@retrivora-ai/rag-engine 2.2.6 → 2.2.7

package/dist/server.mjs

@@ -2231,6 +2231,16 @@ var AuthenticationException = class extends RetrivoraError {
     super(message, "AUTHENTICATION_ERROR", details);
   }
 };
+var SDKVersionUnsupportedError = class extends RetrivoraError {
+  constructor(message = "This SDK version is no longer supported.", details) {
+    super(message, "SDK_VERSION_UNSUPPORTED", details);
+  }
+};
+var LicenseValidationError = class extends RetrivoraError {
+  constructor(message = "License validation failed.", details) {
+    super(message, "LICENSE_VALIDATION_ERROR", details);
+  }
+};
 function wrapError(err, defaultCode, defaultMessage) {
   var _a2;
   if (err instanceof RetrivoraError) {
@@ -2243,8 +2253,10 @@ function wrapError(err, defaultCode, defaultMessage) {
   if (status === 429 || /rate[- ]?limit/i.test(message) || code === "RATE_LIMIT_EXCEEDED") {
     return new RateLimitException(message, err);
   }
-  if (status === 401 || status === 403 || /unauthorized|auth|api[- ]?key/i.test(message) || code === "INVALID_API_KEY") {
-    return new AuthenticationException(message, err);
+  if (status === 401 || status === 403 || /unauthorized|auth|license|revoked|terminated|api[- ]?key/i.test(message) || code === "INVALID_API_KEY" || code === "LICENSE_DELETED" || code === "LICENSE_INACTIVE") {
+    const isLicenseError = /403|license|revoked|terminated/i.test(message) || status === 403;
+    const cleanMsg = isLicenseError ? "Your Retrivora license key has been terminated, suspended, or revoked. Access denied." : message;
+    return new AuthenticationException(cleanMsg, err);
   }
   switch (defaultCode) {
     case "PROVIDER_NOT_FOUND":
@@ -4711,7 +4723,7 @@ var ConfigValidator = class {
 // package.json
 var package_default = {
   name: "@retrivora-ai/rag-engine",
-  version: "2.2.6",
+  version: "2.2.7",
   description: "Retrivora AI is a plug-and-play AI engine for RAG chat experiences \u2014 generic vector DB + LLM provider, embeddable or standalone.",
   author: "Abhinav Alkuchi",
   license: "UNLICENSED",
@@ -10827,7 +10839,10 @@ function createStreamHandler(configOrPlugin, options) {
           }
         } catch (streamError) {
           if (isActive) {
-            const errorMessage = streamError instanceof Error ? streamError.message : String(streamError);
+            let errorMessage = streamError instanceof Error ? streamError.message : String(streamError);
+            if (errorMessage.includes("403") || errorMessage.toLowerCase().includes("license") || errorMessage.toLowerCase().includes("revoked") || errorMessage.toLowerCase().includes("terminated")) {
+              errorMessage = "Your Retrivora license key has been terminated, suspended, or revoked. Access denied.";
+            }
             console.error("[createStreamHandler] Stream error:", streamError);
             reportTelemetry(req, plugin, "QUERY_GENERATION", "error", errorMessage);
             try {
@@ -11228,6 +11243,108 @@ function createRagHandler(configOrPlugin, options) {
     }
   };
 }
+
+// src/core/LicenseValidator.ts
+var _LicenseValidator = class _LicenseValidator {
+  // 5-minute TTL for successful validation only
+  constructor() {
+    this.cache = /* @__PURE__ */ new Map();
+  }
+  static getInstance() {
+    if (!_LicenseValidator.instance) {
+      _LicenseValidator.instance = new _LicenseValidator();
+    }
+    return _LicenseValidator.instance;
+  }
+  /**
+   * Invalidate local validation cache for a license key
+   */
+  purgeCache(licenseKey) {
+    if (licenseKey) {
+      this.cache.delete(licenseKey);
+    } else {
+      this.cache.clear();
+    }
+  }
+  /**
+   * Validate license status and SDK version against Retrivora License Service
