@retrivora-ai/rag-engine 2.2.6 → 2.2.8

package/dist/index.js

@@ -69,6 +69,8 @@ __export(index_exports, {
   DocumentUpload: () => DocumentUpload,
   EmbeddingFailedException: () => EmbeddingFailedException,
   IntentClassifier: () => IntentClassifier,
+  LicenseValidationError: () => LicenseValidationError,
+  LicenseValidator: () => LicenseValidator,
   MessageBubble: () => MessageBubble,
   ObservabilityPanel: () => ObservabilityPanel,
   ProductCard: () => ProductCard,
@@ -79,6 +81,7 @@ __export(index_exports, {
   RetrievalException: () => RetrievalException,
   RetrivoraError: () => RetrivoraError,
   RuleEngine: () => RuleEngine,
+  SDKVersionUnsupportedError: () => SDKVersionUnsupportedError,
   SDK_VERSION: () => SDK_VERSION,
   SourceCard: () => SourceCard,
   VisualizationDecisionEngine: () => VisualizationDecisionEngine,
@@ -2757,7 +2760,7 @@ function useRagChat(projectId, options = {}) {
   }, [messages]);
   const sendMessage = (0, import_react11.useCallback)(
     async (text, opts) => {
-      var _a, _b, _c, _d, _e;
+      var _a, _b, _c, _d, _e, _f;
       const trimmed = text.trim();
       if (!trimmed || isLoading) return;
       lastInputRef.current = trimmed;
@@ -2789,9 +2792,18 @@ function useRagChat(projectId, options = {}) {
           messageId: assistantMessageId,
           userMessageId: userMsgId
         });
-        const fetchHeaders = __spreadValues({
+        const getHeader = (headersObj, name) => {
+          if (!headersObj) return void 0;
+          const target = name.toLowerCase();
+          for (const [k, v] of Object.entries(headersObj)) {
+            if (k.toLowerCase() === target) return v;
+          }
+          return void 0;
+        };
+        const resolvedLicenseKey = options.licenseKey || getHeader(options.headers, "x-license-key") || ((_b = getHeader(options.headers, "authorization")) == null ? void 0 : _b.replace(/^Bearer\s+/i, "")) || (typeof process !== "undefined" ? process.env.NEXT_PUBLIC_RETRIVORA_LICENSE_KEY || process.env.RETRIVORA_LICENSE_KEY : "") || "";
+        const fetchHeaders = __spreadValues(__spreadValues({
           "Content-Type": "application/json"
-        }, options.headers || {});
+        }, resolvedLicenseKey ? { "x-license-key": resolvedLicenseKey } : {}), options.headers || {});
         let response = await fetch(primaryUrl, {
           method: "POST",
           headers: fetchHeaders,
@@ -2809,10 +2821,10 @@ function useRagChat(projectId, options = {}) {
         }
         if (!response.ok) {
           const errorData = await response.json().catch(() => ({}));
-          if (response.status === 403 || response.status === 401 || typeof errorData.error === "string" && errorData.error.toLowerCase().includes("license") || ((_b = errorData.error) == null ? void 0 : _b.type) === "license_revoked") {
+          if (response.status === 403 || response.status === 401 || typeof errorData.error === "string" && errorData.error.toLowerCase().includes("license") || ((_c = errorData.error) == null ? void 0 : _c.type) === "license_revoked") {
             throw new Error("Your Retrivora license is no longer valid. Please contact your administrator or obtain a valid license key.");
           }
-          throw new Error(((_c = errorData.error) == null ? void 0 : _c.message) || errorData.error || `Server returned ${response.status}`);
+          throw new Error(((_d = errorData.error) == null ? void 0 : _d.message) || errorData.error || `Server returned ${response.status}`);
         }
         if (!response.body) {
           throw new Error("No response body received from server");
@@ -2876,7 +2888,7 @@ function useRagChat(projectId, options = {}) {
               pendingThinkingRef.current = thinkingContent;
               scheduleFlush(assistantMessageId);
             } else if (frame.type === "metadata") {
-              sources = (_d = frame.sources) != null ? _d : [];
+              sources = (_e = frame.sources) != null ? _e : [];
               thinkingMs = frame.thinkingMs;
