@bernierllc/contentful-webhook-handler 1.3.0 → 1.3.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bernierllc/contentful-webhook-handler",
-  "version": "1.3.0",
+  "version": "1.3.2",
   "description": "Validates Contentful webhook signatures using HMAC-SHA256, parses webhook payloads, and provides type-safe interfaces for all webhook event types",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -20,7 +20,7 @@
   },
   "dependencies": {
     "@bernierllc/contentful-types": "1.5.0",
-    "@bernierllc/logger": "1.7.0"
+    "@bernierllc/logger": "2.0.0"
   },
   "devDependencies": {
     "@types/jest": "^29.5.12",

package/dist/ContentfulWebhookHandler.d.ts

@@ -1,71 +0,0 @@
-import { ContentfulWebhookPayload, ContentfulWebhookTopic, ContentfulWebhookHeaders } from '@bernierllc/contentful-types';
-import { Logger } from '@bernierllc/logger';
-export interface WebhookValidationResult {
-    valid: boolean;
-    error?: string;
-    payload?: ContentfulWebhookPayload;
-    topic?: ContentfulWebhookTopic;
-}
-export interface EventType {
-    resource: 'Entry' | 'Asset' | 'ContentType';
-    action: 'create' | 'save' | 'auto_save' | 'publish' | 'unpublish' | 'delete' | 'archive' | 'unarchive';
-}
-export interface ContentfulWebhookHandlerOptions {
-    webhookSecret: string;
-    logger?: Logger;
-    enableTimestampValidation?: boolean;
-    maxTimestampDeltaSeconds?: number;
-}
-/**
- * Validates Contentful webhook signatures using HMAC-SHA256,
- * parses webhook payloads, and provides type-safe interfaces
- * for all webhook event types.
- */
-export declare class ContentfulWebhookHandler {
-    private webhookSecret;
-    private logger;
-    private enableTimestampValidation;
-    private maxTimestampDeltaSeconds;
-    /**
-     * Creates a new ContentfulWebhookHandler instance
-     *
-     * @param options Configuration options
-     */
-    constructor(options: ContentfulWebhookHandlerOptions);
-    /**
-     * Validates a webhook signature using HMAC-SHA256
-     *
-     * @param body Raw webhook body as string
-     * @param signature Signature from x-contentful-signature header
-     * @returns True if signature is valid
-     */
-    validateSignature(body: string, signature: string): boolean;
-    /**
-     * Validates webhook timestamp to prevent replay attacks
-     *
-     * @param payload Parsed webhook payload
-     * @returns True if timestamp is within acceptable range
-     */
-    private validateTimestamp;
-    /**
-     * Parses and validates a Contentful webhook
-     *
-     * @param body Raw webhook body as string
-     * @param headers Webhook headers
-     * @returns Validation result with parsed payload if valid
-     */
-    parseWebhook(body: string, headers: Partial<ContentfulWebhookHeaders>): WebhookValidationResult;
-    /**
-     * Extracts resource type and action from a topic string
-     *
-     * @param topic Contentful webhook topic (e.g., "Entry.publish")
-     * @returns Object with resource type and action
-     */
-    getEventType(topic: ContentfulWebhookTopic): EventType;
-    /**
-     * Updates the webhook secret
-     *
-     * @param newSecret New webhook secret
-     */
-    updateSecret(newSecret: string): void;
-}

