1,33 +0,0 @@
-/*
-Copyright (c) 2025 Bernier LLC
-
-This file is licensed to the client under a limited-use license.
-The client may use and modify this code *only within the scope of the project it was delivered for*.
-Redistribution or use in other products or commercial offerings is not permitted without written consent from Bernier LLC.
-*/
-
-module.exports = {
-  preset: 'ts-jest',
-  testEnvironment: '<rootDir>/../../../jest-environment-node-fixed.cjs',
-  roots: ['<rootDir>/src'],
-  testMatch: ['**/__tests__/**/*.test.ts'],
-  collectCoverageFrom: [
-    'src/**/*.ts',
-    '!src/**/*.test.ts',
-    '!src/**/__tests__/**',
-    '!src/index.ts'
-  ],
-  coverageThreshold: {
-    global: {
-      branches: 90,
-      functions: 90,
-      lines: 90,
-      statements: 90
-    }
-  },
-  coveragePathIgnorePatterns: [
-    '/node_modules/',
-    '/dist/',
-    '/__tests__/'
-  ]
-};

package/src/ContentfulWebhookHandler.ts

@@ -1,260 +0,0 @@
-/*
-Copyright (c) 2025 Bernier LLC
-
-This file is licensed to the client under a limited-use license.
-The client may use and modify this code *only within the scope of the project it was delivered for*.
-Redistribution or use in other products or commercial offerings is not permitted without written consent from Bernier LLC.
-*/
-
-import crypto from 'crypto';
-import {
-  ContentfulWebhookPayload,
-  ContentfulWebhookTopic,
-  ContentfulWebhookHeaders
-} from '@bernierllc/contentful-types';
-import { Logger, createLogger } from '@bernierllc/logger';
-
-export interface WebhookValidationResult {
-  valid: boolean;
-  error?: string;
-  payload?: ContentfulWebhookPayload;
-  topic?: ContentfulWebhookTopic;
-}
-
-export interface EventType {
-  resource: 'Entry' | 'Asset' | 'ContentType';
-  action: 'create' | 'save' | 'auto_save' | 'publish' | 'unpublish' | 'delete' | 'archive' | 'unarchive';
-}
-
-export interface ContentfulWebhookHandlerOptions {
-  webhookSecret: string;
-  logger?: Logger;
-  enableTimestampValidation?: boolean;
-  maxTimestampDeltaSeconds?: number;
-}
-
-/**
- * Validates Contentful webhook signatures using HMAC-SHA256,
- * parses webhook payloads, and provides type-safe interfaces
- * for all webhook event types.
- */
-export class ContentfulWebhookHandler {
-  private webhookSecret: string;
-  private logger: Logger;
-  private enableTimestampValidation: boolean;
-  private maxTimestampDeltaSeconds: number;
-
-  /**
-   * Creates a new ContentfulWebhookHandler instance
-   *
-   * @param options Configuration options
-   */
-  constructor(options: ContentfulWebhookHandlerOptions) {
-    this.webhookSecret = options.webhookSecret;
-    this.logger = options.logger || createLogger({
-      context: {
-        service: 'ContentfulWebhookHandler',
-        version: '1.0.0',
-        environment: process.env.NODE_ENV || 'development'
-      }
-    });
-    this.enableTimestampValidation = options.enableTimestampValidation ?? false;
-    this.maxTimestampDeltaSeconds = options.maxTimestampDeltaSeconds ?? 300; // 5 minutes default
-  }
-
-  /**
-   * Validates a webhook signature using HMAC-SHA256
-   *
-   * @param body Raw webhook body as string
-   * @param signature Signature from x-contentful-signature header
-   * @returns True if signature is valid
-   */
-  validateSignature(body: string, signature: string): boolean {
-    try {
-      const hmac = crypto.createHmac('sha256', this.webhookSecret);
-      hmac.update(body);
-      const computedSignature = hmac.digest('base64');
-
-      // Use timing-safe comparison to prevent timing attacks
-      const signatureBuffer = Buffer.from(signature);
-      const computedBuffer = Buffer.from(computedSignature);
-
-      // Ensure buffers are the same length for timingSafeEqual
-      if (signatureBuffer.length !== computedBuffer.length) {
-        this.logger.warn('Invalid webhook signature (length mismatch)');
-        return false;
-      }
-
-      // TypeScript requires explicit cast for Buffer to ArrayBufferView
-      const isValid = crypto.timingSafeEqual(
-        signatureBuffer as unknown as Uint8Array,
-        computedBuffer as unknown as Uint8Array
-      );
-
-      if (!isValid) {
-        this.logger.warn('Invalid webhook signature');
-      }
-
-      return isValid;
-    } catch (err) {
-      // Handle buffer length mismatch or other crypto errors
-      if (err instanceof Error) {
-        this.logger.error('Signature validation error', err);
-      } else {