+   */
+  async validate(request) {
+    const {
+      licenseKey,
+      projectId,
+      sdkVersion = SDK_VERSION,
+      sdk = "@retrivora-ai/rag-engine",
+      platform = typeof window !== "undefined" ? "browser" : "node",
+      retrivoraApiBase,
+      headers: customHeaders
+    } = request;
+    if (!licenseKey) {
+      this.purgeCache(licenseKey);
+      throw new LicenseValidationError("Missing RETRIVORA_LICENSE_KEY in request.");
+    }
+    const cached = this.cache.get(licenseKey);
+    if (cached) {
+      const isFresh = Date.now() - cached.timestamp < _LicenseValidator.SUCCESS_CACHE_TTL_MS;
+      if (isFresh && cached.response.valid && cached.response.licenseStatus === "ACTIVE" && !cached.response.forceUpgrade) {
+        return cached.response;
+      } else {
+        this.cache.delete(licenseKey);
+      }
+    }
+    const base = retrivoraApiBase || (typeof process !== "undefined" ? process.env.NEXT_PUBLIC_RETRIVORA_API_BASE || process.env.RETRIVORA_API_BASE : "") || "/api/retrivora";
+    const validateUrl = `${base.replace(/\/$/, "")}/v1/license/validate`;
+    let res;
+    try {
+      res = await fetch(validateUrl, {
+        method: "POST",
+        cache: "no-store",
+        headers: __spreadValues({
+          "Content-Type": "application/json",
+          "x-license-key": licenseKey,
+          "x-sdk-version": sdkVersion
+        }, customHeaders || {}),
+        body: JSON.stringify({
+          licenseKey,
+          projectId,
+          sdkVersion,
+          sdk,
+          platform
+        })
+      });
+    } catch (err) {
+      this.purgeCache(licenseKey);
+      throw new LicenseValidationError(`License validation request failed: ${(err == null ? void 0 : err.message) || "Network error"}`);
+    }
+    const data = await res.json().catch(() => ({
+      valid: false,
+      licenseStatus: "REVOKED",
+      minimumSupportedVersion: "2.1.0",
+      latestVersion: SDK_VERSION,
+      forceUpgrade: false,
+      expiresAt: null,
+      message: "Failed to parse license validation response."
+    }));
+    if (!res.ok || !data.valid || data.licenseStatus !== "ACTIVE" || data.forceUpgrade) {
+      this.purgeCache(licenseKey);
+      if (data.forceUpgrade || res.status === 426) {
+        throw new SDKVersionUnsupportedError(
+          data.message || `This SDK version (${sdkVersion}) is no longer supported. Upgrade to version ${data.latestVersion || "2.2.6"} or later.`,
+          data
+        );
+      }
+      const errMsg = data.message || `License validation failed with status: ${data.licenseStatus}. Access denied.`;
+      throw new LicenseValidationError(errMsg, data);
+    }
+    this.cache.set(licenseKey, {
+      response: data,
+      timestamp: Date.now()
+    });
+    return data;
+  }
+};
+_LicenseValidator.SUCCESS_CACHE_TTL_MS = 5 * 60 * 1e3;
+var LicenseValidator = _LicenseValidator;
 export {
   AnthropicProvider,
   AuthenticationException,
@@ -11249,6 +11366,8 @@ export {
   IntentClassifier,
   LLMFactory,
   LLM_PROFILES,
+  LicenseValidationError,
+  LicenseValidator,
   LicenseVerifier,
   MilvusProvider,
   MixedRendererStrategy,
@@ -11279,6 +11398,7 @@ export {
   Rule6SmallResultSetRule,
   Rule7LargeTableRule,
   RuleEngine,
+  SDKVersionUnsupportedError,
   SDK_VERSION,
   TableRendererStrategy,
   TextRendererStrategy,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@retrivora-ai/rag-engine",
-  "version": "2.2.6",
+  "version": "2.2.7",
   "description": "Retrivora AI is a plug-and-play AI engine for RAG chat experiences — generic vector DB + LLM provider, embeddable or standalone.",
   "author": "Abhinav Alkuchi",
   "license": "UNLICENSED",