package/dist/ContentfulWebhookHandler.js

@@ -1,213 +0,0 @@
-"use strict";
-/*
-Copyright (c) 2025 Bernier LLC
-
-This file is licensed to the client under a limited-use license.
-The client may use and modify this code *only within the scope of the project it was delivered for*.
-Redistribution or use in other products or commercial offerings is not permitted without written consent from Bernier LLC.
-*/
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ContentfulWebhookHandler = void 0;
-const crypto_1 = __importDefault(require("crypto"));
-const logger_1 = require("@bernierllc/logger");
-/**
- * Validates Contentful webhook signatures using HMAC-SHA256,
- * parses webhook payloads, and provides type-safe interfaces
- * for all webhook event types.
- */
-class ContentfulWebhookHandler {
-    webhookSecret;
-    logger;
-    enableTimestampValidation;
-    maxTimestampDeltaSeconds;
-    /**
-     * Creates a new ContentfulWebhookHandler instance
-     *
-     * @param options Configuration options
-     */
-    constructor(options) {
-        this.webhookSecret = options.webhookSecret;
-        this.logger = options.logger || (0, logger_1.createLogger)({
-            context: {
-                service: 'ContentfulWebhookHandler',
-                version: '1.0.0',
-                environment: process.env.NODE_ENV || 'development'
-            }
-        });
-        this.enableTimestampValidation = options.enableTimestampValidation ?? false;
-        this.maxTimestampDeltaSeconds = options.maxTimestampDeltaSeconds ?? 300; // 5 minutes default
-    }
-    /**
-     * Validates a webhook signature using HMAC-SHA256
-     *
-     * @param body Raw webhook body as string
-     * @param signature Signature from x-contentful-signature header
-     * @returns True if signature is valid
-     */
-    validateSignature(body, signature) {
-        try {
-            const hmac = crypto_1.default.createHmac('sha256', this.webhookSecret);
-            hmac.update(body);
-            const computedSignature = hmac.digest('base64');
-            // Use timing-safe comparison to prevent timing attacks
-            const signatureBuffer = Buffer.from(signature);
-            const computedBuffer = Buffer.from(computedSignature);
-            // Ensure buffers are the same length for timingSafeEqual
-            if (signatureBuffer.length !== computedBuffer.length) {
-                this.logger.warn('Invalid webhook signature (length mismatch)');
-                return false;
-            }
-            // TypeScript requires explicit cast for Buffer to ArrayBufferView
-            const isValid = crypto_1.default.timingSafeEqual(signatureBuffer, computedBuffer);
-            if (!isValid) {
-                this.logger.warn('Invalid webhook signature');
-            }
-            return isValid;
-        }
-        catch (err) {
-            // Handle buffer length mismatch or other crypto errors
-            if (err instanceof Error) {
-                this.logger.error('Signature validation error', err);
-            }
-            else {
-                this.logger.error('Signature validation error', new Error(String(err)));
-            }
-            return false;
-        }
-    }
-    /**
-     * Validates webhook timestamp to prevent replay attacks
-     *
-     * @param payload Parsed webhook payload
-     * @returns True if timestamp is within acceptable range
-     */
-    validateTimestamp(payload) {
-        if (!this.enableTimestampValidation) {
-            return true;
-        }
-        const updatedAt = payload.sys.updatedAt;
-        if (!updatedAt) {
-            this.logger.warn('No timestamp in webhook payload');
-            return false;
-        }
-        const payloadTime = new Date(updatedAt).getTime();
-        const currentTime = Date.now();
-        const deltaSeconds = Math.abs(currentTime - payloadTime) / 1000;
-        if (deltaSeconds > this.maxTimestampDeltaSeconds) {
-            this.logger.warn('Webhook timestamp outside acceptable range', {
-                deltaSeconds,
-                maxAllowed: this.maxTimestampDeltaSeconds
-            });
-            return false;
-        }
-        return true;
-    }
-    /**
-     * Parses and validates a Contentful webhook
-     *
-     * @param body Raw webhook body as string
-     * @param headers Webhook headers
-     * @returns Validation result with parsed payload if valid
-     */
-    parseWebhook(body, headers) {
-        try {
-            // Validate required headers
-            const signature = headers['x-contentful-signature'];
-            if (!signature) {
-                return {
-                    valid: false,
-                    error: 'Missing signature header (x-contentful-signature)'
-                };
-            }
-            const topic = headers['x-contentful-topic'];
-            if (!topic) {
-                return {
-                    valid: false,
-                    error: 'Missing topic header (x-contentful-topic)'
-                };
-            }
-            // Validate signature
-            if (!this.validateSignature(body, signature)) {
-                return {
-                    valid: false,
-                    error: 'Invalid signature'
-                };
-            }
-            // Parse payload
-            const payload = JSON.parse(body);
-            // Validate timestamp for replay attack prevention
-            if (!this.validateTimestamp(payload)) {
-                return {
-                    valid: false,
-                    error: 'Invalid timestamp (possible replay attack)'
-                };
-            }
-            this.logger.info('Webhook validated successfully', {
-                topic,
-                id: payload.sys.id,
-                type: payload.sys.type
-            });
-            return {
-                valid: true,
-                payload,
-                topic
-            };
-        }
-        catch (err) {
-            if (err instanceof Error) {
-                this.logger.error('Failed to parse webhook', err);
-                return {
-                    valid: false,
-                    error: err.message
-                };
-            }
-            else {
-                const errorMessage = String(err);
-                this.logger.error('Failed to parse webhook', new Error(errorMessage));
-                return {
-                    valid: false,
-                    error: errorMessage
-                };
-            }
-        }
-    }
-    /**
-     * Extracts resource type and action from a topic string
-     *
-     * @param topic Contentful webhook topic (e.g., "Entry.publish")
-     * @returns Object with resource type and action
-     */
-    getEventType(topic) {
-        const parts = topic.split('.');
-        if (parts.length !== 2) {
-            throw new Error(`Invalid topic format: ${topic}`);
-        }
-        const [resource, action] = parts;
-        // Validate resource type
-        if (!['Entry', 'Asset', 'ContentType'].includes(resource)) {
-            throw new Error(`Invalid resource type: ${resource}`);
-        }
-        // Validate action type
-        const validActions = ['create', 'save', 'auto_save', 'publish', 'unpublish', 'delete', 'archive', 'unarchive'];
-        if (!validActions.includes(action)) {
-            throw new Error(`Invalid action type: ${action}`);
-        }
-        return {
-            resource: resource,
-            action: action
-        };
-    }
-    /**
-     * Updates the webhook secret
-     *
-     * @param newSecret New webhook secret
-     */
-    updateSecret(newSecret) {
-        this.webhookSecret = newSecret;
-        this.logger.info('Webhook secret updated');
-    }
-}
-exports.ContentfulWebhookHandler = ContentfulWebhookHandler;