-        this.logger.error('Signature validation error', new Error(String(err)));
-      }
-      return false;
-    }
-  }
-
-  /**
-   * Validates webhook timestamp to prevent replay attacks
-   *
-   * @param payload Parsed webhook payload
-   * @returns True if timestamp is within acceptable range
-   */
-  private validateTimestamp(payload: ContentfulWebhookPayload): boolean {
-    if (!this.enableTimestampValidation) {
-      return true;
-    }
-
-    const updatedAt = payload.sys.updatedAt;
-    if (!updatedAt) {
-      this.logger.warn('No timestamp in webhook payload');
-      return false;
-    }
-
-    const payloadTime = new Date(updatedAt).getTime();
-    const currentTime = Date.now();
-    const deltaSeconds = Math.abs(currentTime - payloadTime) / 1000;
-
-    if (deltaSeconds > this.maxTimestampDeltaSeconds) {
-      this.logger.warn('Webhook timestamp outside acceptable range', {
-        deltaSeconds,
-        maxAllowed: this.maxTimestampDeltaSeconds
-      });
-      return false;
-    }
-
-    return true;
-  }
-
-  /**
-   * Parses and validates a Contentful webhook
-   *
-   * @param body Raw webhook body as string
-   * @param headers Webhook headers
-   * @returns Validation result with parsed payload if valid
-   */
-  parseWebhook(
-    body: string,
-    headers: Partial<ContentfulWebhookHeaders>
-  ): WebhookValidationResult {
-    try {
-      // Validate required headers
-      const signature = headers['x-contentful-signature'];
-      if (!signature) {
-        return {
-          valid: false,
-          error: 'Missing signature header (x-contentful-signature)'
-        };
-      }
-
-      const topic = headers['x-contentful-topic'];
-      if (!topic) {
-        return {
-          valid: false,
-          error: 'Missing topic header (x-contentful-topic)'
-        };
-      }
-
-      // Validate signature
-      if (!this.validateSignature(body, signature)) {
-        return {
-          valid: false,
-          error: 'Invalid signature'
-        };
-      }
-
-      // Parse payload
-      const payload: ContentfulWebhookPayload = JSON.parse(body) as ContentfulWebhookPayload;
-
-      // Validate timestamp for replay attack prevention
-      if (!this.validateTimestamp(payload)) {
-        return {
-          valid: false,
-          error: 'Invalid timestamp (possible replay attack)'
-        };
-      }
-
-      this.logger.info('Webhook validated successfully', {
-        topic,
-        id: payload.sys.id,
-        type: payload.sys.type
-      });
-
-      return {
-        valid: true,
-        payload,
-        topic
-      };
-    } catch (err) {
-      if (err instanceof Error) {
-        this.logger.error('Failed to parse webhook', err);
-        return {
-          valid: false,
-          error: err.message
-        };
-      } else {
-        const errorMessage = String(err);
-        this.logger.error('Failed to parse webhook', new Error(errorMessage));
-        return {
-          valid: false,
-          error: errorMessage
-        };
-      }
-    }
-  }
-
-  /**
-   * Extracts resource type and action from a topic string
-   *
-   * @param topic Contentful webhook topic (e.g., "Entry.publish")
-   * @returns Object with resource type and action
-   */
-  getEventType(topic: ContentfulWebhookTopic): EventType {
-    const parts = topic.split('.');
-
-    if (parts.length !== 2) {
-      throw new Error(`Invalid topic format: ${topic}`);
-    }
-
-    const [resource, action] = parts;
-
-    // Validate resource type
-    if (!['Entry', 'Asset', 'ContentType'].includes(resource)) {
-      throw new Error(`Invalid resource type: ${resource}`);
-    }
-
-    // Validate action type
-    const validActions = ['create', 'save', 'auto_save', 'publish', 'unpublish', 'delete', 'archive', 'unarchive'];
-    if (!validActions.includes(action)) {
-      throw new Error(`Invalid action type: ${action}`);
-    }
-
-    return {
-      resource: resource as EventType['resource'],
-      action: action as EventType['action']
-    };
-  }
-
-  /**
-   * Updates the webhook secret
-   *
-   * @param newSecret New webhook secret
-   */
-  updateSecret(newSecret: string): void {
-    this.webhookSecret = newSecret;
-    this.logger.info('Webhook secret updated');
-  }
-}

package/src/__tests__/ContentfulWebhookHandler.test.ts

@@ -1,682 +0,0 @@
-/*
-Copyright (c) 2025 Bernier LLC
-
-This file is licensed to the client under a limited-use license.
