@retrivora-ai/rag-engine 2.2.6 → 2.2.8

package/dist/server.d.mts

@@ -1,9 +1,9 @@
-import { V as VectorDBConfig, L as LLMConfig, d as EmbeddingConfig, i as RagConfig, n as UniversalRagConfig, o as UpsertDocument, q as VectorMatch, G as GraphDBConfig, r as GraphNode, s as Edge, t as GraphSearchResult, I as ILLMProvider, p as VectorDBProvider, g as LLMProvider, e as EmbeddingProvider, R as RAGConfig, m as UIConfig, C as ChatMessage, b as ChatOptions, E as EmbedOptions } from './ILLMProvider-BWa68XX5.mjs';
-export { B as BarChartData, u as CarouselProduct, c as ChatResponse, v as IRetriever, f as IngestDocument, h as LatencyBreakdown, w as LineChartDataPoint, M as MessageRole, x as MetricCardData, O as ObservabilityTrace, P as PieChartData, y as Product, j as RagMessage, k as RetrievalConfig, z as RetrievalResult, l as RetrievedChunk, A as RetrivoraChunkMetadata, D as RetrivoraIngestedDocument, S as ScatterPlotDataPoint, F as SuggestionsResponse, H as TableData, T as TokenUsage, J as UITransformationResponse, U as UseRagChatOptions, a as UseRagChatReturn, K as VisualizationType, W as WorkflowConfig } from './ILLMProvider-BWa68XX5.mjs';
-import { I as IRenderRule, i as DecisionContext, k as IntentCategory, n as RenderDecision } from './index-BbJGyNmW.mjs';
-export { x as ArchitectureCardProps, A as AuthenticationException, y as CarouselRendererStrategy, z as ChartRendererStrategy, e as ChartType, B as ChatViewportSize, C as ChatWidgetProps, a as ChatWindowProps, f as Chunk, g as ChunkOptions, c as ClientConfig, b as ConfigProviderProps, h as ConfigurationException, F as DocumentChunker, D as DocumentUploadProps, E as EmbeddingFailedException, j as IRendererStrategy, l as IntentClassifier, M as MessageBubbleProps, G as MixedRendererStrategy, H as Pipeline, J as PipelineStep, P as ProductCardProps, d as ProductCarouselProps, m as ProviderNotFoundException, K as ProviderPill, R as RateLimitException, L as RenderSectionDecision, o as RenderType, p as RendererRegistry, q as RetrievalException, r as Retrivora, s as RetrivoraError, t as RetrivoraErrorCode, u as RuleEngine, v as SDK_VERSION, N as Snippet, S as SourceCardProps, T as TableRendererStrategy, O as TextRendererStrategy, V as VisualizationDecisionEngine, w as decideVisualization, Q as wrapError } from './index-BbJGyNmW.mjs';
-import { H as HealthCheckResult, I as IProviderValidator, a as IProviderHealthChecker } from './index-DvbtNz7m.mjs';
-export { C as ConfigValidator, V as ValidationError, b as VectorPlugin, c as createChatHandler, d as createFeedbackHandler, e as createHealthHandler, f as createHistoryHandler, g as createIngestHandler, h as createRagHandler, i as createSessionsHandler, j as createStreamHandler, k as createUploadHandler, s as sseErrorFrame, l as sseFrame, m as sseMetaFrame, n as sseTextFrame } from './index-DvbtNz7m.mjs';
+import { V as VectorDBConfig, L as LLMConfig, d as EmbeddingConfig, i as RagConfig, n as UniversalRagConfig, o as UpsertDocument, q as VectorMatch, G as GraphDBConfig, r as GraphNode, s as Edge, t as GraphSearchResult, I as ILLMProvider, p as VectorDBProvider, g as LLMProvider, e as EmbeddingProvider, R as RAGConfig, m as UIConfig, C as ChatMessage, b as ChatOptions, E as EmbedOptions } from './ILLMProvider-teTNQ1lh.mjs';
+export { B as BarChartData, u as CarouselProduct, c as ChatResponse, v as IRetriever, f as IngestDocument, h as LatencyBreakdown, w as LineChartDataPoint, M as MessageRole, x as MetricCardData, O as ObservabilityTrace, P as PieChartData, y as Product, j as RagMessage, k as RetrievalConfig, z as RetrievalResult, l as RetrievedChunk, A as RetrivoraChunkMetadata, D as RetrivoraIngestedDocument, S as ScatterPlotDataPoint, F as SuggestionsResponse, H as TableData, T as TokenUsage, J as UITransformationResponse, U as UseRagChatOptions, a as UseRagChatReturn, K as VisualizationType, W as WorkflowConfig } from './ILLMProvider-teTNQ1lh.mjs';
+import { I as IRenderRule, i as DecisionContext, k as IntentCategory, q as RenderDecision } from './LicenseValidator-CENvo9o2.mjs';