package/src/components/ChatWidget.tsx

@@ -4,6 +4,7 @@ import { ChatWindow } from './ChatWindow';
 import { useConfig } from './ConfigProvider';
 import { ChatWidgetProps } from '../types';
 import { SDK_VERSION } from '../version';
+import { LicenseValidator } from '../core/LicenseValidator';
 
 const DEFAULT_DIMENSIONS = { width: 380, height: 600 };
 
@@ -46,7 +47,7 @@ const GEMINI_STYLES = `
 `;
 
 export function ChatWidget({ position = 'bottom-right', onAddToCart, apiUrl, retrivoraApiBase, headers }: ChatWidgetProps) {
-  const { ui } = useConfig();
+  const { ui, projectId } = useConfig();
   const [isOpen, setIsOpen] = useState(false);
   const [hasUnread, setHasUnread] = useState(false);
   const [dimensions, setDimensions] = useState(DEFAULT_DIMENSIONS);
@@ -71,44 +72,20 @@ export function ChatWidget({ position = 'bottom-right', onAddToCart, apiUrl, ret
   const handleOpen = async () => {
     setIsValidating(true);
     try {
-      const base = retrivoraApiBase || '/api/retrivora';
-      const configUrl = `${base.replace(/\/$/, '')}/config?sdkVersion=${SDK_VERSION}`;
-      const res = await fetch(configUrl, {
-        method: 'GET',
-        cache: 'no-store',
-        headers: {
-          'Content-Type': 'application/json',
-          'x-sdk-version': SDK_VERSION,
-          ...(headers || {})
-        },
+      const licenseKey = headers?.['x-license-key'] || headers?.['authorization']?.replace(/^Bearer\s+/i, '') || '';
+      await LicenseValidator.getInstance().validate({
+        licenseKey,
+        projectId,
+        retrivoraApiBase,
+        headers,
       });
 
-      if (!res.ok) {
-        const data = await res.json().catch(() => ({}));
-        if (res.status === 426 || data.code === 'SDK_VERSION_OUTDATED') {
-          const msg = data.error || 'Your Retrivora SDK package version is outdated. Please update your package to the latest version to continue.';
-          setWidgetError(msg);
-          setIsOpen(false); // DO NOT OPEN CHAT WIDGET
-          return;
-        }
-        if (
-          res.status === 403 ||
-          res.status === 401 ||
-          (typeof data.error === 'string' && data.error.toLowerCase().includes('license'))
-        ) {
-          const msg = (typeof data.error === 'string' ? data.error : data.error?.message) || 'Your Retrivora license is no longer valid. Please contact your administrator or obtain a valid license key.';
-          setWidgetError(msg);
-          setIsOpen(false); // DO NOT OPEN CHAT WIDGET
-          return;
-        }
-      }
-
       setWidgetError(null);
       setIsOpen(true);
       setHasUnread(false);
-    } catch {
-      // Fallback
-      setIsOpen(true);
+    } catch (err: any) {
+      setWidgetError(err?.message || 'Access denied.');
+      setIsOpen(false); // DO NOT OPEN CHAT WIDGET
     } finally {
       setIsValidating(false);
     }

package/src/components/ChatWindow.tsx

@@ -23,6 +23,7 @@ import { useRagChat } from '../hooks/useRagChat';
 import { BORDER_RADIUS_MAP, CHAT_SUGGESTIONS } from '../config/uiConstants';
 import { ChatWindowProps } from '../types';
 import { SDK_VERSION } from '../version';
+import { LicenseValidator } from '../core/LicenseValidator';
 
 interface SpeechRecognitionEvent {
   resultIndex: number;
@@ -97,48 +98,32 @@ export function ChatWindow({
     let isMounted = true;
     async function validateSessionLicense() {
       try {
-        const base = retrivoraApiBase || '/api/retrivora';
-        const configUrl = `${base.replace(/\/$/, '')}/config?sdkVersion=${SDK_VERSION}`;
-        const res = await fetch(configUrl, {
-          method: 'GET',
-          cache: 'no-store',
-          headers: {
-            'Content-Type': 'application/json',
-            'x-sdk-version': SDK_VERSION,
-            ...(headers || {})
-          },
+        const licenseKey = headers?.['x-license-key'] || headers?.['authorization']?.replace(/^Bearer\s+/i, '') || '';
+        await LicenseValidator.getInstance().validate({
+          licenseKey,
+          projectId,
+          retrivoraApiBase,
+          headers,
         });
 