package/dist/__tests__/ContentfulWebhookHandler.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/__tests__/ContentfulWebhookHandler.test.js

@@ -1,576 +0,0 @@
-"use strict";
-/*
-Copyright (c) 2025 Bernier LLC
-
-This file is licensed to the client under a limited-use license.
-The client may use and modify this code *only within the scope of the project it was delivered for*.
-Redistribution or use in other products or commercial offerings is not permitted without written consent from Bernier LLC.
-*/
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-const crypto_1 = __importDefault(require("crypto"));
-const ContentfulWebhookHandler_1 = require("../ContentfulWebhookHandler");
-const logger_1 = require("@bernierllc/logger");
-describe('ContentfulWebhookHandler', () => {
-    const TEST_SECRET = 'test-webhook-secret';
-    let handler;
-    beforeEach(() => {
-        handler = new ContentfulWebhookHandler_1.ContentfulWebhookHandler({
-            webhookSecret: TEST_SECRET
-        });
-    });
-    describe('constructor', () => {
-        it('should create handler with required options', () => {
-            expect(handler).toBeInstanceOf(ContentfulWebhookHandler_1.ContentfulWebhookHandler);
-        });
-        it('should accept custom logger', () => {
-            const customLogger = new logger_1.Logger({
-                level: logger_1.LogLevel.INFO,
-                transports: [new logger_1.ConsoleTransport()],
-                context: {
-                    service: 'CustomContext',
-                    version: '1.0.0',
-                    environment: 'test'
-                }
-            });
-            const customHandler = new ContentfulWebhookHandler_1.ContentfulWebhookHandler({
-                webhookSecret: TEST_SECRET,
-                logger: customLogger
-            });
-            expect(customHandler).toBeInstanceOf(ContentfulWebhookHandler_1.ContentfulWebhookHandler);
-        });
-        it('should accept timestamp validation options', () => {
-            const timestampHandler = new ContentfulWebhookHandler_1.ContentfulWebhookHandler({
-                webhookSecret: TEST_SECRET,
-                enableTimestampValidation: true,
-                maxTimestampDeltaSeconds: 600
-            });
-            expect(timestampHandler).toBeInstanceOf(ContentfulWebhookHandler_1.ContentfulWebhookHandler);
-        });
-    });
-    describe('validateSignature', () => {
-        it('should validate correct signature', () => {
-            const body = '{"test":"data"}';
-            const hmac = crypto_1.default.createHmac('sha256', TEST_SECRET);
-            hmac.update(body);
-            const signature = hmac.digest('base64');
-            const isValid = handler.validateSignature(body, signature);
-            expect(isValid).toBe(true);
-        });
-        it('should reject invalid signature', () => {
-            const body = '{"test":"data"}';
-            const invalidSignature = 'invalid-signature-base64';
-            const isValid = handler.validateSignature(body, invalidSignature);
-            expect(isValid).toBe(false);
-        });
-        it('should reject tampered body', () => {
-            const originalBody = '{"test":"data"}';
-            const tamperedBody = '{"test":"tampered"}';
-            const hmac = crypto_1.default.createHmac('sha256', TEST_SECRET);
-            hmac.update(originalBody);
-            const signature = hmac.digest('base64');
-            const isValid = handler.validateSignature(tamperedBody, signature);
-            expect(isValid).toBe(false);
-        });
-        it('should reject signature with different secret', () => {
-            const body = '{"test":"data"}';
-            const hmac = crypto_1.default.createHmac('sha256', 'different-secret');
-            hmac.update(body);
-            const signature = hmac.digest('base64');
-            const isValid = handler.validateSignature(body, signature);
-            expect(isValid).toBe(false);
-        });
-        it('should handle empty body', () => {
-            const body = '';
-            const hmac = crypto_1.default.createHmac('sha256', TEST_SECRET);
-            hmac.update(body);
-            const signature = hmac.digest('base64');
-            const isValid = handler.validateSignature(body, signature);
-            expect(isValid).toBe(true);
-        });
-        it('should return false for buffer length mismatch', () => {
-            const body = '{"test":"data"}';
-            const shortSignature = 'short';
-            const isValid = handler.validateSignature(body, shortSignature);
-            expect(isValid).toBe(false);
-        });
-        it('should handle crypto errors gracefully', () => {
-            const body = '{"test":"data"}';
-            // Intentionally malformed base64 that will cause issues
-            const badSignature = '!!!invalid-base64!!!';
-            const isValid = handler.validateSignature(body, badSignature);
-            expect(isValid).toBe(false);
-        });
-        it('should handle non-Error exceptions in signature validation', () => {
-            const testHandler = new ContentfulWebhookHandler_1.ContentfulWebhookHandler({
-                webhookSecret: TEST_SECRET
-            });
-            const body = '{"test":"data"}';
-            // Mock crypto.createHmac to throw a non-Error
-            const originalCreateHmac = crypto_1.default.createHmac;
-            crypto_1.default.createHmac = jest.fn().mockImplementationOnce(() => {
-                // eslint-disable-next-line @typescript-eslint/no-throw-literal
-                throw 'crypto error';
-            });
-            try {
-                const isValid = testHandler.validateSignature(body, 'signature');
-                expect(isValid).toBe(false);
-            }
-            finally {
-                // Restore original
-                crypto_1.default.createHmac = originalCreateHmac;
-            }
-        });
-    });
-    describe('parseWebhook', () => {
-        const createValidPayload = () => ({
-            sys: {
-                type: 'Entry',
-                id: 'test-entry-123',
-                space: {
-                    sys: {
-                        type: 'Link',
-                        linkType: 'Space',
-                        id: 'space-123'