-The client may use and modify this code *only within the scope of the project it was delivered for*.
-Redistribution or use in other products or commercial offerings is not permitted without written consent from Bernier LLC.
-*/
-
-import crypto from 'crypto';
-import { ContentfulWebhookHandler } from '../ContentfulWebhookHandler';
-import type {
-  ContentfulWebhookPayload,
-  ContentfulWebhookTopic,
-  ContentfulWebhookHeaders
-} from '@bernierllc/contentful-types';
-import { Logger, LogLevel, ConsoleTransport } from '@bernierllc/logger';
-
-describe('ContentfulWebhookHandler', () => {
-  const TEST_SECRET = 'test-webhook-secret';
-  let handler: ContentfulWebhookHandler;
-
-  beforeEach(() => {
-    handler = new ContentfulWebhookHandler({
-      webhookSecret: TEST_SECRET
-    });
-  });
-
-  describe('constructor', () => {
-    it('should create handler with required options', () => {
-      expect(handler).toBeInstanceOf(ContentfulWebhookHandler);
-    });
-
-    it('should accept custom logger', () => {
-      const customLogger = new Logger({
-        level: LogLevel.INFO,
-        transports: [new ConsoleTransport()],
-        context: {
-          service: 'CustomContext',
-          version: '1.0.0',
-          environment: 'test'
-        }
-      });
-      const customHandler = new ContentfulWebhookHandler({
-        webhookSecret: TEST_SECRET,
-        logger: customLogger
-      });
-      expect(customHandler).toBeInstanceOf(ContentfulWebhookHandler);
-    });
-
-    it('should accept timestamp validation options', () => {
-      const timestampHandler = new ContentfulWebhookHandler({
-        webhookSecret: TEST_SECRET,
-        enableTimestampValidation: true,
-        maxTimestampDeltaSeconds: 600
-      });
-      expect(timestampHandler).toBeInstanceOf(ContentfulWebhookHandler);
-    });
-  });
-
-  describe('validateSignature', () => {
-    it('should validate correct signature', () => {
-      const body = '{"test":"data"}';
-      const hmac = crypto.createHmac('sha256', TEST_SECRET);
-      hmac.update(body);
-      const signature = hmac.digest('base64');
-
-      const isValid = handler.validateSignature(body, signature);
-      expect(isValid).toBe(true);
-    });
-
-    it('should reject invalid signature', () => {
-      const body = '{"test":"data"}';
-      const invalidSignature = 'invalid-signature-base64';
-
-      const isValid = handler.validateSignature(body, invalidSignature);
-      expect(isValid).toBe(false);
-    });
-
-    it('should reject tampered body', () => {
-      const originalBody = '{"test":"data"}';
-      const tamperedBody = '{"test":"tampered"}';
-      const hmac = crypto.createHmac('sha256', TEST_SECRET);
-      hmac.update(originalBody);
-      const signature = hmac.digest('base64');
-
-      const isValid = handler.validateSignature(tamperedBody, signature);
-      expect(isValid).toBe(false);
-    });
-
-    it('should reject signature with different secret', () => {
-      const body = '{"test":"data"}';
-      const hmac = crypto.createHmac('sha256', 'different-secret');
-      hmac.update(body);
-      const signature = hmac.digest('base64');
-
-      const isValid = handler.validateSignature(body, signature);
-      expect(isValid).toBe(false);
-    });
-
-    it('should handle empty body', () => {
-      const body = '';
-      const hmac = crypto.createHmac('sha256', TEST_SECRET);
-      hmac.update(body);
-      const signature = hmac.digest('base64');
-
-      const isValid = handler.validateSignature(body, signature);
-      expect(isValid).toBe(true);
-    });
-
-    it('should return false for buffer length mismatch', () => {
-      const body = '{"test":"data"}';
-      const shortSignature = 'short';
-
-      const isValid = handler.validateSignature(body, shortSignature);
-      expect(isValid).toBe(false);
-    });
-
-    it('should handle crypto errors gracefully', () => {
-      const body = '{"test":"data"}';
-      // Intentionally malformed base64 that will cause issues
-      const badSignature = '!!!invalid-base64!!!';
-
-      const isValid = handler.validateSignature(body, badSignature);
-      expect(isValid).toBe(false);
-    });
-
-    it('should handle non-Error exceptions in signature validation', () => {
-      const testHandler = new ContentfulWebhookHandler({
-        webhookSecret: TEST_SECRET
-      });
-