-        if (!res.ok) {
-          const data = await res.json().catch(() => ({}));
-          if (res.status === 426 || data.code === 'SDK_VERSION_OUTDATED') {
-            if (isMounted) {
-              setVersionError(data.error || 'Your Retrivora SDK package is outdated. Please update your package to the latest version to continue.');
-            }
-          } else if (
-            res.status === 403 ||
-            res.status === 401 ||
-            (typeof data.error === 'string' && data.error.toLowerCase().includes('license'))
-          ) {
-            if (isMounted) {
-              const errMsg = typeof data.error === 'string' ? data.error : data.error?.message || 'Your Retrivora license is no longer valid. Please contact your administrator or obtain a valid license key.';
-              setLicenseError(errMsg);
-            }
-          }
-        } else {
-          if (isMounted) {
-            setLicenseError(null);
-            setVersionError(null);
+        if (isMounted) {
+          setLicenseError(null);
+          setVersionError(null);
+        }
+      } catch (err: any) {
+        if (isMounted) {
+          if (err?.code === 'SDK_VERSION_UNSUPPORTED') {
+            setVersionError(err?.message || 'SDK version unsupported.');
+          } else {
+            setLicenseError(err?.message || 'License validation failed.');
           }
         }
-      } catch {
-        // Non-blocking fallback
       }
     }
 
     validateSessionLicense();
     return () => { isMounted = false; };
-  }, [retrivoraApiBase, headers]);
+  }, [retrivoraApiBase, headers, projectId]);
 