-                    }
-                },
-                environment: {
-                    sys: {
-                        type: 'Link',
-                        linkType: 'Environment',
-                        id: 'master'
-                    }
-                },
-                contentType: {
-                    sys: {
-                        type: 'Link',
-                        linkType: 'ContentType',
-                        id: 'blogPost'
-                    }
-                },
-                revision: 1,
-                createdAt: new Date().toISOString(),
-                updatedAt: new Date().toISOString()
-            },
-            fields: {
-                title: { 'en-US': 'Test Title' },
-                content: { 'en-US': 'Test content' }
-            }
-        });
-        const signBody = (body) => {
-            const hmac = crypto_1.default.createHmac('sha256', TEST_SECRET);
-            hmac.update(body);
-            return hmac.digest('base64');
-        };
-        it('should parse valid webhook', () => {
-            const payload = createValidPayload();
-            const body = JSON.stringify(payload);
-            const signature = signBody(body);
-            const headers = {
-                'x-contentful-signature': signature,
-                'x-contentful-topic': 'Entry.publish'
-            };
-            const result = handler.parseWebhook(body, headers);
-            expect(result.valid).toBe(true);
-            expect(result.error).toBeUndefined();
-            expect(result.payload).toEqual(payload);
-            expect(result.topic).toBe('Entry.publish');
-        });
-        it('should reject webhook without signature header', () => {
-            const payload = createValidPayload();
-            const body = JSON.stringify(payload);
-            const headers = {
-                'x-contentful-topic': 'Entry.publish'
-            };
-            const result = handler.parseWebhook(body, headers);
-            expect(result.valid).toBe(false);
-            expect(result.error).toBe('Missing signature header (x-contentful-signature)');
-            expect(result.payload).toBeUndefined();
-        });
-        it('should reject webhook without topic header', () => {
-            const payload = createValidPayload();
-            const body = JSON.stringify(payload);
-            const signature = signBody(body);
-            const headers = {
-                'x-contentful-signature': signature
-            };
-            const result = handler.parseWebhook(body, headers);
-            expect(result.valid).toBe(false);
-            expect(result.error).toBe('Missing topic header (x-contentful-topic)');
-            expect(result.payload).toBeUndefined();
-        });
-        it('should reject webhook with invalid signature', () => {
-            const payload = createValidPayload();
-            const body = JSON.stringify(payload);
-            const headers = {
-                'x-contentful-signature': 'invalid-signature',
-                'x-contentful-topic': 'Entry.publish'
-            };
-            const result = handler.parseWebhook(body, headers);
-            expect(result.valid).toBe(false);
-            expect(result.error).toBe('Invalid signature');
-            expect(result.payload).toBeUndefined();
-        });
-        it('should reject webhook with invalid JSON', () => {
-            const body = 'invalid json {';
-            const signature = signBody(body);
-            const headers = {
-                'x-contentful-signature': signature,
-                'x-contentful-topic': 'Entry.publish'
-            };
-            const result = handler.parseWebhook(body, headers);
-            expect(result.valid).toBe(false);
-            expect(result.error).toContain('Unexpected');
-            expect(result.payload).toBeUndefined();
-        });
-        it('should handle non-Error exceptions in parsing', () => {
-            // Create a new handler for this test to avoid affecting other tests
-            const testHandler = new ContentfulWebhookHandler_1.ContentfulWebhookHandler({
-                webhookSecret: TEST_SECRET
-            });
-            const body = '{"test":"data"}';
-            const hmac = crypto_1.default.createHmac('sha256', TEST_SECRET);
-            hmac.update(body);
-            const signature = hmac.digest('base64');
-            // Mock JSON.parse to throw a non-Error
-            const originalParse = global.JSON.parse;
-            global.JSON.parse = jest.fn().mockImplementationOnce(() => {
-                // eslint-disable-next-line @typescript-eslint/no-throw-literal
-                throw 'string error';
-            });
-            try {
-                const headers = {
-                    'x-contentful-signature': signature,
-                    'x-contentful-topic': 'Entry.publish'
-                };
-                const result = testHandler.parseWebhook(body, headers);
-                expect(result.valid).toBe(false);
-                expect(result.error).toBe('string error');
-            }
-            finally {
-                // Restore original
-                global.JSON.parse = originalParse;
-            }
-        });
-        it('should handle all webhook topics', () => {
-            const topics = [
-                'Entry.create',
-                'Entry.publish',
-                'Asset.delete',
-                'ContentType.save'
-            ];
-            topics.forEach(topic => {
-                const payload = createValidPayload();
-                const body = JSON.stringify(payload);
-                const signature = signBody(body);
-                const headers = {
-                    'x-contentful-signature': signature,
-                    'x-contentful-topic': topic
-                };
-                const result = handler.parseWebhook(body, headers);
-                expect(result.valid).toBe(true);
-                expect(result.topic).toBe(topic);
-            });
-        });
-    });
-    describe('timestamp validation', () => {
-        const createPayloadWithTimestamp = (timestamp) => ({
-            sys: {
-                type: 'Entry',
-                id: 'test-entry-123',
-                space: {
-                    sys: {