-      const body = '{"test":"data"}';
-
-      // Mock crypto.createHmac to throw a non-Error
-      const originalCreateHmac = crypto.createHmac;
-      crypto.createHmac = jest.fn().mockImplementationOnce(() => {
-        // eslint-disable-next-line @typescript-eslint/no-throw-literal
-        throw 'crypto error';
-      });
-
-      try {
-        const isValid = testHandler.validateSignature(body, 'signature');
-        expect(isValid).toBe(false);
-      } finally {
-        // Restore original
-        crypto.createHmac = originalCreateHmac;
-      }
-    });
-  });
-
-  describe('parseWebhook', () => {
-    const createValidPayload = (): ContentfulWebhookPayload => ({
-      sys: {
-        type: 'Entry',
-        id: 'test-entry-123',
-        space: {
-          sys: {
-            type: 'Link',
-            linkType: 'Space',
-            id: 'space-123'
-          }
-        },
-        environment: {
-          sys: {
-            type: 'Link',
-            linkType: 'Environment',
-            id: 'master'
-          }
-        },
-        contentType: {
-          sys: {
-            type: 'Link',
-            linkType: 'ContentType',
-            id: 'blogPost'
-          }
-        },
-        revision: 1,
-        createdAt: new Date().toISOString(),
-        updatedAt: new Date().toISOString()
-      },
-      fields: {
-        title: { 'en-US': 'Test Title' },
-        content: { 'en-US': 'Test content' }
-      }
-    });
-
-    const signBody = (body: string): string => {
-      const hmac = crypto.createHmac('sha256', TEST_SECRET);
-      hmac.update(body);
-      return hmac.digest('base64');
-    };
-
-    it('should parse valid webhook', () => {
-      const payload = createValidPayload();
-      const body = JSON.stringify(payload);
-      const signature = signBody(body);
-
-      const headers: Partial<ContentfulWebhookHeaders> = {
-        'x-contentful-signature': signature,
-        'x-contentful-topic': 'Entry.publish'
-      };
-
-      const result = handler.parseWebhook(body, headers);
-
-      expect(result.valid).toBe(true);
-      expect(result.error).toBeUndefined();
-      expect(result.payload).toEqual(payload);
-      expect(result.topic).toBe('Entry.publish');
-    });
-
-    it('should reject webhook without signature header', () => {
-      const payload = createValidPayload();
-      const body = JSON.stringify(payload);
-
-      const headers: Partial<ContentfulWebhookHeaders> = {
-        'x-contentful-topic': 'Entry.publish'
-      };
-
-      const result = handler.parseWebhook(body, headers);
-
-      expect(result.valid).toBe(false);
-      expect(result.error).toBe('Missing signature header (x-contentful-signature)');
-      expect(result.payload).toBeUndefined();
-    });
-
-    it('should reject webhook without topic header', () => {
-      const payload = createValidPayload();
-      const body = JSON.stringify(payload);
-      const signature = signBody(body);
-
-      const headers: Partial<ContentfulWebhookHeaders> = {
-        'x-contentful-signature': signature
-      };
-
-      const result = handler.parseWebhook(body, headers);
-
-      expect(result.valid).toBe(false);
-      expect(result.error).toBe('Missing topic header (x-contentful-topic)');
-      expect(result.payload).toBeUndefined();
-    });
-
-    it('should reject webhook with invalid signature', () => {
-      const payload = createValidPayload();
-      const body = JSON.stringify(payload);
-
-      const headers: Partial<ContentfulWebhookHeaders> = {
-        'x-contentful-signature': 'invalid-signature',
-        'x-contentful-topic': 'Entry.publish'
-      };
-
-      const result = handler.parseWebhook(body, headers);
-
-      expect(result.valid).toBe(false);
-      expect(result.error).toBe('Invalid signature');
-      expect(result.payload).toBeUndefined();
-    });
-
-    it('should reject webhook with invalid JSON', () => {
-      const body = 'invalid json {';
-      const signature = signBody(body);
-
-      const headers: Partial<ContentfulWebhookHeaders> = {
-        'x-contentful-signature': signature,
-        'x-contentful-topic': 'Entry.publish'
-      };
-
-      const result = handler.parseWebhook(body, headers);
-
-      expect(result.valid).toBe(false);
-      expect(result.error).toContain('Unexpected');
-      expect(result.payload).toBeUndefined();
-    });
-