+export { F as ArchitectureCardProps, A as AuthenticationException, G as CarouselRendererStrategy, H as ChartRendererStrategy, e as ChartType, J as ChatViewportSize, C as ChatWidgetProps, a as ChatWindowProps, f as Chunk, g as ChunkOptions, c as ClientConfig, b as ConfigProviderProps, h as ConfigurationException, K as DocumentChunker, D as DocumentUploadProps, E as EmbeddingFailedException, j as IRendererStrategy, l as IntentClassifier, L as LicenseValidationError, m as LicenseValidationRequest, n as LicenseValidationResponse, o as LicenseValidator, M as MessageBubbleProps, N as MixedRendererStrategy, O as Pipeline, Q as PipelineStep, P as ProductCardProps, d as ProductCarouselProps, p as ProviderNotFoundException, T as ProviderPill, R as RateLimitException, U as RenderSectionDecision, r as RenderType, s as RendererRegistry, t as RetrievalException, u as Retrivora, v as RetrivoraError, w as RetrivoraErrorCode, x as RuleEngine, y as SDKVersionUnsupportedError, z as SDK_VERSION, W as Snippet, S as SourceCardProps, X as TableRendererStrategy, Y as TextRendererStrategy, V as VisualizationDecisionEngine, B as decideVisualization, Z as wrapError } from './LicenseValidator-CENvo9o2.mjs';
+import { H as HealthCheckResult, I as IProviderValidator, a as IProviderHealthChecker } from './index-Dmq5lH0j.mjs';
+export { C as ConfigValidator, V as ValidationError, b as VectorPlugin, c as createChatHandler, d as createFeedbackHandler, e as createHealthHandler, f as createHistoryHandler, g as createIngestHandler, h as createRagHandler, i as createSessionsHandler, j as createStreamHandler, k as createUploadHandler, s as sseErrorFrame, l as sseFrame, m as sseMetaFrame, n as sseTextFrame } from './index-Dmq5lH0j.mjs';
 import 'react';
 import 'next/server';
 

package/dist/server.d.ts

@@ -1,9 +1,9 @@
-import { V as VectorDBConfig, L as LLMConfig, d as EmbeddingConfig, i as RagConfig, n as UniversalRagConfig, o as UpsertDocument, q as VectorMatch, G as GraphDBConfig, r as GraphNode, s as Edge, t as GraphSearchResult, I as ILLMProvider, p as VectorDBProvider, g as LLMProvider, e as EmbeddingProvider, R as RAGConfig, m as UIConfig, C as ChatMessage, b as ChatOptions, E as EmbedOptions } from './ILLMProvider-BWa68XX5.js';
-export { B as BarChartData, u as CarouselProduct, c as ChatResponse, v as IRetriever, f as IngestDocument, h as LatencyBreakdown, w as LineChartDataPoint, M as MessageRole, x as MetricCardData, O as ObservabilityTrace, P as PieChartData, y as Product, j as RagMessage, k as RetrievalConfig, z as RetrievalResult, l as RetrievedChunk, A as RetrivoraChunkMetadata, D as RetrivoraIngestedDocument, S as ScatterPlotDataPoint, F as SuggestionsResponse, H as TableData, T as TokenUsage, J as UITransformationResponse, U as UseRagChatOptions, a as UseRagChatReturn, K as VisualizationType, W as WorkflowConfig } from './ILLMProvider-BWa68XX5.js';
-import { I as IRenderRule, i as DecisionContext, k as IntentCategory, n as RenderDecision } from './index-BCbeeh74.js';
-export { x as ArchitectureCardProps, A as AuthenticationException, y as CarouselRendererStrategy, z as ChartRendererStrategy, e as ChartType, B as ChatViewportSize, C as ChatWidgetProps, a as ChatWindowProps, f as Chunk, g as ChunkOptions, c as ClientConfig, b as ConfigProviderProps, h as ConfigurationException, F as DocumentChunker, D as DocumentUploadProps, E as EmbeddingFailedException, j as IRendererStrategy, l as IntentClassifier, M as MessageBubbleProps, G as MixedRendererStrategy, H as Pipeline, J as PipelineStep, P as ProductCardProps, d as ProductCarouselProps, m as ProviderNotFoundException, K as ProviderPill, R as RateLimitException, L as RenderSectionDecision, o as RenderType, p as RendererRegistry, q as RetrievalException, r as Retrivora, s as RetrivoraError, t as RetrivoraErrorCode, u as RuleEngine, v as SDK_VERSION, N as Snippet, S as SourceCardProps, T as TableRendererStrategy, O as TextRendererStrategy, V as VisualizationDecisionEngine, w as decideVisualization, Q as wrapError } from './index-BCbeeh74.js';
-import { H as HealthCheckResult, I as IProviderValidator, a as IProviderHealthChecker } from './index-B5TTZWkx.js';
-export { C as ConfigValidator, V as ValidationError, b as VectorPlugin, c as createChatHandler, d as createFeedbackHandler, e as createHealthHandler, f as createHistoryHandler, g as createIngestHandler, h as createRagHandler, i as createSessionsHandler, j as createStreamHandler, k as createUploadHandler, s as sseErrorFrame, l as sseFrame, m as sseMetaFrame, n as sseTextFrame } from './index-B5TTZWkx.js';