-                        type: 'Link',
-                        linkType: 'Space',
-                        id: 'space-123'
-                    }
-                },
-                environment: {
-                    sys: {
-                        type: 'Link',
-                        linkType: 'Environment',
-                        id: 'master'
-                    }
-                },
-                contentType: {
-                    sys: {
-                        type: 'Link',
-                        linkType: 'ContentType',
-                        id: 'blogPost'
-                    }
-                },
-                updatedAt: timestamp
-            }
-        });
-        const signBody = (body) => {
-            const hmac = crypto_1.default.createHmac('sha256', TEST_SECRET);
-            hmac.update(body);
-            return hmac.digest('base64');
-        };
-        it('should accept recent timestamp when validation enabled', () => {
-            const timestampHandler = new ContentfulWebhookHandler_1.ContentfulWebhookHandler({
-                webhookSecret: TEST_SECRET,
-                enableTimestampValidation: true,
-                maxTimestampDeltaSeconds: 300
-            });
-            const payload = createPayloadWithTimestamp(new Date().toISOString());
-            const body = JSON.stringify(payload);
-            const signature = signBody(body);
-            const headers = {
-                'x-contentful-signature': signature,
-                'x-contentful-topic': 'Entry.publish'
-            };
-            const result = timestampHandler.parseWebhook(body, headers);
-            expect(result.valid).toBe(true);
-        });
-        it('should reject old timestamp when validation enabled', () => {
-            const timestampHandler = new ContentfulWebhookHandler_1.ContentfulWebhookHandler({
-                webhookSecret: TEST_SECRET,
-                enableTimestampValidation: true,
-                maxTimestampDeltaSeconds: 300
-            });
-            // Create timestamp 10 minutes ago (600 seconds)
-            const oldDate = new Date(Date.now() - 600000);
-            const payload = createPayloadWithTimestamp(oldDate.toISOString());
-            const body = JSON.stringify(payload);
-            const signature = signBody(body);
-            const headers = {
-                'x-contentful-signature': signature,
-                'x-contentful-topic': 'Entry.publish'
-            };
-            const result = timestampHandler.parseWebhook(body, headers);
-            expect(result.valid).toBe(false);
-            expect(result.error).toBe('Invalid timestamp (possible replay attack)');
-        });
-        it('should accept any timestamp when validation disabled', () => {
-            // Default handler has timestamp validation disabled
-            const oldDate = new Date(Date.now() - 600000);
-            const payload = createPayloadWithTimestamp(oldDate.toISOString());
-            const body = JSON.stringify(payload);
-            const signature = signBody(body);
-            const headers = {
-                'x-contentful-signature': signature,
-                'x-contentful-topic': 'Entry.publish'
-            };
-            const result = handler.parseWebhook(body, headers);
-            expect(result.valid).toBe(true);
-        });
-        it('should reject payload without timestamp when validation enabled', () => {
-            const timestampHandler = new ContentfulWebhookHandler_1.ContentfulWebhookHandler({
-                webhookSecret: TEST_SECRET,
-                enableTimestampValidation: true,
-                maxTimestampDeltaSeconds: 300
-            });
-            const payload = {
-                sys: {
-                    type: 'Entry',
-                    id: 'test-entry-123',
-                    space: {
-                        sys: {
-                            type: 'Link',
-                            linkType: 'Space',
-                            id: 'space-123'
-                        }
-                    },
-                    environment: {
-                        sys: {
-                            type: 'Link',
-                            linkType: 'Environment',
-                            id: 'master'
-                        }
-                    }
-                }
-            };
-            const body = JSON.stringify(payload);
-            const signature = signBody(body);
-            const headers = {
-                'x-contentful-signature': signature,
-                'x-contentful-topic': 'Entry.publish'
-            };
-            const result = timestampHandler.parseWebhook(body, headers);
-            expect(result.valid).toBe(false);
-            expect(result.error).toBe('Invalid timestamp (possible replay attack)');
-        });
-    });
-    describe('getEventType', () => {
-        it('should parse Entry.publish topic', () => {
-            const result = handler.getEventType('Entry.publish');
-            expect(result.resource).toBe('Entry');
-            expect(result.action).toBe('publish');
-        });
-        it('should parse Asset.delete topic', () => {
-            const result = handler.getEventType('Asset.delete');
-            expect(result.resource).toBe('Asset');
-            expect(result.action).toBe('delete');
-        });
-        it('should parse ContentType.save topic', () => {
-            const result = handler.getEventType('ContentType.save');
-            expect(result.resource).toBe('ContentType');
-            expect(result.action).toBe('save');
-        });
-        it('should parse Entry.create topic', () => {
-            const result = handler.getEventType('Entry.create');
-            expect(result.resource).toBe('Entry');
-            expect(result.action).toBe('create');
-        });
-        it('should parse Entry.auto_save topic', () => {
-            const result = handler.getEventType('Entry.auto_save');
-            expect(result.resource).toBe('Entry');
-            expect(result.action).toBe('auto_save');
-        });
-        it('should parse Entry.archive topic', () => {
-            const result = handler.getEventType('Entry.archive');
-            expect(result.resource).toBe('Entry');
-            expect(result.action).toBe('archive');
-        });