-    it('should handle non-Error exceptions in parsing', () => {
-      // Create a new handler for this test to avoid affecting other tests
-      const testHandler = new ContentfulWebhookHandler({
-        webhookSecret: TEST_SECRET
-      });
-
-      const body = '{"test":"data"}';
-      const hmac = crypto.createHmac('sha256', TEST_SECRET);
-      hmac.update(body);
-      const signature = hmac.digest('base64');
-
-      // Mock JSON.parse to throw a non-Error
-      const originalParse = global.JSON.parse;
-      global.JSON.parse = jest.fn().mockImplementationOnce(() => {
-        // eslint-disable-next-line @typescript-eslint/no-throw-literal
-        throw 'string error';
-      });
-
-      try {
-        const headers: Partial<ContentfulWebhookHeaders> = {
-          'x-contentful-signature': signature,
-          'x-contentful-topic': 'Entry.publish'
-        };
-
-        const result = testHandler.parseWebhook(body, headers);
-
-        expect(result.valid).toBe(false);
-        expect(result.error).toBe('string error');
-      } finally {
-        // Restore original
-        global.JSON.parse = originalParse;
-      }
-    });
-
-    it('should handle all webhook topics', () => {
-      const topics: ContentfulWebhookTopic[] = [
-        'Entry.create',
-        'Entry.publish',
-        'Asset.delete',
-        'ContentType.save'
-      ];
-
-      topics.forEach(topic => {
-        const payload = createValidPayload();
-        const body = JSON.stringify(payload);
-        const signature = signBody(body);
-
-        const headers: Partial<ContentfulWebhookHeaders> = {
-          'x-contentful-signature': signature,
-          'x-contentful-topic': topic
-        };
-
-        const result = handler.parseWebhook(body, headers);
-
-        expect(result.valid).toBe(true);
-        expect(result.topic).toBe(topic);
-      });
-    });
-  });
-
-  describe('timestamp validation', () => {
-    const createPayloadWithTimestamp = (timestamp: string): ContentfulWebhookPayload => ({
-      sys: {
-        type: 'Entry',
-        id: 'test-entry-123',
-        space: {
-          sys: {
-            type: 'Link',
-            linkType: 'Space',
-            id: 'space-123'
-          }
-        },
-        environment: {
-          sys: {
-            type: 'Link',
-            linkType: 'Environment',
-            id: 'master'
-          }
-        },
-        contentType: {
-          sys: {
-            type: 'Link',
-            linkType: 'ContentType',
-            id: 'blogPost'
-          }
-        },
-        updatedAt: timestamp
-      }
-    });
-
-    const signBody = (body: string): string => {
-      const hmac = crypto.createHmac('sha256', TEST_SECRET);
-      hmac.update(body);
-      return hmac.digest('base64');
-    };
-
-    it('should accept recent timestamp when validation enabled', () => {
-      const timestampHandler = new ContentfulWebhookHandler({
-        webhookSecret: TEST_SECRET,
-        enableTimestampValidation: true,
-        maxTimestampDeltaSeconds: 300
-      });
-
-      const payload = createPayloadWithTimestamp(new Date().toISOString());
-      const body = JSON.stringify(payload);
-      const signature = signBody(body);
-
-      const headers: Partial<ContentfulWebhookHeaders> = {
-        'x-contentful-signature': signature,
-        'x-contentful-topic': 'Entry.publish'
-      };
-
-      const result = timestampHandler.parseWebhook(body, headers);
-
-      expect(result.valid).toBe(true);
-    });
-
-    it('should reject old timestamp when validation enabled', () => {
-      const timestampHandler = new ContentfulWebhookHandler({
-        webhookSecret: TEST_SECRET,
-        enableTimestampValidation: true,
-        maxTimestampDeltaSeconds: 300
-      });
-
-      // Create timestamp 10 minutes ago (600 seconds)
-      const oldDate = new Date(Date.now() - 600000);
-      const payload = createPayloadWithTimestamp(oldDate.toISOString());
-      const body = JSON.stringify(payload);
-      const signature = signBody(body);
-
-      const headers: Partial<ContentfulWebhookHeaders> = {
-        'x-contentful-signature': signature,
-        'x-contentful-topic': 'Entry.publish'
-      };
-
-      const result = timestampHandler.parseWebhook(body, headers);
-
-      expect(result.valid).toBe(false);
-      expect(result.error).toBe('Invalid timestamp (possible replay attack)');
-    });