             } else if (frame.type === "ui_transformation") {
               uiTransformation = frame.data;
@@ -2892,7 +2904,7 @@ function useRagChat(projectId, options = {}) {
             if (frame.type === "text" && frame.text) assistantContent += frame.text;
             else if (frame.type === "thinking" && frame.text) thinkingContent += frame.text;
             else if (frame.type === "metadata") {
-              sources = (_e = frame.sources) != null ? _e : [];
+              sources = (_f = frame.sources) != null ? _f : [];
               thinkingMs = frame.thinkingMs;
             } else if (frame.type === "observability") trace = frame.data;
           }
@@ -2917,7 +2929,10 @@ function useRagChat(projectId, options = {}) {
           console.log("[useRagChat] Streaming stopped by user.");
           return;
         }
-        const msg = err instanceof Error ? err.message : "Something went wrong. Please try again.";
+        let msg = err instanceof Error ? err.message : "Something went wrong. Please try again.";
+        if (msg.includes("403") || msg.toLowerCase().includes("license") || msg.toLowerCase().includes("revoked") || msg.toLowerCase().includes("terminated")) {
+          msg = "Your Retrivora license key has been terminated, suspended, or revoked. Access denied.";
+        }
         setError(msg);
         onError == null ? void 0 : onError(msg);
       } finally {
@@ -3029,7 +3044,7 @@ function useRagChat(projectId, options = {}) {
 // package.json
 var package_default = {
   name: "@retrivora-ai/rag-engine",
-  version: "2.2.6",
+  version: "2.2.8",
   description: "Retrivora AI is a plug-and-play AI engine for RAG chat experiences \u2014 generic vector DB + LLM provider, embeddable or standalone.",
   author: "Abhinav Alkuchi",
   license: "UNLICENSED",
@@ -3169,6 +3184,407 @@ var package_default = {
 // src/version.ts
 var SDK_VERSION = package_default.version || "2.1.3";
 
+// src/exceptions/index.ts
+var RetrivoraError = class extends Error {
+  constructor(message, code, details) {
+    super(message);
+    this.name = new.target.name;
+    this.code = code;
+    this.details = details;
+  }
+};
+var ProviderNotFoundException = class extends RetrivoraError {
+  constructor(providerType, provider, details) {
+    super(`Unsupported ${providerType} provider: ${provider}`, "PROVIDER_NOT_FOUND", details);
+  }
+};
+var EmbeddingFailedException = class extends RetrivoraError {
+  constructor(message = "Embedding generation failed", details) {
+    super(message, "EMBEDDING_FAILED", details);
+  }
+};
+var RetrievalException = class extends RetrivoraError {
+  constructor(message = "Retrieval failed", details) {
+    super(message, "RETRIEVAL_FAILED", details);
+  }
+};
+var RateLimitException = class extends RetrivoraError {
+  constructor(message = "Provider rate limit exceeded", details) {
+    super(message, "RATE_LIMITED", details);
+  }
+};
+var ConfigurationException = class extends RetrivoraError {
+  constructor(message, details) {
+    super(message, "CONFIGURATION_ERROR", details);
+  }
+};
+var AuthenticationException = class extends RetrivoraError {
+  constructor(message = "Provider authentication failed", details) {
+    super(message, "AUTHENTICATION_ERROR", details);
+  }
+};
+var SDKVersionUnsupportedError = class extends RetrivoraError {
+  constructor(message = "This SDK version is no longer supported.", details) {
+    super(message, "SDK_VERSION_UNSUPPORTED", details);
+  }
+};
+var LicenseValidationError = class extends RetrivoraError {
+  constructor(message = "License validation failed.", details) {
+    super(message, "LICENSE_VALIDATION_ERROR", details);
+  }
+};
+
+// src/core/LicenseVerifier.ts
+var crypto = __toESM(require("crypto"));
+var LicenseVerifier = class {
+  /**
+   * Decodes, verifies signature, and checks metadata of a license key.
+   *
+   * @param licenseKey - Base64url signed JWT license key.
+   * @param currentProjectId - Project namespace ID.
+   * @param publicKeyOverride - Optional override for unit/integration tests.