   // Initialize SpeechRecognition
   useEffect(() => {

package/src/core/LicenseValidator.ts

@@ -0,0 +1,146 @@
+import { SDK_VERSION } from '../version';
+import { SDKVersionUnsupportedError, LicenseValidationError } from '../exceptions';
+
+export interface LicenseValidationRequest {
+  licenseKey: string;
+  projectId?: string;
+  sdkVersion?: string;
+  sdk?: string;
+  platform?: string;
+  retrivoraApiBase?: string;
+  headers?: Record<string, string>;
+}
+
+export interface LicenseValidationResponse {
+  valid: boolean;
+  licenseStatus: 'ACTIVE' | 'SUSPENDED' | 'TERMINATED' | 'EXPIRED' | 'REVOKED';
+  minimumSupportedVersion: string;
+  latestVersion: string;
+  forceUpgrade: boolean;
+  expiresAt: string | null;
+  message: string;
+}
+
+interface CachedSuccessValidation {
+  response: LicenseValidationResponse;
+  timestamp: number;
+}
+
+export class LicenseValidator {
+  private static instance: LicenseValidator;
+  private cache: Map<string, CachedSuccessValidation> = new Map();
+  private static readonly SUCCESS_CACHE_TTL_MS = 5 * 60 * 1000; // 5-minute TTL for successful validation only
+
+  private constructor() {}
+
+  public static getInstance(): LicenseValidator {
+    if (!LicenseValidator.instance) {
+      LicenseValidator.instance = new LicenseValidator();
+    }
+    return LicenseValidator.instance;
+  }
+
+  /**
+   * Invalidate local validation cache for a license key
+   */
+  public purgeCache(licenseKey?: string): void {
+    if (licenseKey) {
+      this.cache.delete(licenseKey);
+    } else {
+      this.cache.clear();
+    }
+  }
+
+  /**
+   * Validate license status and SDK version against Retrivora License Service
+   */
+  public async validate(request: LicenseValidationRequest): Promise<LicenseValidationResponse> {
+    const {
+      licenseKey,
+      projectId,
+      sdkVersion = SDK_VERSION,
+      sdk = '@retrivora-ai/rag-engine',
+      platform = typeof window !== 'undefined' ? 'browser' : 'node',
+      retrivoraApiBase,
+      headers: customHeaders,
+    } = request;
+
+    if (!licenseKey) {
+      this.purgeCache(licenseKey);
+      throw new LicenseValidationError('Missing RETRIVORA_LICENSE_KEY in request.');
+    }
+
+    // 1. Check successful 5-minute cache
+    const cached = this.cache.get(licenseKey);
+    if (cached) {
+      const isFresh = Date.now() - cached.timestamp < LicenseValidator.SUCCESS_CACHE_TTL_MS;
+      if (isFresh && cached.response.valid && cached.response.licenseStatus === 'ACTIVE' && !cached.response.forceUpgrade) {
+        return cached.response;
+      } else {
+        this.cache.delete(licenseKey);
+      }
+    }
+
+    // 2. Fetch live validation from Retrivora backend API
+    const base = retrivoraApiBase || (typeof process !== 'undefined' ? process.env.NEXT_PUBLIC_RETRIVORA_API_BASE || process.env.RETRIVORA_API_BASE : '') || '/api/retrivora';
+    const validateUrl = `${base.replace(/\/$/, '')}/v1/license/validate`;
+
+    let res: Response;
+    try {
+      res = await fetch(validateUrl, {
+        method: 'POST',
+        cache: 'no-store',
+        headers: {
+          'Content-Type': 'application/json',
+          'x-license-key': licenseKey,
+          'x-sdk-version': sdkVersion,
+          ...(customHeaders || {}),
+        },
+        body: JSON.stringify({
+          licenseKey,
+          projectId,
+          sdkVersion,
+          sdk,
+          platform,
+        }),
+      });
+    } catch (err: any) {
+      // Fallback: If network error occurs, do not cache and throw error
+      this.purgeCache(licenseKey);
+      throw new LicenseValidationError(`License validation request failed: ${err?.message || 'Network error'}`);
+    }
+
+    const data: LicenseValidationResponse = await res.json().catch(() => ({
+      valid: false,
+      licenseStatus: 'REVOKED' as const,
+      minimumSupportedVersion: '2.1.0',
+      latestVersion: SDK_VERSION,
+      forceUpgrade: false,
+      expiresAt: null,
+      message: 'Failed to parse license validation response.',
+    }));
+
+    // 3. Negative validation responses immediately purge any existing cache
+    if (!res.ok || !data.valid || data.licenseStatus !== 'ACTIVE' || data.forceUpgrade) {
+      this.purgeCache(licenseKey);
+
+      if (data.forceUpgrade || res.status === 426) {
+        throw new SDKVersionUnsupportedError(
+          data.message || `This SDK version (${sdkVersion}) is no longer supported. Upgrade to version ${data.latestVersion || '2.2.6'} or later.`,
+          data
+        );
+      }
+
+      const errMsg = data.message || `License validation failed with status: ${data.licenseStatus}. Access denied.`;
+      throw new LicenseValidationError(errMsg, data);
+    }
+
+    // 4. Cache SUCCESSFUL validation only (TTL = 5 minutes)
+    this.cache.set(licenseKey, {
+      response: data,
+      timestamp: Date.now(),
+    });
+
+    return data;
+  }
+}

package/src/exceptions/index.ts

@@ -8,7 +8,9 @@ export type RetrivoraErrorCode =
   | 'RETRIEVAL_FAILED'
   | 'RATE_LIMITED'
   | 'CONFIGURATION_ERROR'
-  | 'AUTHENTICATION_ERROR';
+  | 'AUTHENTICATION_ERROR'
+  | 'SDK_VERSION_UNSUPPORTED'
+  | 'LICENSE_VALIDATION_ERROR';
 
 export class RetrivoraError extends Error {
   readonly code: RetrivoraErrorCode;
@@ -58,6 +60,18 @@ export class AuthenticationException extends RetrivoraError {
   }
 }
 
+export class SDKVersionUnsupportedError extends RetrivoraError {
+  constructor(message = 'This SDK version is no longer supported.', details?: unknown) {
+    super(message, 'SDK_VERSION_UNSUPPORTED', details);
+  }
+}
+
+export class LicenseValidationError extends RetrivoraError {
+  constructor(message = 'License validation failed.', details?: unknown) {
+    super(message, 'LICENSE_VALIDATION_ERROR', details);
+  }
+}
+
 /**
  * Wraps any unknown error into an appropriate RetrivoraError subclass.
  */
@@ -80,14 +94,20 @@ export function wrapError(
     return new RateLimitException(message, err);
   }
 