-        it('should parse Entry.unarchive topic', () => {
-            const result = handler.getEventType('Entry.unarchive');
-            expect(result.resource).toBe('Entry');
-            expect(result.action).toBe('unarchive');
-        });
-        it('should parse Entry.unpublish topic', () => {
-            const result = handler.getEventType('Entry.unpublish');
-            expect(result.resource).toBe('Entry');
-            expect(result.action).toBe('unpublish');
-        });
-        it('should throw error for invalid topic format', () => {
-            expect(() => {
-                handler.getEventType('InvalidTopic');
-            }).toThrow('Invalid topic format: InvalidTopic');
-        });
-        it('should throw error for too many parts', () => {
-            expect(() => {
-                handler.getEventType('Entry.publish.extra');
-            }).toThrow('Invalid topic format: Entry.publish.extra');
-        });
-        it('should throw error for invalid resource', () => {
-            expect(() => {
-                handler.getEventType('InvalidResource.publish');
-            }).toThrow('Invalid resource type: InvalidResource');
-        });
-        it('should throw error for invalid action', () => {
-            expect(() => {
-                handler.getEventType('Entry.invalidAction');
-            }).toThrow('Invalid action type: invalidAction');
-        });
-    });
-    describe('updateSecret', () => {
-        it('should update webhook secret', () => {
-            const newSecret = 'new-test-secret';
-            handler.updateSecret(newSecret);
-            // Verify new secret works
-            const body = '{"test":"data"}';
-            const hmac = crypto_1.default.createHmac('sha256', newSecret);
-            hmac.update(body);
-            const signature = hmac.digest('base64');
-            const isValid = handler.validateSignature(body, signature);
-            expect(isValid).toBe(true);
-        });
-        it('should invalidate old secret after update', () => {
-            const body = '{"test":"data"}';
-            const hmac = crypto_1.default.createHmac('sha256', TEST_SECRET);
-            hmac.update(body);
-            const oldSignature = hmac.digest('base64');
-            // Update to new secret
-            handler.updateSecret('new-test-secret');
-            // Old signature should no longer work
-            const isValid = handler.validateSignature(body, oldSignature);
-            expect(isValid).toBe(false);
-        });
-    });
-    describe('integration scenarios', () => {
-        it('should handle complete Entry.publish webhook', () => {
-            const payload = {
-                sys: {
-                    type: 'Entry',
-                    id: 'blog-post-123',
-                    space: {
-                        sys: {
-                            type: 'Link',
-                            linkType: 'Space',
-                            id: 'my-space'
-                        }
-                    },
-                    environment: {
-                        sys: {
-                            type: 'Link',
-                            linkType: 'Environment',
-                            id: 'master'
-                        }
-                    },
-                    contentType: {
-                        sys: {
-                            type: 'Link',
-                            linkType: 'ContentType',
-                            id: 'blogPost'
-                        }
-                    },
-                    revision: 5,
-                    createdAt: '2025-01-01T00:00:00Z',
-                    updatedAt: new Date().toISOString()
-                },
-                fields: {
-                    title: { 'en-US': 'My Blog Post' },
-                    content: { 'en-US': 'Blog post content here' }
-                }
-            };
-            const body = JSON.stringify(payload);
-            const hmac = crypto_1.default.createHmac('sha256', TEST_SECRET);
-            hmac.update(body);
-            const signature = hmac.digest('base64');
-            const headers = {
-                'x-contentful-signature': signature,
-                'x-contentful-topic': 'Entry.publish',
-                'x-contentful-webhook-name': 'test-webhook',
-                'x-contentful-crn': 'crn:contentful:::content:spaces/my-space'
-            };
-            const result = handler.parseWebhook(body, headers);
-            expect(result.valid).toBe(true);
-            expect(result.payload?.sys.id).toBe('blog-post-123');
-            expect(result.topic).toBe('Entry.publish');
-            if (result.topic) {
-                const eventType = handler.getEventType(result.topic);
-                expect(eventType.resource).toBe('Entry');
-                expect(eventType.action).toBe('publish');
-            }
-        });
-        it('should handle Asset.delete webhook', () => {
-            const payload = {
-                sys: {
-                    type: 'Asset',
-                    id: 'asset-456',
-                    space: {
-                        sys: {
-                            type: 'Link',
-                            linkType: 'Space',
-                            id: 'my-space'
-                        }
-                    },
-                    environment: {
-                        sys: {
-                            type: 'Link',
-                            linkType: 'Environment',
-                            id: 'master'
-                        }
-                    },
-                    revision: 1,
-                    updatedAt: new Date().toISOString()
-                }
-            };
-            const body = JSON.stringify(payload);
-            const hmac = crypto_1.default.createHmac('sha256', TEST_SECRET);
-            hmac.update(body);
-            const signature = hmac.digest('base64');
-            const headers = {
-                'x-contentful-signature': signature,
-                'x-contentful-topic': 'Asset.delete'
-            };
-            const result = handler.parseWebhook(body, headers);
-            expect(result.valid).toBe(true);
-            expect(result.payload?.sys.type).toBe('Asset');
-            expect(result.topic).toBe('Asset.delete');
-        });
-    });
-});