+   */
+  static verify(licenseKey, currentProjectId, provider, publicKeyOverride) {
+    const isProduction = process.env.NODE_ENV === "production";
+    const now = Date.now();
+    if (licenseKey) {
+      const cacheKey = `${licenseKey}:${currentProjectId}:${provider || ""}:${publicKeyOverride || ""}`;
+      const cached = this.cache.get(cacheKey);
+      if (cached && now - cached.cachedAt < this.CACHE_TTL_MS) {
+        const currentTimestampSec = Math.floor(now / 1e3);
+        if (cached.payload.expiresAt && currentTimestampSec > cached.payload.expiresAt) {
+          this.cache.delete(cacheKey);
+        } else {
+          return cached.payload;
+        }
+      }
+    }
+    if (!licenseKey) {
+      if (isProduction) {
+        throw new ConfigurationException(
+          "[Retrivora SDK] License key (licenseKey) is required in production environments."
+        );
+      }
+      console.warn(
+        `\x1B[33m[Retrivora SDK] WARNING: Running without a license key. This namespace (${currentProjectId}) is permitted for local development only.\x1B[0m`
+      );
+      return {
+        projectId: currentProjectId,
+        expiresAt: Math.floor(Date.now() / 1e3) + 86400,
+        // Valid for 24h
+        tier: "hobby"
+      };
+    }
+    try {
+      const rawToken = licenseKey.replace(/^rtv_/i, "").trim();
+      const parts = rawToken.split(".");
+      if (parts.length !== 3) {
+        throw new Error("Malformed token structure (expected 3 parts).");
+      }
+      const [headerB64, payloadB64, signatureB64] = parts;
+      const dataToVerify = `${headerB64}.${payloadB64}`;
+      const publicKey = publicKeyOverride != null ? publicKeyOverride : this.PUBLIC_KEY;
+      const signature = Buffer.from(signatureB64, "base64url");
+      const data = Buffer.from(dataToVerify);
+      const isValid = crypto.verify(
+        "sha256",
+        data,
+        publicKey,
+        signature
+      );
+      if (!isValid) {
+        throw new Error("Signature verification failed.");
+      }
+      const payload = JSON.parse(
+        Buffer.from(payloadB64, "base64url").toString("utf8")
+      );
+      if (!payload.projectId) {
+        throw new Error('License payload is missing "projectId".');
+      }
+      const isProjectMatch = payload.projectId === currentProjectId || payload.projectId === `retrivora-${currentProjectId}` || `retrivora-${payload.projectId}` === currentProjectId;
+      if (!isProjectMatch) {
+        throw new Error(
+          `Project ID mismatch. License is bound to project namespace "${payload.projectId}" but configuration has "${currentProjectId}".`
+        );
+      }
+      if (!payload.expiresAt) {
+        throw new Error('License payload is missing expiration ("expiresAt").');
+      }
+      const currentTimestampSec = Math.floor(Date.now() / 1e3);
+      if (currentTimestampSec > payload.expiresAt) {
+        throw new Error(
+          `License key has expired. Expiration: ${new Date(
+            payload.expiresAt * 1e3
+          ).toDateString()}`
+        );
+      }
+      if (isProduction && provider) {
+        const tier = (payload.tier || "").toLowerCase();
+        const normalizedProvider = provider.toLowerCase();
+        if (tier === "hobby") {
+          const allowedHobby = ["postgresql", "pgvector", "supabase"];
+          if (!allowedHobby.includes(normalizedProvider)) {
+            throw new Error(
+              `The database provider "${provider}" is not allowed on the Hobby tier. Hobby tier is restricted to PostgreSQL and Supabase. Please upgrade to a Developer Pro or Enterprise plan.`
+            );
+          }
+        } else if (tier === "pro" || tier === "developer_pro" || tier === "premium" || tier === "growth" || tier === "free_trial" || tier === "free_tier" || tier === "free") {
+          const allowedPro = [
+            "postgresql",
+            "pgvector",
+            "supabase",
+            "pinecone",