+import { V as VectorDBConfig, L as LLMConfig, d as EmbeddingConfig, i as RagConfig, n as UniversalRagConfig, o as UpsertDocument, q as VectorMatch, G as GraphDBConfig, r as GraphNode, s as Edge, t as GraphSearchResult, I as ILLMProvider, p as VectorDBProvider, g as LLMProvider, e as EmbeddingProvider, R as RAGConfig, m as UIConfig, C as ChatMessage, b as ChatOptions, E as EmbedOptions } from './ILLMProvider-teTNQ1lh.js';
+export { B as BarChartData, u as CarouselProduct, c as ChatResponse, v as IRetriever, f as IngestDocument, h as LatencyBreakdown, w as LineChartDataPoint, M as MessageRole, x as MetricCardData, O as ObservabilityTrace, P as PieChartData, y as Product, j as RagMessage, k as RetrievalConfig, z as RetrievalResult, l as RetrievedChunk, A as RetrivoraChunkMetadata, D as RetrivoraIngestedDocument, S as ScatterPlotDataPoint, F as SuggestionsResponse, H as TableData, T as TokenUsage, J as UITransformationResponse, U as UseRagChatOptions, a as UseRagChatReturn, K as VisualizationType, W as WorkflowConfig } from './ILLMProvider-teTNQ1lh.js';
+import { I as IRenderRule, i as DecisionContext, k as IntentCategory, q as RenderDecision } from './LicenseValidator-CsjJp2PP.js';
+export { F as ArchitectureCardProps, A as AuthenticationException, G as CarouselRendererStrategy, H as ChartRendererStrategy, e as ChartType, J as ChatViewportSize, C as ChatWidgetProps, a as ChatWindowProps, f as Chunk, g as ChunkOptions, c as ClientConfig, b as ConfigProviderProps, h as ConfigurationException, K as DocumentChunker, D as DocumentUploadProps, E as EmbeddingFailedException, j as IRendererStrategy, l as IntentClassifier, L as LicenseValidationError, m as LicenseValidationRequest, n as LicenseValidationResponse, o as LicenseValidator, M as MessageBubbleProps, N as MixedRendererStrategy, O as Pipeline, Q as PipelineStep, P as ProductCardProps, d as ProductCarouselProps, p as ProviderNotFoundException, T as ProviderPill, R as RateLimitException, U as RenderSectionDecision, r as RenderType, s as RendererRegistry, t as RetrievalException, u as Retrivora, v as RetrivoraError, w as RetrivoraErrorCode, x as RuleEngine, y as SDKVersionUnsupportedError, z as SDK_VERSION, W as Snippet, S as SourceCardProps, X as TableRendererStrategy, Y as TextRendererStrategy, V as VisualizationDecisionEngine, B as decideVisualization, Z as wrapError } from './LicenseValidator-CsjJp2PP.js';
+import { H as HealthCheckResult, I as IProviderValidator, a as IProviderHealthChecker } from './index-BPJ3KDYI.js';
+export { C as ConfigValidator, V as ValidationError, b as VectorPlugin, c as createChatHandler, d as createFeedbackHandler, e as createHealthHandler, f as createHistoryHandler, g as createIngestHandler, h as createRagHandler, i as createSessionsHandler, j as createStreamHandler, k as createUploadHandler, s as sseErrorFrame, l as sseFrame, m as sseMetaFrame, n as sseTextFrame } from './index-BPJ3KDYI.js';
 import 'react';
 import 'next/server';
 

package/dist/server.js

@@ -2224,6 +2224,8 @@ __export(server_exports, {
   IntentClassifier: () => IntentClassifier,
   LLMFactory: () => LLMFactory,
   LLM_PROFILES: () => LLM_PROFILES,
+  LicenseValidationError: () => LicenseValidationError,
+  LicenseValidator: () => LicenseValidator,
   LicenseVerifier: () => LicenseVerifier,
   MilvusProvider: () => MilvusProvider,
   MixedRendererStrategy: () => MixedRendererStrategy,
@@ -2254,6 +2256,7 @@ __export(server_exports, {
   Rule6SmallResultSetRule: () => Rule6SmallResultSetRule,
   Rule7LargeTableRule: () => Rule7LargeTableRule,
   RuleEngine: () => RuleEngine,
+  SDKVersionUnsupportedError: () => SDKVersionUnsupportedError,
   SDK_VERSION: () => SDK_VERSION,
   TableRendererStrategy: () => TableRendererStrategy,
   TextRendererStrategy: () => TextRendererStrategy,
@@ -2328,6 +2331,16 @@ var AuthenticationException = class extends RetrivoraError {
     super(message, "AUTHENTICATION_ERROR", details);
   }
 };
+var SDKVersionUnsupportedError = class extends RetrivoraError {
+  constructor(message = "This SDK version is no longer supported.", details) {
+    super(message, "SDK_VERSION_UNSUPPORTED", details);
+  }
+};
+var LicenseValidationError = class extends RetrivoraError {