package/dist/__tests__/errors.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/__tests__/errors.test.js

@@ -1,28 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-/*
-Copyright (c) 2025 Bernier LLC
-*/
-const errors_1 = require("../errors");
-describe('ContentfulWebhookHandlerError', () => {
-    it('uses default code when none provided', () => {
-        const err = new errors_1.ContentfulWebhookHandlerError('boom');
-        expect(err.name).toBe('ContentfulWebhookHandlerError');
-        expect(err.code).toBe('CONTENTFUL_WEBHOOK_HANDLER_ERROR');
-        expect(err.message).toBe('boom');
-        expect(err.cause).toBeUndefined();
-        expect(err.context).toBeUndefined();
-    });
-    it('preserves cause and context', () => {
-        const cause = new Error('root');
-        const err = new errors_1.ContentfulWebhookHandlerError('wrap', { cause, code: 'OPERATION_FAILED', context: { foo: 'bar' } });
-        expect(err.cause).toBe(cause);
-        expect(err.code).toBe('OPERATION_FAILED');
-        expect(err.context).toEqual({ foo: 'bar' });
-    });
-    it('omits context when not provided', () => {
-        const err = new errors_1.ContentfulWebhookHandlerError('msg', { code: 'INVALID_INPUT' });
-        expect(err.code).toBe('INVALID_INPUT');
-        expect(err.context).toBeUndefined();
-    });
-});