-  // 2. Authentication Recognition
+  // 2. Authentication / License Recognition
   if (
     status === 401 ||
     status === 403 ||
-    /unauthorized|auth|api[- ]?key/i.test(message) ||
-    code === 'INVALID_API_KEY'
+    /unauthorized|auth|license|revoked|terminated|api[- ]?key/i.test(message) ||
+    code === 'INVALID_API_KEY' ||
+    code === 'LICENSE_DELETED' ||
+    code === 'LICENSE_INACTIVE'
   ) {
-    return new AuthenticationException(message, err);
+    const isLicenseError = /403|license|revoked|terminated/i.test(message) || status === 403;
+    const cleanMsg = isLicenseError
+      ? 'Your Retrivora license key has been terminated, suspended, or revoked. Access denied.'
+      : message;
+    return new AuthenticationException(cleanMsg, err);
   }
 
   // Fallback Mapping based on defaultCode

package/src/handlers/index.ts

@@ -492,8 +492,18 @@ export function createStreamHandler(
           }
         } catch (streamError) {
           if (isActive) {
-            const errorMessage =
+            let errorMessage =
               streamError instanceof Error ? streamError.message : String(streamError);
+
+            if (
+              errorMessage.includes('403') ||
+              errorMessage.toLowerCase().includes('license') ||
+              errorMessage.toLowerCase().includes('revoked') ||
+              errorMessage.toLowerCase().includes('terminated')
+            ) {
+              errorMessage = 'Your Retrivora license key has been terminated, suspended, or revoked. Access denied.';
+            }
+
             console.error('[createStreamHandler] Stream error:', streamError);
             reportTelemetry(req, plugin, 'QUERY_GENERATION', 'error', errorMessage);
             try {

package/src/hooks/useRagChat.ts

@@ -292,7 +292,15 @@ export function useRagChat(
           console.log('[useRagChat] Streaming stopped by user.');
           return;
         }
-        const msg = err instanceof Error ? err.message : 'Something went wrong. Please try again.';
+        let msg = err instanceof Error ? err.message : 'Something went wrong. Please try again.';
+        if (
+          msg.includes('403') ||
+          msg.toLowerCase().includes('license') ||
+          msg.toLowerCase().includes('revoked') ||
+          msg.toLowerCase().includes('terminated')
+        ) {
+          msg = 'Your Retrivora license key has been terminated, suspended, or revoked. Access denied.';
+        }
         setError(msg);
         onError?.(msg);
       } finally {

package/src/index.ts

@@ -63,6 +63,8 @@ export type { ILLMProvider, EmbedOptions } from './llm/ILLMProvider';
 export type { Chunk, ChunkOptions } from './rag/DocumentChunker';
 export type { Retrivora } from './core/Retrivora';
 export type { RetrivoraErrorCode } from './exceptions';
+export { LicenseValidator } from './core/LicenseValidator';
+export type { LicenseValidationRequest, LicenseValidationResponse } from './core/LicenseValidator';
 export {
   RetrivoraError,
   ProviderNotFoundException,
@@ -71,6 +73,8 @@ export {
   RateLimitException,
   ConfigurationException,
   AuthenticationException,
+  SDKVersionUnsupportedError,
+  LicenseValidationError,
 } from './exceptions';
 export type {
   VectorMatch,

package/src/server.ts

@@ -90,6 +90,10 @@ export {
   sseErrorFrame,
 } from './handlers';
 
+// ── License Validator ─────────────────────────────────────────
+export { LicenseValidator } from './core/LicenseValidator';
+export type { LicenseValidationRequest, LicenseValidationResponse } from './core/LicenseValidator';
+
 // ── Exceptions ────────────────────────────────────────────────
 export type { RetrivoraErrorCode } from './exceptions';
 export {
@@ -100,6 +104,8 @@ export {
   RateLimitException,
   ConfigurationException,
   AuthenticationException,
+  SDKVersionUnsupportedError,
+  LicenseValidationError,
   wrapError,
 } from './exceptions';