@zintrust/socket 0.4.59 → 0.4.63

package/dist/build-manifest.json

@@ -1,14 +1,14 @@
 {
   "name": "@zintrust/socket",
-  "version": "0.4.59",
-  "buildDate": "2026-04-04T22:09:08.837Z",
+  "version": "0.4.63",
+  "buildDate": "2026-04-05T13:13:05.363Z",
   "buildEnvironment": {
     "node": "v22.22.1",
     "platform": "darwin",
     "arch": "arm64"
   },
   "git": {
-    "commit": "99e4d331",
+    "commit": "533afc24",
     "branch": "release"
   },
   "package": {
@@ -22,16 +22,16 @@
   },
   "files": {
     "build-manifest.json": {
-      "size": 947,
-      "sha256": "2e619502513f9b465881fdb6cb9cda78bb082e6df9bc20d4f1d62a1f7173174b"
+      "size": 1086,
+      "sha256": "a55e096a80190637fe7d56c36e53865451f623c88ceb5ccb7b9124e4a14335bb"
     },
     "index.d.ts": {
-      "size": 932,
-      "sha256": "6432952783fd7eacfc46813fcbd6e96672ff94c73fb0bad8e2f20fc278c64377"
+      "size": 1393,
+      "sha256": "c3b8e8d96234c34a42f08dd14fadab504cb6f2bd76c15bce5fb23e5acde4941f"
     },
     "index.js": {
-      "size": 35358,
-      "sha256": "6a43f6cdc1591b1dc7304e5ccd66be1e41aaa7419546eb0258a280b8ea9b8642"
+      "size": 38284,
+      "sha256": "cf683327a9a0d2ba1b349cc059c2113c76e36e130b56e613932fdccd5c4f435f"
     },
     "register.d.ts": {
       "size": 16,

package/dist/index.d.ts

@@ -1,4 +1,19 @@
-import { type IRouter, type SocketRouteRegistrar } from '@zintrust/core';
+import { type IRequest, type IRouter, type SocketRouteRegistrar } from '@zintrust/core';
+type ServerSideSocketPublishInput = Readonly<{
+    channels: readonly string[];
+    event: string;
+    data: unknown;
+    socketId?: string;
+    request?: IRequest;
+    user?: unknown;
+}>;
+declare const publishSocketEventFromServer: (input: ServerSideSocketPublishInput) => Promise<{
+    ok: true;
+    transport: "node" | "cloudflare";
+    channels: readonly string[];
+    event: string;
+    deliveries: number;
+}>;
 declare const socketRuntime: any;
 declare const registerSocketRoutes: (router: IRouter) => void;
 declare const socketRouteRegistrar: SocketRouteRegistrar;
@@ -16,5 +31,5 @@ export declare class ZintrustSocketHub {
     private handlePublishRequest;
 }
 export declare const publishSocketEvent: (channels: string[], event: string, data: unknown, excludeSocketId?: string) => number;
-export { registerSocketRoutes, socketRouteRegistrar, socketRuntime };
+export { publishSocketEventFromServer, registerSocketRoutes, socketRouteRegistrar, socketRuntime };
 export default SocketPackage;