package/dist/__tests__/index.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/__tests__/index.test.js

@@ -1,62 +0,0 @@
-"use strict";
-/*
-Copyright (c) 2025 Bernier LLC
-
-This file is licensed to the client under a limited-use license.
-The client may use and modify this code *only within the scope of the project it was delivered for*.
-Redistribution or use in other products or commercial offerings is not permitted without written consent from Bernier LLC.
-*/
-Object.defineProperty(exports, "__esModule", { value: true });
-const index_1 = require("../index");
-describe('index exports', () => {
-    it('should export ContentfulWebhookHandler class', () => {
-        expect(index_1.ContentfulWebhookHandler).toBeDefined();
-        expect(typeof index_1.ContentfulWebhookHandler).toBe('function');
-    });
-    it('should create a ContentfulWebhookHandler instance', () => {
-        const handler = new index_1.ContentfulWebhookHandler({
-            webhookSecret: 'test-secret'
-        });
-        expect(handler).toBeInstanceOf(index_1.ContentfulWebhookHandler);
-    });
-    it('should export type definitions', () => {
-        // Type check - these should compile
-        const payload = {
-            sys: {
-                type: 'Entry',
-                id: 'test',
-                space: {
-                    sys: { type: 'Link', linkType: 'Space', id: 'space' }
-                },
-                environment: {
-                    sys: { type: 'Link', linkType: 'Environment', id: 'master' }
-                }
-            }
-        };
-        const validationResult = {
-            valid: true,
-            payload,
-            topic: 'Entry.publish'
-        };
-        const eventType = {
-            resource: 'Entry',
-            action: 'publish'
-        };
-        const options = {
-            webhookSecret: 'test'
-        };
-        const topic = 'Entry.publish';
-        const headers = {
-            'x-contentful-signature': 'sig',
-            'x-contentful-topic': 'Entry.publish',
-            'x-contentful-webhook-name': 'test',
-            'x-contentful-crn': 'crn:test'
-        };
-        // If these compile, the types are exported correctly
-        expect(validationResult).toBeDefined();
-        expect(eventType).toBeDefined();
-        expect(options).toBeDefined();
-        expect(topic).toBeDefined();
-        expect(headers).toBeDefined();
-    });
-});

package/dist/errors.d.ts

@@ -1,11 +0,0 @@
-export type ContentfulWebhookHandlerErrorCode = 'CONTENTFUL_WEBHOOK_HANDLER_ERROR' | 'INVALID_INPUT' | 'OPERATION_FAILED';
-export interface ContentfulWebhookHandlerErrorOptions {
-    cause?: Error;
-    code?: ContentfulWebhookHandlerErrorCode;
-    context?: Record<string, unknown>;
-}
-export declare class ContentfulWebhookHandlerError extends Error {
-    readonly code: ContentfulWebhookHandlerErrorCode;
-    readonly context?: Record<string, unknown>;
-    constructor(message: string, options?: ContentfulWebhookHandlerErrorOptions);
-}

package/dist/errors.js

@@ -1,24 +0,0 @@
-"use strict";
-/*
-Copyright (c) 2025 Bernier LLC
-
-This file is licensed to the client under a limited-use license.
-The client may use and modify this code only within the scope of the project it was delivered for.
-Redistribution or use in other products or commercial offerings is not permitted without written consent from Bernier LLC.
-*/
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ContentfulWebhookHandlerError = void 0;
-class ContentfulWebhookHandlerError extends Error {
-    code;
-    context;
-    constructor(message, options) {
-        super(message, options?.cause ? { cause: options.cause } : undefined);
-        this.name = 'ContentfulWebhookHandlerError';
-        this.code = options?.code ?? 'CONTENTFUL_WEBHOOK_HANDLER_ERROR';
-        if (options?.context !== undefined) {
-            this.context = options.context;
-        }
-        Error.captureStackTrace?.(this, this.constructor);
-    }
-}
-exports.ContentfulWebhookHandlerError = ContentfulWebhookHandlerError;

package/dist/index.d.ts

@@ -1,3 +0,0 @@
-export { ContentfulWebhookHandler, WebhookValidationResult, EventType, ContentfulWebhookHandlerOptions } from './ContentfulWebhookHandler';
-export { ContentfulWebhookHandlerError, ContentfulWebhookHandlerErrorCode, ContentfulWebhookHandlerErrorOptions, } from './errors';
-export type { ContentfulWebhookPayload, ContentfulWebhookTopic, ContentfulWebhookHeaders } from '@bernierllc/contentful-types';

package/dist/index.js

@@ -1,14 +0,0 @@
-"use strict";
-/*
-Copyright (c) 2025 Bernier LLC
-
-This file is licensed to the client under a limited-use license.
-The client may use and modify this code *only within the scope of the project it was delivered for*.
-Redistribution or use in other products or commercial offerings is not permitted without written consent from Bernier LLC.
-*/
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ContentfulWebhookHandlerError = exports.ContentfulWebhookHandler = void 0;
-var ContentfulWebhookHandler_1 = require("./ContentfulWebhookHandler");
-Object.defineProperty(exports, "ContentfulWebhookHandler", { enumerable: true, get: function () { return ContentfulWebhookHandler_1.ContentfulWebhookHandler; } });
-var errors_1 = require("./errors");
-Object.defineProperty(exports, "ContentfulWebhookHandlerError", { enumerable: true, get: function () { return errors_1.ContentfulWebhookHandlerError; } });