+            "qdrant",
+            "mongodb",
+            "milvus",
+            "chroma",
+            "chromadb"
+          ];
+          if (!allowedPro.includes(normalizedProvider)) {
+            throw new Error(
+              `The database provider "${provider}" is not allowed on the Developer Pro tier. Please upgrade to an Enterprise plan.`
+            );
+          }
+        }
+      }
+      if (licenseKey) {
+        const cacheKey = `${licenseKey}:${currentProjectId}:${provider || ""}:${publicKeyOverride || ""}`;
+        this.cache.set(cacheKey, { payload, cachedAt: now });
+      }
+      return payload;
+    } catch (err) {
+      const message = err instanceof Error ? err.message : String(err);
+      throw new ConfigurationException(
+        `[Retrivora SDK] License key validation failed: ${message}`
+      );
+    }
+  }
+  static async verifyIP(licenseKey) {
+    if (!licenseKey) return;
+    try {
+      const parts = licenseKey.split(".");
+      if (parts.length !== 3) return;
+      const [, payloadB64] = parts;
+      const payload = JSON.parse(
+        Buffer.from(payloadB64, "base64url").toString("utf8")
+      );
+      const tier = (payload.tier || "").toLowerCase();
+      if (tier === "enterprise" || tier === "custom") {
+        return;
+      }
+      if (payload.ipv4 || payload.ipv6) {
+        let currentIpv4 = "";
+        let currentIpv6 = "";
+        try {
+          const res = await fetch("https://api4.ipify.org?format=json", { signal: AbortSignal.timeout(3e3) });
+          const data = await res.json();
+          currentIpv4 = data.ip;
+        } catch (e) {
+        }
+        try {
+          const res = await fetch("https://api6.ipify.org?format=json", { signal: AbortSignal.timeout(3e3) });
+          const data = await res.json();
+          currentIpv6 = data.ip;
+        } catch (e) {
+        }
+        const localIps = [];
+        try {
+          const osModule = require("os");
+          const interfaces = osModule.networkInterfaces();
+          for (const name of Object.keys(interfaces)) {
+            for (const iface of interfaces[name] || []) {
+              if (!iface.internal) {
+                localIps.push(iface.address);
+              }
+            }
+          }
+        } catch (e) {
+        }
+        const isIpv4Match = payload.ipv4 && (currentIpv4 === payload.ipv4 || localIps.includes(payload.ipv4));
+        const isIpv6Match = payload.ipv6 && (currentIpv6 === payload.ipv6 || localIps.includes(payload.ipv6));
+        if (payload.ipv4 && payload.ipv6) {
+          if (!isIpv4Match && !isIpv6Match) {
+            throw new Error(
+              `License key access restricted. This license key was created for a different system (authorized IPv4: ${payload.ipv4}, IPv6: ${payload.ipv6}) and cannot be used on this machine.`
+            );
+          }
+        } else if (payload.ipv4 && !isIpv4Match) {
+          throw new Error(
+            `License key access restricted. This license key was created for a different system (authorized IPv4: ${payload.ipv4}) and cannot be used on this machine.`
+          );
+        } else if (payload.ipv6 && !isIpv6Match) {
+          throw new Error(
+            `License key access restricted. This license key was created for a different system (authorized IPv6: ${payload.ipv6}) and cannot be used on this machine.`
+          );
+        }
+      }
+    } catch (err) {
+      if (err.message.includes("License key access restricted")) {
+        throw new ConfigurationException(`[Retrivora SDK] ${err.message}`);
+      }
+    }
+  }
+};
+// A simple in-memory cache to save CPU overhead of cryptographic signature checks.
+LicenseVerifier.cache = /* @__PURE__ */ new Map();
+LicenseVerifier.CACHE_TTL_MS = 60 * 1e3;
+// Cache verified license for 60 seconds
+// Retrivora's Public Key used to verify the license key signature.
+// In production, this matches the private key held by Retrivora SaaS.