+  constructor(message = "License validation failed.", details) {
+    super(message, "LICENSE_VALIDATION_ERROR", details);
+  }
+};
 function wrapError(err, defaultCode, defaultMessage) {
   var _a2;
   if (err instanceof RetrivoraError) {
@@ -2340,8 +2353,10 @@ function wrapError(err, defaultCode, defaultMessage) {
   if (status === 429 || /rate[- ]?limit/i.test(message) || code === "RATE_LIMIT_EXCEEDED") {
     return new RateLimitException(message, err);
   }
-  if (status === 401 || status === 403 || /unauthorized|auth|api[- ]?key/i.test(message) || code === "INVALID_API_KEY") {
-    return new AuthenticationException(message, err);
+  if (status === 401 || status === 403 || /unauthorized|auth|license|revoked|terminated|api[- ]?key/i.test(message) || code === "INVALID_API_KEY" || code === "LICENSE_DELETED" || code === "LICENSE_INACTIVE") {
+    const isLicenseError = /403|license|revoked|terminated/i.test(message) || status === 403;
+    const cleanMsg = isLicenseError ? "Your Retrivora license key has been terminated, suspended, or revoked. Access denied." : message;
+    return new AuthenticationException(cleanMsg, err);
   }
   switch (defaultCode) {
     case "PROVIDER_NOT_FOUND":
@@ -4808,7 +4823,7 @@ var ConfigValidator = class {
 // package.json
 var package_default = {
   name: "@retrivora-ai/rag-engine",
-  version: "2.2.6",
+  version: "2.2.8",
   description: "Retrivora AI is a plug-and-play AI engine for RAG chat experiences \u2014 generic vector DB + LLM provider, embeddable or standalone.",
   author: "Abhinav Alkuchi",
   license: "UNLICENSED",
@@ -10924,7 +10939,10 @@ function createStreamHandler(configOrPlugin, options) {
           }
         } catch (streamError) {
           if (isActive) {
-            const errorMessage = streamError instanceof Error ? streamError.message : String(streamError);
+            let errorMessage = streamError instanceof Error ? streamError.message : String(streamError);
+            if (errorMessage.includes("403") || errorMessage.toLowerCase().includes("license") || errorMessage.toLowerCase().includes("revoked") || errorMessage.toLowerCase().includes("terminated")) {
+              errorMessage = "Your Retrivora license key has been terminated, suspended, or revoked. Access denied.";
+            }
             console.error("[createStreamHandler] Stream error:", streamError);
             reportTelemetry(req, plugin, "QUERY_GENERATION", "error", errorMessage);
             try {
@@ -10994,6 +11012,46 @@ function createHealthHandler(configOrPlugin, options) {
     }
   };
 }
+function createLicenseHandler(configOrPlugin, options) {
+  const plugin = getOrCreatePlugin(configOrPlugin);
+  const onAuthorize = options == null ? void 0 : options.onAuthorize;
+  return async function POST(req) {
+    var _a2;
+    if (req) {
+      const authResult = await checkAuth(req, onAuthorize);
+      if (authResult) return authResult;
+    }
+    try {
+      const body = await req.json().catch(() => ({}));
+      const config = plugin.getConfig();
+      const licenseKey = req.headers.get("x-license-key") || (body == null ? void 0 : body.licenseKey) || ((_a2 = req.headers.get("authorization")) == null ? void 0 : _a2.replace(/^Bearer\s+/i, "")) || config.licenseKey || process.env.RETRIVORA_LICENSE_KEY || process.env.NEXT_PUBLIC_RETRIVORA_LICENSE_KEY || "";
+      const projectId = (body == null ? void 0 : body.projectId) || config.projectId || "my-rag-app";
+      const payload = LicenseVerifier.verify(licenseKey, projectId);
+      return import_server.NextResponse.json({
+        valid: true,
+        licenseStatus: "ACTIVE",
+        minimumSupportedVersion: "2.1.0",
+        latestVersion: SDK_VERSION,
+        forceUpgrade: false,
+        expiresAt: payload.expiresAt ? new Date(payload.expiresAt * 1e3).toISOString() : null,
+        message: "License key is active and valid."
+      });
+    } catch (err) {
+      return import_server.NextResponse.json(
+        {
+          valid: false,
+          licenseStatus: "REVOKED",
+          minimumSupportedVersion: "2.1.0",
+          latestVersion: SDK_VERSION,
+          forceUpgrade: false,
+          expiresAt: null,
+          message: (err == null ? void 0 : err.message) || "License validation failed."