-
-    it('should accept any timestamp when validation disabled', () => {
-      // Default handler has timestamp validation disabled
-      const oldDate = new Date(Date.now() - 600000);
-      const payload = createPayloadWithTimestamp(oldDate.toISOString());
-      const body = JSON.stringify(payload);
-      const signature = signBody(body);
-
-      const headers: Partial<ContentfulWebhookHeaders> = {
-        'x-contentful-signature': signature,
-        'x-contentful-topic': 'Entry.publish'
-      };
-
-      const result = handler.parseWebhook(body, headers);
-
-      expect(result.valid).toBe(true);
-    });
-
-    it('should reject payload without timestamp when validation enabled', () => {
-      const timestampHandler = new ContentfulWebhookHandler({
-        webhookSecret: TEST_SECRET,
-        enableTimestampValidation: true,
-        maxTimestampDeltaSeconds: 300
-      });
-
-      const payload: ContentfulWebhookPayload = {
-        sys: {
-          type: 'Entry',
-          id: 'test-entry-123',
-          space: {
-            sys: {
-              type: 'Link',
-              linkType: 'Space',
-              id: 'space-123'
-            }
-          },
-          environment: {
-            sys: {
-              type: 'Link',
-              linkType: 'Environment',
-              id: 'master'
-            }
-          }
-        }
-      };
-
-      const body = JSON.stringify(payload);
-      const signature = signBody(body);
-
-      const headers: Partial<ContentfulWebhookHeaders> = {
-        'x-contentful-signature': signature,
-        'x-contentful-topic': 'Entry.publish'
-      };
-
-      const result = timestampHandler.parseWebhook(body, headers);
-
-      expect(result.valid).toBe(false);
-      expect(result.error).toBe('Invalid timestamp (possible replay attack)');
-    });
-  });
-
-  describe('getEventType', () => {
-    it('should parse Entry.publish topic', () => {
-      const result = handler.getEventType('Entry.publish');
-      expect(result.resource).toBe('Entry');
-      expect(result.action).toBe('publish');
-    });
-
-    it('should parse Asset.delete topic', () => {
-      const result = handler.getEventType('Asset.delete');
-      expect(result.resource).toBe('Asset');
-      expect(result.action).toBe('delete');
-    });
-
-    it('should parse ContentType.save topic', () => {
-      const result = handler.getEventType('ContentType.save');
-      expect(result.resource).toBe('ContentType');
-      expect(result.action).toBe('save');
-    });
-
-    it('should parse Entry.create topic', () => {
-      const result = handler.getEventType('Entry.create');
-      expect(result.resource).toBe('Entry');
-      expect(result.action).toBe('create');
-    });
-
-    it('should parse Entry.auto_save topic', () => {
-      const result = handler.getEventType('Entry.auto_save');
-      expect(result.resource).toBe('Entry');
-      expect(result.action).toBe('auto_save');
-    });
-
-    it('should parse Entry.archive topic', () => {
-      const result = handler.getEventType('Entry.archive');
-      expect(result.resource).toBe('Entry');
-      expect(result.action).toBe('archive');
-    });
-
-    it('should parse Entry.unarchive topic', () => {
-      const result = handler.getEventType('Entry.unarchive');
-      expect(result.resource).toBe('Entry');
-      expect(result.action).toBe('unarchive');
-    });
-
-    it('should parse Entry.unpublish topic', () => {
-      const result = handler.getEventType('Entry.unpublish');
-      expect(result.resource).toBe('Entry');
-      expect(result.action).toBe('unpublish');
-    });
-
-    it('should throw error for invalid topic format', () => {
-      expect(() => {
-        handler.getEventType('InvalidTopic' as ContentfulWebhookTopic);
-      }).toThrow('Invalid topic format: InvalidTopic');
-    });
-
-    it('should throw error for too many parts', () => {
-      expect(() => {
-        handler.getEventType('Entry.publish.extra' as ContentfulWebhookTopic);
-      }).toThrow('Invalid topic format: Entry.publish.extra');
-    });
-
-    it('should throw error for invalid resource', () => {
-      expect(() => {
-        handler.getEventType('InvalidResource.publish' as ContentfulWebhookTopic);
-      }).toThrow('Invalid resource type: InvalidResource');
-    });
-
-    it('should throw error for invalid action', () => {