+LicenseVerifier.PUBLIC_KEY = `-----BEGIN PUBLIC KEY-----
+MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMieCkCBtTfByRNOserm
+XM4T0Am29JyNzB4XQPe+WJJ56CN73H1HLXx9n1ByFcxkEJ9po+SURj5DnvUXwEy+
+xstx33wDPpVmcMQe33j5CRYS0S4gICiNqIRN7XkTlJtrcXqrmh1/hdOAwfRbjO1T
+NVtORHwUwWfI/lBLyxUPGtKPed+0fQ7NtcW4o00JXxs3EjCB5BV9CbnXoTjQb/4h
+iwZof4l8rb7oaNzOsVg0RSyxsETX7Ex5sI0CjBz1p2mYp4oVhw/A/h8Ls7H0XzjC
++Eb6BLtsytt5JHoSp0jExLlCpDmpys2L+kETcBVx+IqiXtdN1n6KbkksvEDUVzLI
+MwIDAQAB
+-----END PUBLIC KEY-----`;
+
+// src/core/LicenseValidator.ts
+var _LicenseValidator = class _LicenseValidator {
+  // 5-minute TTL for successful validation only
+  constructor() {
+    this.cache = /* @__PURE__ */ new Map();
+  }
+  static getInstance() {
+    if (!_LicenseValidator.instance) {
+      _LicenseValidator.instance = new _LicenseValidator();
+    }
+    return _LicenseValidator.instance;
+  }
+  /**
+   * Invalidate local validation cache for a license key
+   */
+  purgeCache(licenseKey) {
+    if (licenseKey) {
+      this.cache.delete(licenseKey);
+    } else {
+      this.cache.clear();
+    }
+  }
+  /**
+   * Validate license status and SDK version against Retrivora License Service
+   */
+  async validate(request) {
+    var _a;
+    const {
+      licenseKey,
+      projectId,
+      sdkVersion = SDK_VERSION,
+      sdk = "@retrivora-ai/rag-engine",
+      platform = typeof window !== "undefined" ? "browser" : "node",
+      retrivoraApiBase,
+      headers: customHeaders
+    } = request;
+    const getHeader = (name) => {
+      if (!customHeaders) return void 0;
+      const target = name.toLowerCase();
+      for (const [k, v] of Object.entries(customHeaders)) {
+        if (k.toLowerCase() === target) return v;
+      }
+      return void 0;
+    };
+    const effectiveLicenseKey = licenseKey || getHeader("x-license-key") || ((_a = getHeader("authorization")) == null ? void 0 : _a.replace(/^Bearer\s+/i, "")) || (typeof process !== "undefined" ? process.env.NEXT_PUBLIC_RETRIVORA_LICENSE_KEY || process.env.RETRIVORA_LICENSE_KEY : "") || "";
+    if (!effectiveLicenseKey) {
+      this.purgeCache(effectiveLicenseKey);
+      throw new LicenseValidationError("Missing RETRIVORA_LICENSE_KEY in request.");
+    }
+    const cached = this.cache.get(effectiveLicenseKey);
+    if (cached) {
+      const isFresh = Date.now() - cached.timestamp < _LicenseValidator.SUCCESS_CACHE_TTL_MS;
+      if (isFresh && cached.response.valid && cached.response.licenseStatus === "ACTIVE" && !cached.response.forceUpgrade) {
+        return cached.response;
+      } else {
+        this.cache.delete(effectiveLicenseKey);
+      }
+    }
+    const base = retrivoraApiBase || (typeof process !== "undefined" ? process.env.NEXT_PUBLIC_RETRIVORA_API_BASE || process.env.RETRIVORA_API_BASE : "") || "/api/retrivora";
+    const validateUrl = `${base.replace(/\/$/, "")}/v1/license/validate`;
+    let res = null;
+    try {
+      res = await fetch(validateUrl, {
+        method: "POST",
+        cache: "no-store",
+        headers: __spreadValues({
+          "Content-Type": "application/json",
+          "x-license-key": effectiveLicenseKey,
+          "x-sdk-version": sdkVersion
+        }, customHeaders || {}),
+        body: JSON.stringify({
+          licenseKey,
+          projectId,
+          sdkVersion,
+          sdk,
+          platform
+        })
+      });
+    } catch (err) {
+      try {
+        const payload = LicenseVerifier.verify(licenseKey, projectId || "my-rag-app");
+        const fallbackResp = {
+          valid: true,
+          licenseStatus: "ACTIVE",
+          minimumSupportedVersion: "2.1.0",
+          latestVersion: SDK_VERSION,
+          forceUpgrade: false,
+          expiresAt: payload.expiresAt ? new Date(payload.expiresAt * 1e3).toISOString() : null,
+          message: "Local license verification active."