+        },
+        { status: 400 }
+      );
+    }
+  };
+}
 function createUploadHandler(configOrPlugin, options) {
   const plugin = getOrCreatePlugin(configOrPlugin);
   const onAuthorize = options == null ? void 0 : options.onAuthorize;
@@ -11245,6 +11303,7 @@ function createRagHandler(configOrPlugin, options) {
   const historyHandler = createHistoryHandler(plugin, { onAuthorize });
   const feedbackHandler = createFeedbackHandler(plugin, { onAuthorize });
   const sessionsHandler = createSessionsHandler(plugin, { onAuthorize });
+  const licenseHandler = createLicenseHandler(plugin, { onAuthorize });
   async function routePostRequest(req, segment) {
     switch (segment) {
       case "chat":
@@ -11262,6 +11321,9 @@ function createRagHandler(configOrPlugin, options) {
         return historyHandler(req);
       case "feedback":
         return feedbackHandler(req);
+      case "license/validate":
+      case "v1/license/validate":
+        return licenseHandler(req);
       default:
         return import_server.NextResponse.json({ error: `Not Found: POST segment "${segment}" not supported.` }, { status: 404 });
     }
@@ -11291,6 +11353,7 @@ function createRagHandler(configOrPlugin, options) {
     try {
       const url = new URL(req.url);
       const pathname = url.pathname;
+      if (pathname.includes("/license/validate")) return "v1/license/validate";
       if (pathname.endsWith("/upload")) return "upload";
       if (pathname.endsWith("/chat") || pathname.endsWith("/chat-sync")) return "chat";
       if (pathname.endsWith("/health")) return "health";
@@ -11325,6 +11388,150 @@ function createRagHandler(configOrPlugin, options) {
     }
   };
 }
+
+// src/core/LicenseValidator.ts
+var _LicenseValidator = class _LicenseValidator {
+  // 5-minute TTL for successful validation only
+  constructor() {
+    this.cache = /* @__PURE__ */ new Map();
+  }
+  static getInstance() {
+    if (!_LicenseValidator.instance) {
+      _LicenseValidator.instance = new _LicenseValidator();
+    }
+    return _LicenseValidator.instance;
+  }
+  /**
+   * Invalidate local validation cache for a license key
+   */
+  purgeCache(licenseKey) {
+    if (licenseKey) {
+      this.cache.delete(licenseKey);
+    } else {
+      this.cache.clear();
+    }
+  }
+  /**
+   * Validate license status and SDK version against Retrivora License Service
+   */
+  async validate(request) {
+    var _a2;
+    const {
+      licenseKey,
+      projectId,
+      sdkVersion = SDK_VERSION,
+      sdk = "@retrivora-ai/rag-engine",
+      platform = typeof window !== "undefined" ? "browser" : "node",
+      retrivoraApiBase,
+      headers: customHeaders
+    } = request;
+    const getHeader = (name) => {
+      if (!customHeaders) return void 0;
+      const target = name.toLowerCase();
+      for (const [k, v] of Object.entries(customHeaders)) {
+        if (k.toLowerCase() === target) return v;
+      }
+      return void 0;
+    };
+    const effectiveLicenseKey = licenseKey || getHeader("x-license-key") || ((_a2 = getHeader("authorization")) == null ? void 0 : _a2.replace(/^Bearer\s+/i, "")) || (typeof process !== "undefined" ? process.env.NEXT_PUBLIC_RETRIVORA_LICENSE_KEY || process.env.RETRIVORA_LICENSE_KEY : "") || "";
+    if (!effectiveLicenseKey) {
+      this.purgeCache(effectiveLicenseKey);
+      throw new LicenseValidationError("Missing RETRIVORA_LICENSE_KEY in request.");
+    }
+    const cached = this.cache.get(effectiveLicenseKey);
+    if (cached) {
+      const isFresh = Date.now() - cached.timestamp < _LicenseValidator.SUCCESS_CACHE_TTL_MS;
+      if (isFresh && cached.response.valid && cached.response.licenseStatus === "ACTIVE" && !cached.response.forceUpgrade) {
+        return cached.response;
+      } else {
+        this.cache.delete(effectiveLicenseKey);
+      }
+    }
+    const base = retrivoraApiBase || (typeof process !== "undefined" ? process.env.NEXT_PUBLIC_RETRIVORA_API_BASE || process.env.RETRIVORA_API_BASE : "") || "/api/retrivora";
+    const validateUrl = `${base.replace(/\/$/, "")}/v1/license/validate`;
+    let res = null;
+    try {
+      res = await fetch(validateUrl, {
+        method: "POST",
+        cache: "no-store",
+        headers: __spreadValues({
+          "Content-Type": "application/json",
+          "x-license-key": effectiveLicenseKey,
+          "x-sdk-version": sdkVersion
+        }, customHeaders || {}),
+        body: JSON.stringify({
+          licenseKey,
+          projectId,
+          sdkVersion,
+          sdk,
+          platform
+        })
+      });
+    } catch (err) {
+      try {
+        const payload = LicenseVerifier.verify(licenseKey, projectId || "my-rag-app");
+        const fallbackResp = {
+          valid: true,
+          licenseStatus: "ACTIVE",
+          minimumSupportedVersion: "2.1.0",
+          latestVersion: SDK_VERSION,
+          forceUpgrade: false,
+          expiresAt: payload.expiresAt ? new Date(payload.expiresAt * 1e3).toISOString() : null,
+          message: "Local license verification active."
+        };
+        this.cache.set(licenseKey, { response: fallbackResp, timestamp: Date.now() });
+        return fallbackResp;
+      } catch (e) {
+        this.purgeCache(licenseKey);
+        throw new LicenseValidationError(`License validation request failed: ${(err == null ? void 0 : err.message) || "Network error"}`);
+      }
+    }
+    if (res && !res.ok) {
+      try {
+        const payload = LicenseVerifier.verify(licenseKey, projectId || "my-rag-app");
+        const fallbackResp = {
+          valid: true,
+          licenseStatus: "ACTIVE",
+          minimumSupportedVersion: "2.1.0",
+          latestVersion: SDK_VERSION,
+          forceUpgrade: false,
+          expiresAt: payload.expiresAt ? new Date(payload.expiresAt * 1e3).toISOString() : null,
+          message: "Local license verification active."