-      expect(() => {
-        handler.getEventType('Entry.invalidAction' as ContentfulWebhookTopic);
-      }).toThrow('Invalid action type: invalidAction');
-    });
-  });
-
-  describe('updateSecret', () => {
-    it('should update webhook secret', () => {
-      const newSecret = 'new-test-secret';
-      handler.updateSecret(newSecret);
-
-      // Verify new secret works
-      const body = '{"test":"data"}';
-      const hmac = crypto.createHmac('sha256', newSecret);
-      hmac.update(body);
-      const signature = hmac.digest('base64');
-
-      const isValid = handler.validateSignature(body, signature);
-      expect(isValid).toBe(true);
-    });
-
-    it('should invalidate old secret after update', () => {
-      const body = '{"test":"data"}';
-      const hmac = crypto.createHmac('sha256', TEST_SECRET);
-      hmac.update(body);
-      const oldSignature = hmac.digest('base64');
-
-      // Update to new secret
-      handler.updateSecret('new-test-secret');
-
-      // Old signature should no longer work
-      const isValid = handler.validateSignature(body, oldSignature);
-      expect(isValid).toBe(false);
-    });
-  });
-
-  describe('integration scenarios', () => {
-    it('should handle complete Entry.publish webhook', () => {
-      const payload: ContentfulWebhookPayload = {
-        sys: {
-          type: 'Entry',
-          id: 'blog-post-123',
-          space: {
-            sys: {
-              type: 'Link',
-              linkType: 'Space',
-              id: 'my-space'
-            }
-          },
-          environment: {
-            sys: {
-              type: 'Link',
-              linkType: 'Environment',
-              id: 'master'
-            }
-          },
-          contentType: {
-            sys: {
-              type: 'Link',
-              linkType: 'ContentType',
-              id: 'blogPost'
-            }
-          },
-          revision: 5,
-          createdAt: '2025-01-01T00:00:00Z',
-          updatedAt: new Date().toISOString()
-        },
-        fields: {
-          title: { 'en-US': 'My Blog Post' },
-          content: { 'en-US': 'Blog post content here' }
-        }
-      };
-
-      const body = JSON.stringify(payload);
-      const hmac = crypto.createHmac('sha256', TEST_SECRET);
-      hmac.update(body);
-      const signature = hmac.digest('base64');
-
-      const headers: ContentfulWebhookHeaders = {
-        'x-contentful-signature': signature,
-        'x-contentful-topic': 'Entry.publish',
-        'x-contentful-webhook-name': 'test-webhook',
-        'x-contentful-crn': 'crn:contentful:::content:spaces/my-space'
-      };
-
-      const result = handler.parseWebhook(body, headers);
-
-      expect(result.valid).toBe(true);
-      expect(result.payload?.sys.id).toBe('blog-post-123');
-      expect(result.topic).toBe('Entry.publish');
-
-      if (result.topic) {
-        const eventType = handler.getEventType(result.topic);
-        expect(eventType.resource).toBe('Entry');
-        expect(eventType.action).toBe('publish');
-      }
-    });
-
-    it('should handle Asset.delete webhook', () => {
-      const payload: ContentfulWebhookPayload = {
-        sys: {
-          type: 'Asset',
-          id: 'asset-456',
-          space: {
-            sys: {
-              type: 'Link',
-              linkType: 'Space',
-              id: 'my-space'
-            }
-          },
-          environment: {
-            sys: {
-              type: 'Link',
-              linkType: 'Environment',
-              id: 'master'
-            }
-          },
-          revision: 1,
-          updatedAt: new Date().toISOString()
-        }
-      };
-
-      const body = JSON.stringify(payload);
-      const hmac = crypto.createHmac('sha256', TEST_SECRET);
-      hmac.update(body);
-      const signature = hmac.digest('base64');
-
-      const headers: Partial<ContentfulWebhookHeaders> = {
-        'x-contentful-signature': signature,
-        'x-contentful-topic': 'Asset.delete'
-      };
-
-      const result = handler.parseWebhook(body, headers);
-
-      expect(result.valid).toBe(true);
-      expect(result.payload?.sys.type).toBe('Asset');
-      expect(result.topic).toBe('Asset.delete');
-    });
-  });
-});

package/src/__tests__/index.test.ts

@@ -1,78 +0,0 @@
-/*
-Copyright (c) 2025 Bernier LLC
-
-This file is licensed to the client under a limited-use license.