+        };
+        this.cache.set(licenseKey, { response: fallbackResp, timestamp: Date.now() });
+        return fallbackResp;
+      } catch (e) {
+        this.purgeCache(licenseKey);
+        throw new LicenseValidationError(`License validation request failed: ${(err == null ? void 0 : err.message) || "Network error"}`);
+      }
+    }
+    if (res && !res.ok) {
+      try {
+        const payload = LicenseVerifier.verify(licenseKey, projectId || "my-rag-app");
+        const fallbackResp = {
+          valid: true,
+          licenseStatus: "ACTIVE",
+          minimumSupportedVersion: "2.1.0",
+          latestVersion: SDK_VERSION,
+          forceUpgrade: false,
+          expiresAt: payload.expiresAt ? new Date(payload.expiresAt * 1e3).toISOString() : null,
+          message: "Local license verification active."
+        };
+        this.cache.set(licenseKey, { response: fallbackResp, timestamp: Date.now() });
+        return fallbackResp;
+      } catch (e) {
+      }
+    }
+    const data = await res.json().catch(() => ({
+      valid: false,
+      licenseStatus: "REVOKED",
+      minimumSupportedVersion: "2.1.0",
+      latestVersion: SDK_VERSION,
+      forceUpgrade: false,
+      expiresAt: null,
+      message: "Failed to parse license validation response."
+    }));
+    if (!res.ok || !data.valid || data.licenseStatus !== "ACTIVE" || data.forceUpgrade) {
+      this.purgeCache(licenseKey);
+      if (data.forceUpgrade || res.status === 426) {
+        throw new SDKVersionUnsupportedError(
+          data.message || `This SDK version (${sdkVersion}) is no longer supported. Upgrade to version ${data.latestVersion || "2.2.6"} or later.`,
+          data
+        );
+      }
+      const errMsg = data.message || `License validation failed with status: ${data.licenseStatus}. Access denied.`;
+      throw new LicenseValidationError(errMsg, data);
+    }
+    this.cache.set(licenseKey, {
+      response: data,
+      timestamp: Date.now()
+    });
+    return data;
+  }
+};
+_LicenseValidator.SUCCESS_CACHE_TTL_MS = 5 * 60 * 1e3;
+var LicenseValidator = _LicenseValidator;
+
 // src/components/ChatWindow.tsx
 var import_jsx_runtime13 = require("react/jsx-runtime");
 function ChatWindow({
@@ -3184,6 +3600,7 @@ function ChatWindow({
   onAddToCart,
   apiUrl,
   retrivoraApiBase,
+  licenseKey: licenseKeyProp,
   headers
 }) {
   var _a;
@@ -3198,6 +3615,7 @@ function ChatWindow({
     namespace: projectId,
     apiUrl,
     retrivoraApiBase,
+    licenseKey: licenseKeyProp,
     headers
   });
   const [suggestions, setSuggestions] = (0, import_react12.useState)([]);
@@ -3212,42 +3630,40 @@ function ChatWindow({
     async function validateSessionLicense() {
       var _a2;
       try {
-        const base = retrivoraApiBase || "/api/retrivora";
-        const configUrl = `${base.replace(/\/$/, "")}/config?sdkVersion=${SDK_VERSION}`;
-        const res = await fetch(configUrl, {
-          method: "GET",
-          cache: "no-store",
-          headers: __spreadValues({
-            "Content-Type": "application/json",
-            "x-sdk-version": SDK_VERSION
-          }, headers || {})
-        });
-        if (!res.ok) {
-          const data = await res.json().catch(() => ({}));
-          if (res.status === 426 || data.code === "SDK_VERSION_OUTDATED") {
-            if (isMounted) {
-              setVersionError(data.error || "Your Retrivora SDK package is outdated. Please update your package to the latest version to continue.");
-            }
-          } else if (res.status === 403 || res.status === 401 || typeof data.error === "string" && data.error.toLowerCase().includes("license")) {
-            if (isMounted) {
-              const errMsg = typeof data.error === "string" ? data.error : ((_a2 = data.error) == null ? void 0 : _a2.message) || "Your Retrivora license is no longer valid. Please contact your administrator or obtain a valid license key.";
-              setLicenseError(errMsg);
-            }
+        const getHeader = (name) => {