+        };
+        this.cache.set(licenseKey, { response: fallbackResp, timestamp: Date.now() });
+        return fallbackResp;
+      } catch (e) {
+      }
+    }
+    const data = await res.json().catch(() => ({
+      valid: false,
+      licenseStatus: "REVOKED",
+      minimumSupportedVersion: "2.1.0",
+      latestVersion: SDK_VERSION,
+      forceUpgrade: false,
+      expiresAt: null,
+      message: "Failed to parse license validation response."
+    }));
+    if (!res.ok || !data.valid || data.licenseStatus !== "ACTIVE" || data.forceUpgrade) {
+      this.purgeCache(licenseKey);
+      if (data.forceUpgrade || res.status === 426) {
+        throw new SDKVersionUnsupportedError(
+          data.message || `This SDK version (${sdkVersion}) is no longer supported. Upgrade to version ${data.latestVersion || "2.2.6"} or later.`,
+          data
+        );
+      }
+      const errMsg = data.message || `License validation failed with status: ${data.licenseStatus}. Access denied.`;
+      throw new LicenseValidationError(errMsg, data);
+    }
+    this.cache.set(licenseKey, {
+      response: data,
+      timestamp: Date.now()
+    });
+    return data;
+  }
+};
+_LicenseValidator.SUCCESS_CACHE_TTL_MS = 5 * 60 * 1e3;
+var LicenseValidator = _LicenseValidator;
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   AnthropicProvider,
@@ -11347,6 +11554,8 @@ function createRagHandler(configOrPlugin, options) {
   IntentClassifier,
   LLMFactory,
   LLM_PROFILES,
+  LicenseValidationError,
+  LicenseValidator,
   LicenseVerifier,
   MilvusProvider,
   MixedRendererStrategy,
@@ -11377,6 +11586,7 @@ function createRagHandler(configOrPlugin, options) {
   Rule6SmallResultSetRule,
   Rule7LargeTableRule,
   RuleEngine,
+  SDKVersionUnsupportedError,
   SDK_VERSION,
   TableRendererStrategy,
   TextRendererStrategy,

package/dist/server.mjs

@@ -2231,6 +2231,16 @@ var AuthenticationException = class extends RetrivoraError {
     super(message, "AUTHENTICATION_ERROR", details);
   }
 };
+var SDKVersionUnsupportedError = class extends RetrivoraError {
+  constructor(message = "This SDK version is no longer supported.", details) {
+    super(message, "SDK_VERSION_UNSUPPORTED", details);
+  }
+};
+var LicenseValidationError = class extends RetrivoraError {
+  constructor(message = "License validation failed.", details) {
+    super(message, "LICENSE_VALIDATION_ERROR", details);
+  }
+};
 function wrapError(err, defaultCode, defaultMessage) {
   var _a2;
   if (err instanceof RetrivoraError) {
@@ -2243,8 +2253,10 @@ function wrapError(err, defaultCode, defaultMessage) {
   if (status === 429 || /rate[- ]?limit/i.test(message) || code === "RATE_LIMIT_EXCEEDED") {
     return new RateLimitException(message, err);
   }
-  if (status === 401 || status === 403 || /unauthorized|auth|api[- ]?key/i.test(message) || code === "INVALID_API_KEY") {
-    return new AuthenticationException(message, err);
+  if (status === 401 || status === 403 || /unauthorized|auth|license|revoked|terminated|api[- ]?key/i.test(message) || code === "INVALID_API_KEY" || code === "LICENSE_DELETED" || code === "LICENSE_INACTIVE") {
+    const isLicenseError = /403|license|revoked|terminated/i.test(message) || status === 403;
+    const cleanMsg = isLicenseError ? "Your Retrivora license key has been terminated, suspended, or revoked. Access denied." : message;
+    return new AuthenticationException(cleanMsg, err);
   }
   switch (defaultCode) {
     case "PROVIDER_NOT_FOUND":
@@ -4711,7 +4723,7 @@ var ConfigValidator = class {
 // package.json
 var package_default = {
   name: "@retrivora-ai/rag-engine",
-  version: "2.2.6",
+  version: "2.2.8",
   description: "Retrivora AI is a plug-and-play AI engine for RAG chat experiences \u2014 generic vector DB + LLM provider, embeddable or standalone.",
   author: "Abhinav Alkuchi",
   license: "UNLICENSED",
@@ -10827,7 +10839,10 @@ function createStreamHandler(configOrPlugin, options) {
           }
         } catch (streamError) {
           if (isActive) {
-            const errorMessage = streamError instanceof Error ? streamError.message : String(streamError);
+            let errorMessage = streamError instanceof Error ? streamError.message : String(streamError);
+            if (errorMessage.includes("403") || errorMessage.toLowerCase().includes("license") || errorMessage.toLowerCase().includes("revoked") || errorMessage.toLowerCase().includes("terminated")) {
+              errorMessage = "Your Retrivora license key has been terminated, suspended, or revoked. Access denied.";
+            }
             console.error("[createStreamHandler] Stream error:", streamError);
             reportTelemetry(req, plugin, "QUERY_GENERATION", "error", errorMessage);
             try {
@@ -10897,6 +10912,46 @@ function createHealthHandler(configOrPlugin, options) {
     }
   };
 }
+function createLicenseHandler(configOrPlugin, options) {
+  const plugin = getOrCreatePlugin(configOrPlugin);
+  const onAuthorize = options == null ? void 0 : options.onAuthorize;
+  return async function POST(req) {
+    var _a2;
+    if (req) {
+      const authResult = await checkAuth(req, onAuthorize);
+      if (authResult) return authResult;
+    }
+    try {
+      const body = await req.json().catch(() => ({}));
+      const config = plugin.getConfig();
+      const licenseKey = req.headers.get("x-license-key") || (body == null ? void 0 : body.licenseKey) || ((_a2 = req.headers.get("authorization")) == null ? void 0 : _a2.replace(/^Bearer\s+/i, "")) || config.licenseKey || process.env.RETRIVORA_LICENSE_KEY || process.env.NEXT_PUBLIC_RETRIVORA_LICENSE_KEY || "";
+      const projectId = (body == null ? void 0 : body.projectId) || config.projectId || "my-rag-app";
+      const payload = LicenseVerifier.verify(licenseKey, projectId);
+      return NextResponse.json({
+        valid: true,
+        licenseStatus: "ACTIVE",
+        minimumSupportedVersion: "2.1.0",
+        latestVersion: SDK_VERSION,
+        forceUpgrade: false,
+        expiresAt: payload.expiresAt ? new Date(payload.expiresAt * 1e3).toISOString() : null,
+        message: "License key is active and valid."