package/dist/index.js

@@ -1,4 +1,4 @@
-import { Cloudflare, broadcastConfig, ErrorFactory, isArray, isNonEmptyString, Logger, middlewareConfig, Router, SocketFeature, } from '@zintrust/core';
+import { broadcastConfig, Cloudflare, ErrorFactory, isArray, isNonEmptyString, Logger, middlewareConfig, Router, SocketFeature, } from '@zintrust/core';
 const encoder = new TextEncoder();
 const websocketGuid = '258EAFA5-E914-47DA-95CA-C5AB0DC85B11';
 const socketHubBindingName = 'ZT_SOCKET_HUB';
@@ -46,7 +46,11 @@ const normalizeSocketPath = (value) => {
     if (trimmed === '' || trimmed === '/')
         return '/app';
     const normalized = trimmed.startsWith('/') ? trimmed : `/${trimmed}`;
-    return normalized.length > 1 ? normalized.replace(/\/+$/, '') : normalized;
+    let end = normalized.length;
+    while (end > 1 && normalized[end - 1] === '/') {
+        end -= 1;
+    }
+    return end === normalized.length ? normalized : normalized.slice(0, end);
 };
 const pickFirstNonEmpty = (...values) => {
     for (const value of values) {
@@ -491,7 +495,7 @@ const shouldUseCloudflareHub = (settings) => {
 };
 const parseJsonResponse = async (response) => {
     try {
-        return (await response.clone().json());
+        return await response.clone().json();
     }
     catch {
         try {
@@ -658,6 +662,76 @@ const normalizePublishDecisionPayload = (payload, decision) => {
         })(),
     };
 };
+const createServerSidePublishRequest = (input) => {
+    return {
+        getBody: () => null,
+        getHeader: () => undefined,
+        getParam: () => undefined,
+        user: input.user ?? null,
+    };
+};
+const getResponseDeliveries = (payload) => {
+    if (typeof payload !== 'object' || payload === null) {
+        return 0;
+    }
+    const deliveries = payload.deliveries;
+    return typeof deliveries === 'number' && Number.isFinite(deliveries) ? deliveries : 0;
+};
+const publishSocketEventFromServer = async (input) => {
+    const settings = getSocketRuntimeSettings(Cloudflare.getWorkersEnv());
+    if (!settings.enabled || settings.appKey.trim() === '') {
+        throw ErrorFactory.createConfigError('Socket runtime is not enabled.');
+    }
+    const request = input.request ?? createServerSidePublishRequest(input);
+    const payload = {
+        channels: input.channels.map((channel) => channel.trim()),
+        event: input.event.trim(),
+        data: input.data ?? {},
+        ...(isNonEmptyString(input.socketId) ? { socket_id: input.socketId.trim() } : {}),
+    };
+    const publishPolicy = resolveSocketPublishPolicy();
+    const decision = await publishPolicy.authorize(request, {
+        appId: settings.appId,
+        channels: payload.channels,
+        event: payload.event,
+        data: payload.data,
+        socketId: payload.socket_id,
+        user: input.user ?? request.user ?? null,
+    });
+    if (decision.allowed !== true) {
+        throw ErrorFactory.createForbiddenError(decision.message ?? 'Forbidden', {
+            statusCode: decision.statusCode ?? 403,
+        });
+    }
+    const allowedPayload = normalizePublishDecisionPayload(payload, decision);
+    if (allowedPayload === null) {
+        throw ErrorFactory.createValidationError('Socket publish policy must return a non-empty event and channels.');
+    }
+    if (shouldUseCloudflareHub(settings)) {
+        const response = await forwardPublishToHub(settings, allowedPayload, Cloudflare.getWorkersEnv());
+        const responseBody = await parseJsonResponse(response);
+        if (!response.ok) {
+            throw ErrorFactory.createTryCatchError(`Socket publish request failed (${response.status})`, {
+                status: response.status,
+                body: responseBody,
+            });
+        }
+        return {
+            ok: true,
+            transport: 'cloudflare',
+            channels: allowedPayload.channels,
+            event: allowedPayload.event,
+            deliveries: getResponseDeliveries(responseBody),
+        };
+    }
+    return {
+        ok: true,
+        transport: 'node',
+        channels: allowedPayload.channels,
+        event: allowedPayload.event,
+        deliveries: publishToChannels(getNodeSocketState(), allowedPayload.channels, allowedPayload.event, allowedPayload.data, allowedPayload.socket_id),
+    };
+};
 const forwardPublishToHub = async (settings, payload, envSource) => {
     const stub = getSocketHubStub(settings, envSource);
     if (stub === null) {
@@ -839,15 +913,13 @@ const publishEvent = async (req, res) => {
 const registerSocketRoutes = (router) => {
     const settings = getSocketRuntimeSettings();
     const allowAuthRouteOverride = isSocketAuthRouteOverrideEnabled();
+    const hasExistingAuthRoute = routeExists(router, 'POST', '/broadcasting/auth');
     assertReservedSocketRouteAvailable(router, 'GET', `${settings.path}/:appKey`);
-    assertReservedSocketRouteAvailable(router, 'POST', '/broadcasting/auth', {
-        allowOverride: true,
-    });
     assertReservedSocketRouteAvailable(router, 'POST', '/apps/:appId/events');
     Router.get(router, `${settings.path}/:appKey`, respondUpgradeRequired);
-    if (allowAuthRouteOverride) {
-        if (!routeExists(router, 'POST', '/broadcasting/auth')) {
-            Logger.warn('SOCKET_ALLOW_AUTH_ROUTE_OVERRIDE=true but POST /broadcasting/auth is not registered by the application.');
+    if (hasExistingAuthRoute) {
+        if (!allowAuthRouteOverride) {
+            Logger.info('Detected existing application-owned POST /broadcasting/auth route; preserving it while sockets are enabled.');
         }
     }
     else {
@@ -926,5 +998,5 @@ export class ZintrustSocketHub {
 export const publishSocketEvent = (channels, event, data, excludeSocketId) => {
     return publishToChannels(getNodeSocketState(), channels, event, data, excludeSocketId);
 };
-export { registerSocketRoutes, socketRouteRegistrar, socketRuntime };
+export { publishSocketEventFromServer, registerSocketRoutes, socketRouteRegistrar, socketRuntime };
 export default SocketPackage;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zintrust/socket",
-  "version": "0.4.59",
+  "version": "0.4.63",
   "description": "Unified socket runtime for ZinTrust.",
   "private": false,
   "type": "module",
@@ -23,7 +23,7 @@
     "node": ">=20.0.0"
   },
   "peerDependencies": {
-    "@zintrust/core": "^0.4.59"
+    "@zintrust/core": "^0.4.63"
   },
   "publishConfig": {
     "access": "public"