+          if (!headers) return void 0;
+          const target = name.toLowerCase();
+          for (const [k, v] of Object.entries(headers)) {
+            if (k.toLowerCase() === target) return v;
           }
-        } else {
-          if (isMounted) {
-            setLicenseError(null);
-            setVersionError(null);
+          return void 0;
+        };
+        const resolvedLicenseKey = licenseKeyProp || getHeader("x-license-key") || ((_a2 = getHeader("authorization")) == null ? void 0 : _a2.replace(/^Bearer\s+/i, "")) || (typeof process !== "undefined" ? process.env.NEXT_PUBLIC_RETRIVORA_LICENSE_KEY || process.env.RETRIVORA_LICENSE_KEY : "") || "";
+        await LicenseValidator.getInstance().validate({
+          licenseKey: resolvedLicenseKey,
+          projectId,
+          retrivoraApiBase,
+          headers
+        });
+        if (isMounted) {
+          setLicenseError(null);
+          setVersionError(null);
+        }
+      } catch (err) {
+        if (isMounted) {
+          if ((err == null ? void 0 : err.code) === "SDK_VERSION_UNSUPPORTED") {
+            setVersionError((err == null ? void 0 : err.message) || "SDK version unsupported.");
+          } else {
+            setLicenseError((err == null ? void 0 : err.message) || "License validation failed.");
           }
         }
-      } catch (e) {
       }
     }
     validateSessionLicense();
     return () => {
       isMounted = false;
     };
-  }, [retrivoraApiBase, headers]);
+  }, [retrivoraApiBase, headers, projectId]);
   (0, import_react12.useEffect)(() => {
     if (typeof window !== "undefined") {
       const win = window;
@@ -3695,8 +4111,8 @@ var GEMINI_STYLES = `
     --circle: shape(evenodd from 13.482% 79.505%, curve by -7.1945% -12.47% with -1.4985% -1.8575% / -6.328% -10.225%, curve by 0.0985% -33.8965% with -4.1645% -10.7945% / -4.1685% -23.0235%, curve by 6.9955% -12.101% with 1.72% -4.3825% / 4.0845% -8.458%, curve by 30.125% -17.119% with 7.339% -9.1825% / 18.4775% -15.5135%, curve by 13.4165% 0.095% with 4.432% -0.6105% / 8.9505% -0.5855%, curve by 29.364% 16.9% with 11.6215% 1.77% / 22.102% 7.9015%, curve by 7.176% 12.4145% with 3.002% 3.7195% / 5.453% 7.968%, curve by -0.0475% 33.8925% with 4.168% 10.756% / 4.2305% 22.942%, curve by -7.1135% 12.2825% with -1.74% 4.4535% / -4.1455% 8.592%, curve by -29.404% 16.9075% with -7.202% 8.954% / -18.019% 15.137%, curve by -14.19% -0.018% with -4.6635% 0.7255% / -9.4575% 0.7205%, curve by -29.226% -16.8875% with -11.573% -1.8065% / -21.9955% -7.9235%, close);
   }
 `;
-function ChatWidget({ position = "bottom-right", onAddToCart, apiUrl, retrivoraApiBase, headers }) {
-  const { ui } = useConfig();
+function ChatWidget({ position = "bottom-right", onAddToCart, apiUrl, retrivoraApiBase, licenseKey: licenseKeyProp, headers }) {
+  const { ui, projectId } = useConfig();
   const [isOpen, setIsOpen] = (0, import_react13.useState)(false);
   const [hasUnread, setHasUnread] = (0, import_react13.useState)(false);
   const [dimensions, setDimensions] = (0, import_react13.useState)(DEFAULT_DIMENSIONS);
@@ -3712,36 +4128,27 @@ function ChatWidget({ position = "bottom-right", onAddToCart, apiUrl, retrivoraA
     var _a;
     setIsValidating(true);
     try {
-      const base = retrivoraApiBase || "/api/retrivora";
-      const configUrl = `${base.replace(/\/$/, "")}/config?sdkVersion=${SDK_VERSION}`;
-      const res = await fetch(configUrl, {
-        method: "GET",
-        cache: "no-store",
-        headers: __spreadValues({
-          "Content-Type": "application/json",
-          "x-sdk-version": SDK_VERSION
-        }, headers || {})
-      });
-      if (!res.ok) {
-        const data = await res.json().catch(() => ({}));
-        if (res.status === 426 || data.code === "SDK_VERSION_OUTDATED") {
-          const msg = data.error || "Your Retrivora SDK package version is outdated. Please update your package to the latest version to continue.";
-          setWidgetError(msg);