+      });
+    } catch (err) {
+      return NextResponse.json(
+        {
+          valid: false,
+          licenseStatus: "REVOKED",
+          minimumSupportedVersion: "2.1.0",
+          latestVersion: SDK_VERSION,
+          forceUpgrade: false,
+          expiresAt: null,
+          message: (err == null ? void 0 : err.message) || "License validation failed."
+        },
+        { status: 400 }
+      );
+    }
+  };
+}
 function createUploadHandler(configOrPlugin, options) {
   const plugin = getOrCreatePlugin(configOrPlugin);
   const onAuthorize = options == null ? void 0 : options.onAuthorize;
@@ -11148,6 +11203,7 @@ function createRagHandler(configOrPlugin, options) {
   const historyHandler = createHistoryHandler(plugin, { onAuthorize });
   const feedbackHandler = createFeedbackHandler(plugin, { onAuthorize });
   const sessionsHandler = createSessionsHandler(plugin, { onAuthorize });
+  const licenseHandler = createLicenseHandler(plugin, { onAuthorize });
   async function routePostRequest(req, segment) {
     switch (segment) {
       case "chat":
@@ -11165,6 +11221,9 @@ function createRagHandler(configOrPlugin, options) {
         return historyHandler(req);
       case "feedback":
         return feedbackHandler(req);
+      case "license/validate":
+      case "v1/license/validate":
+        return licenseHandler(req);
       default:
         return NextResponse.json({ error: `Not Found: POST segment "${segment}" not supported.` }, { status: 404 });
     }
@@ -11194,6 +11253,7 @@ function createRagHandler(configOrPlugin, options) {
     try {
       const url = new URL(req.url);
       const pathname = url.pathname;
+      if (pathname.includes("/license/validate")) return "v1/license/validate";
       if (pathname.endsWith("/upload")) return "upload";
       if (pathname.endsWith("/chat") || pathname.endsWith("/chat-sync")) return "chat";
       if (pathname.endsWith("/health")) return "health";
@@ -11228,6 +11288,150 @@ function createRagHandler(configOrPlugin, options) {
     }
   };
 }
+
+// src/core/LicenseValidator.ts
+var _LicenseValidator = class _LicenseValidator {
+  // 5-minute TTL for successful validation only
+  constructor() {
+    this.cache = /* @__PURE__ */ new Map();
+  }
+  static getInstance() {
+    if (!_LicenseValidator.instance) {
+      _LicenseValidator.instance = new _LicenseValidator();
+    }
+    return _LicenseValidator.instance;
+  }
+  /**
+   * Invalidate local validation cache for a license key
+   */
+  purgeCache(licenseKey) {
+    if (licenseKey) {
+      this.cache.delete(licenseKey);
+    } else {
+      this.cache.clear();
+    }
+  }
+  /**
+   * Validate license status and SDK version against Retrivora License Service
+   */
+  async validate(request) {
+    var _a2;
+    const {
+      licenseKey,
+      projectId,
+      sdkVersion = SDK_VERSION,
+      sdk = "@retrivora-ai/rag-engine",
+      platform = typeof window !== "undefined" ? "browser" : "node",
+      retrivoraApiBase,
+      headers: customHeaders
+    } = request;
+    const getHeader = (name) => {
+      if (!customHeaders) return void 0;
+      const target = name.toLowerCase();
+      for (const [k, v] of Object.entries(customHeaders)) {
+        if (k.toLowerCase() === target) return v;
+      }
+      return void 0;
+    };
+    const effectiveLicenseKey = licenseKey || getHeader("x-license-key") || ((_a2 = getHeader("authorization")) == null ? void 0 : _a2.replace(/^Bearer\s+/i, "")) || (typeof process !== "undefined" ? process.env.NEXT_PUBLIC_RETRIVORA_LICENSE_KEY || process.env.RETRIVORA_LICENSE_KEY : "") || "";
+    if (!effectiveLicenseKey) {
+      this.purgeCache(effectiveLicenseKey);
+      throw new LicenseValidationError("Missing RETRIVORA_LICENSE_KEY in request.");
+    }
+    const cached = this.cache.get(effectiveLicenseKey);
+    if (cached) {
+      const isFresh = Date.now() - cached.timestamp < _LicenseValidator.SUCCESS_CACHE_TTL_MS;
+      if (isFresh && cached.response.valid && cached.response.licenseStatus === "ACTIVE" && !cached.response.forceUpgrade) {
+        return cached.response;
+      } else {
+        this.cache.delete(effectiveLicenseKey);