-The client may use and modify this code *only within the scope of the project it was delivered for*.
-Redistribution or use in other products or commercial offerings is not permitted without written consent from Bernier LLC.
-*/
-
-import {
-  ContentfulWebhookHandler,
-  type WebhookValidationResult,
-  type EventType,
-  type ContentfulWebhookHandlerOptions,
-  type ContentfulWebhookTopic,
-  type ContentfulWebhookHeaders,
-  type ContentfulWebhookPayload
-} from '../index';
-
-describe('index exports', () => {
-  it('should export ContentfulWebhookHandler class', () => {
-    expect(ContentfulWebhookHandler).toBeDefined();
-    expect(typeof ContentfulWebhookHandler).toBe('function');
-  });
-
-  it('should create a ContentfulWebhookHandler instance', () => {
-    const handler = new ContentfulWebhookHandler({
-      webhookSecret: 'test-secret'
-    });
-    expect(handler).toBeInstanceOf(ContentfulWebhookHandler);
-  });
-
-  it('should export type definitions', () => {
-    // Type check - these should compile
-    const payload: ContentfulWebhookPayload = {
-      sys: {
-        type: 'Entry',
-        id: 'test',
-        space: {
-          sys: { type: 'Link', linkType: 'Space', id: 'space' }
-        },
-        environment: {
-          sys: { type: 'Link', linkType: 'Environment', id: 'master' }
-        }
-      }
-    };
-
-    const validationResult: WebhookValidationResult = {
-      valid: true,
-      payload,
-      topic: 'Entry.publish'
-    };
-
-    const eventType: EventType = {
-      resource: 'Entry',
-      action: 'publish'
-    };
-
-    const options: ContentfulWebhookHandlerOptions = {
-      webhookSecret: 'test'
-    };
-
-    const topic: ContentfulWebhookTopic = 'Entry.publish';
-
-    const headers: ContentfulWebhookHeaders = {
-      'x-contentful-signature': 'sig',
-      'x-contentful-topic': 'Entry.publish',
-      'x-contentful-webhook-name': 'test',
-      'x-contentful-crn': 'crn:test'
-    };
-
-    // If these compile, the types are exported correctly
-    expect(validationResult).toBeDefined();
-    expect(eventType).toBeDefined();
-    expect(options).toBeDefined();
-    expect(topic).toBeDefined();
-    expect(headers).toBeDefined();
-  });
-});

package/src/index.ts

@@ -1,21 +0,0 @@
-/*
-Copyright (c) 2025 Bernier LLC
-
-This file is licensed to the client under a limited-use license.
-The client may use and modify this code *only within the scope of the project it was delivered for*.
-Redistribution or use in other products or commercial offerings is not permitted without written consent from Bernier LLC.
-*/
-
-export {
-  ContentfulWebhookHandler,
-  WebhookValidationResult,
-  EventType,
-  ContentfulWebhookHandlerOptions
-} from './ContentfulWebhookHandler';
-
-// Re-export commonly used types from contentful-types
-export type {
-  ContentfulWebhookPayload,
-  ContentfulWebhookTopic,
-  ContentfulWebhookHeaders
-} from '@bernierllc/contentful-types';

package/tsconfig.json

@@ -1,22 +0,0 @@
-{
-  "compilerOptions": {
-    "target": "ES2022",
-    "module": "commonjs",
-    "lib": ["ES2022"],
-    "declaration": true,
-    "outDir": "./dist",
-    "rootDir": "./src",
-    "strict": true,
-    "esModuleInterop": true,
-    "skipLibCheck": true,
-    "forceConsistentCasingInFileNames": true,
-    "resolveJsonModule": true,
-    "moduleResolution": "node",
-    "noUnusedLocals": true,
-    "noUnusedParameters": true,
-    "noImplicitReturns": true,
-    "noFallthroughCasesInSwitch": true
-  },
-  "include": ["src/**/*"],
-  "exclude": ["node_modules", "dist"]
-}