-          setIsOpen(false);
-          return;
-        }
-        if (res.status === 403 || res.status === 401 || typeof data.error === "string" && data.error.toLowerCase().includes("license")) {
-          const msg = (typeof data.error === "string" ? data.error : (_a = data.error) == null ? void 0 : _a.message) || "Your Retrivora license is no longer valid. Please contact your administrator or obtain a valid license key.";
-          setWidgetError(msg);
-          setIsOpen(false);
-          return;
+      const getHeader = (name) => {
+        if (!headers) return void 0;
+        const target = name.toLowerCase();
+        for (const [k, v] of Object.entries(headers)) {
+          if (k.toLowerCase() === target) return v;
         }
-      }
+        return void 0;
+      };
+      const resolvedLicenseKey = licenseKeyProp || getHeader("x-license-key") || ((_a = getHeader("authorization")) == null ? void 0 : _a.replace(/^Bearer\s+/i, "")) || (typeof process !== "undefined" ? process.env.NEXT_PUBLIC_RETRIVORA_LICENSE_KEY || process.env.RETRIVORA_LICENSE_KEY : "") || "";
+      await LicenseValidator.getInstance().validate({
+        licenseKey: resolvedLicenseKey,
+        projectId,
+        retrivoraApiBase,
+        headers
+      });
       setWidgetError(null);
       setIsOpen(true);
       setHasUnread(false);
-    } catch (e) {
-      setIsOpen(true);
+    } catch (err) {
+      setWidgetError((err == null ? void 0 : err.message) || "Access denied.");
+      setIsOpen(false);
     } finally {
       setIsValidating(false);
     }
@@ -3813,6 +4220,7 @@ function ChatWidget({ position = "bottom-right", onAddToCart, apiUrl, retrivoraA
               onAddToCart,
               apiUrl,
               retrivoraApiBase,
+              licenseKey: licenseKeyProp,
               headers
             }
           ),
@@ -5880,46 +6288,6 @@ _RendererRegistry.registerStrategy(new CarouselRendererStrategy());
 _RendererRegistry.registerStrategy(new ChartRendererStrategy());
 _RendererRegistry.registerStrategy(new MixedRendererStrategy());
 var RendererRegistry = _RendererRegistry;
-
-// src/exceptions/index.ts
-var RetrivoraError = class extends Error {
-  constructor(message, code, details) {
-    super(message);
-    this.name = new.target.name;
-    this.code = code;
-    this.details = details;
-  }
-};
-var ProviderNotFoundException = class extends RetrivoraError {
-  constructor(providerType, provider, details) {
-    super(`Unsupported ${providerType} provider: ${provider}`, "PROVIDER_NOT_FOUND", details);
-  }
-};
-var EmbeddingFailedException = class extends RetrivoraError {
-  constructor(message = "Embedding generation failed", details) {
-    super(message, "EMBEDDING_FAILED", details);
-  }
-};
-var RetrievalException = class extends RetrivoraError {
-  constructor(message = "Retrieval failed", details) {
-    super(message, "RETRIEVAL_FAILED", details);
-  }
-};
-var RateLimitException = class extends RetrivoraError {
-  constructor(message = "Provider rate limit exceeded", details) {
-    super(message, "RATE_LIMITED", details);
-  }
-};
-var ConfigurationException = class extends RetrivoraError {
-  constructor(message, details) {
-    super(message, "CONFIGURATION_ERROR", details);
-  }
-};
-var AuthenticationException = class extends RetrivoraError {
-  constructor(message = "Provider authentication failed", details) {
-    super(message, "AUTHENTICATION_ERROR", details);
-  }
-};
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   AuthenticationException,
@@ -5931,6 +6299,8 @@ var AuthenticationException = class extends RetrivoraError {
   DocumentUpload,
   EmbeddingFailedException,
   IntentClassifier,
+  LicenseValidationError,
+  LicenseValidator,
   MessageBubble,
   ObservabilityPanel,
   ProductCard,
@@ -5941,6 +6311,7 @@ var AuthenticationException = class extends RetrivoraError {
   RetrievalException,
   RetrivoraError,
   RuleEngine,
+  SDKVersionUnsupportedError,
   SDK_VERSION,
   SourceCard,
   VisualizationDecisionEngine,