+      }
+    }
+    const base = retrivoraApiBase || (typeof process !== "undefined" ? process.env.NEXT_PUBLIC_RETRIVORA_API_BASE || process.env.RETRIVORA_API_BASE : "") || "/api/retrivora";
+    const validateUrl = `${base.replace(/\/$/, "")}/v1/license/validate`;
+    let res = null;
+    try {
+      res = await fetch(validateUrl, {
+        method: "POST",
+        cache: "no-store",
+        headers: __spreadValues({
+          "Content-Type": "application/json",
+          "x-license-key": effectiveLicenseKey,
+          "x-sdk-version": sdkVersion
+        }, customHeaders || {}),
+        body: JSON.stringify({
+          licenseKey,
+          projectId,
+          sdkVersion,
+          sdk,
+          platform
+        })
+      });
+    } catch (err) {
+      try {
+        const payload = LicenseVerifier.verify(licenseKey, projectId || "my-rag-app");
+        const fallbackResp = {
+          valid: true,
+          licenseStatus: "ACTIVE",
+          minimumSupportedVersion: "2.1.0",
+          latestVersion: SDK_VERSION,
+          forceUpgrade: false,
+          expiresAt: payload.expiresAt ? new Date(payload.expiresAt * 1e3).toISOString() : null,
+          message: "Local license verification active."
+        };
+        this.cache.set(licenseKey, { response: fallbackResp, timestamp: Date.now() });
+        return fallbackResp;
+      } catch (e) {
+        this.purgeCache(licenseKey);
+        throw new LicenseValidationError(`License validation request failed: ${(err == null ? void 0 : err.message) || "Network error"}`);
+      }
+    }
+    if (res && !res.ok) {
+      try {
+        const payload = LicenseVerifier.verify(licenseKey, projectId || "my-rag-app");
+        const fallbackResp = {
+          valid: true,
+          licenseStatus: "ACTIVE",
+          minimumSupportedVersion: "2.1.0",
+          latestVersion: SDK_VERSION,
+          forceUpgrade: false,
+          expiresAt: payload.expiresAt ? new Date(payload.expiresAt * 1e3).toISOString() : null,
+          message: "Local license verification active."
+        };
+        this.cache.set(licenseKey, { response: fallbackResp, timestamp: Date.now() });
+        return fallbackResp;
+      } catch (e) {
+      }
+    }
+    const data = await res.json().catch(() => ({
+      valid: false,
+      licenseStatus: "REVOKED",
+      minimumSupportedVersion: "2.1.0",
+      latestVersion: SDK_VERSION,
+      forceUpgrade: false,
+      expiresAt: null,
+      message: "Failed to parse license validation response."
+    }));
+    if (!res.ok || !data.valid || data.licenseStatus !== "ACTIVE" || data.forceUpgrade) {
+      this.purgeCache(licenseKey);
+      if (data.forceUpgrade || res.status === 426) {
+        throw new SDKVersionUnsupportedError(
+          data.message || `This SDK version (${sdkVersion}) is no longer supported. Upgrade to version ${data.latestVersion || "2.2.6"} or later.`,
+          data
+        );
+      }
+      const errMsg = data.message || `License validation failed with status: ${data.licenseStatus}. Access denied.`;
+      throw new LicenseValidationError(errMsg, data);
+    }
+    this.cache.set(licenseKey, {
+      response: data,
+      timestamp: Date.now()
+    });
+    return data;
+  }
+};
+_LicenseValidator.SUCCESS_CACHE_TTL_MS = 5 * 60 * 1e3;
+var LicenseValidator = _LicenseValidator;
 export {
   AnthropicProvider,
   AuthenticationException,
@@ -11249,6 +11453,8 @@ export {
   IntentClassifier,
   LLMFactory,
   LLM_PROFILES,
+  LicenseValidationError,
+  LicenseValidator,
   LicenseVerifier,
   MilvusProvider,
   MixedRendererStrategy,
@@ -11279,6 +11485,7 @@ export {
   Rule6SmallResultSetRule,
   Rule7LargeTableRule,
   RuleEngine,
+  SDKVersionUnsupportedError,
   SDK_VERSION,
   TableRendererStrategy,
   TextRendererStrategy,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@retrivora-ai/rag-engine",
-  "version": "2.2.6",
+  "version": "2.2.8",
   "description": "Retrivora AI is a plug-and-play AI engine for RAG chat experiences — generic vector DB + LLM provider, embeddable or standalone.",
   "author": "Abhinav Alkuchi",
   "license": "UNLICENSED",