@retrivora-ai/rag-engine 2.2.7 → 2.2.8

package/dist/server.js

@@ -4823,7 +4823,7 @@ var ConfigValidator = class {
 // package.json
 var package_default = {
   name: "@retrivora-ai/rag-engine",
-  version: "2.2.7",
+  version: "2.2.8",
   description: "Retrivora AI is a plug-and-play AI engine for RAG chat experiences \u2014 generic vector DB + LLM provider, embeddable or standalone.",
   author: "Abhinav Alkuchi",
   license: "UNLICENSED",
@@ -11012,6 +11012,46 @@ function createHealthHandler(configOrPlugin, options) {
     }
   };
 }
+function createLicenseHandler(configOrPlugin, options) {
+  const plugin = getOrCreatePlugin(configOrPlugin);
+  const onAuthorize = options == null ? void 0 : options.onAuthorize;
+  return async function POST(req) {
+    var _a2;
+    if (req) {
+      const authResult = await checkAuth(req, onAuthorize);
+      if (authResult) return authResult;
+    }
+    try {
+      const body = await req.json().catch(() => ({}));
+      const config = plugin.getConfig();
+      const licenseKey = req.headers.get("x-license-key") || (body == null ? void 0 : body.licenseKey) || ((_a2 = req.headers.get("authorization")) == null ? void 0 : _a2.replace(/^Bearer\s+/i, "")) || config.licenseKey || process.env.RETRIVORA_LICENSE_KEY || process.env.NEXT_PUBLIC_RETRIVORA_LICENSE_KEY || "";
+      const projectId = (body == null ? void 0 : body.projectId) || config.projectId || "my-rag-app";
+      const payload = LicenseVerifier.verify(licenseKey, projectId);
+      return import_server.NextResponse.json({
+        valid: true,
+        licenseStatus: "ACTIVE",
+        minimumSupportedVersion: "2.1.0",
+        latestVersion: SDK_VERSION,
+        forceUpgrade: false,
+        expiresAt: payload.expiresAt ? new Date(payload.expiresAt * 1e3).toISOString() : null,
+        message: "License key is active and valid."
+      });
+    } catch (err) {
+      return import_server.NextResponse.json(
+        {
+          valid: false,
+          licenseStatus: "REVOKED",
+          minimumSupportedVersion: "2.1.0",
+          latestVersion: SDK_VERSION,
+          forceUpgrade: false,
+          expiresAt: null,
+          message: (err == null ? void 0 : err.message) || "License validation failed."
+        },
+        { status: 400 }
+      );
+    }
+  };
+}
 function createUploadHandler(configOrPlugin, options) {
   const plugin = getOrCreatePlugin(configOrPlugin);
   const onAuthorize = options == null ? void 0 : options.onAuthorize;
@@ -11263,6 +11303,7 @@ function createRagHandler(configOrPlugin, options) {
   const historyHandler = createHistoryHandler(plugin, { onAuthorize });
   const feedbackHandler = createFeedbackHandler(plugin, { onAuthorize });
   const sessionsHandler = createSessionsHandler(plugin, { onAuthorize });
+  const licenseHandler = createLicenseHandler(plugin, { onAuthorize });
   async function routePostRequest(req, segment) {
     switch (segment) {
       case "chat":
@@ -11280,6 +11321,9 @@ function createRagHandler(configOrPlugin, options) {
         return historyHandler(req);
       case "feedback":
         return feedbackHandler(req);
+      case "license/validate":
+      case "v1/license/validate":
+        return licenseHandler(req);
       default:
         return import_server.NextResponse.json({ error: `Not Found: POST segment "${segment}" not supported.` }, { status: 404 });
     }
@@ -11309,6 +11353,7 @@ function createRagHandler(configOrPlugin, options) {
     try {
       const url = new URL(req.url);
       const pathname = url.pathname;
+      if (pathname.includes("/license/validate")) return "v1/license/validate";
       if (pathname.endsWith("/upload")) return "upload";
       if (pathname.endsWith("/chat") || pathname.endsWith("/chat-sync")) return "chat";
       if (pathname.endsWith("/health")) return "health";
@@ -11370,6 +11415,7 @@ var _LicenseValidator = class _LicenseValidator {
    * Validate license status and SDK version against Retrivora License Service
    */
   async validate(request) {
+    var _a2;
     const {
       licenseKey,
       projectId,
@@ -11379,29 +11425,38 @@ var _LicenseValidator = class _LicenseValidator {
       retrivoraApiBase,
       headers: customHeaders
     } = request;
-    if (!licenseKey) {
-      this.purgeCache(licenseKey);
+    const getHeader = (name) => {
+      if (!customHeaders) return void 0;
+      const target = name.toLowerCase();
+      for (const [k, v] of Object.entries(customHeaders)) {
+        if (k.toLowerCase() === target) return v;
+      }
+      return void 0;
+    };
+    const effectiveLicenseKey = licenseKey || getHeader("x-license-key") || ((_a2 = getHeader("authorization")) == null ? void 0 : _a2.replace(/^Bearer\s+/i, "")) || (typeof process !== "undefined" ? process.env.NEXT_PUBLIC_RETRIVORA_LICENSE_KEY || process.env.RETRIVORA_LICENSE_KEY : "") || "";
+    if (!effectiveLicenseKey) {
+      this.purgeCache(effectiveLicenseKey);
       throw new LicenseValidationError("Missing RETRIVORA_LICENSE_KEY in request.");
     }
-    const cached = this.cache.get(licenseKey);
+    const cached = this.cache.get(effectiveLicenseKey);
     if (cached) {
       const isFresh = Date.now() - cached.timestamp < _LicenseValidator.SUCCESS_CACHE_TTL_MS;
       if (isFresh && cached.response.valid && cached.response.licenseStatus === "ACTIVE" && !cached.response.forceUpgrade) {
         return cached.response;
       } else {
-        this.cache.delete(licenseKey);
+        this.cache.delete(effectiveLicenseKey);
       }
     }
     const base = retrivoraApiBase || (typeof process !== "undefined" ? process.env.NEXT_PUBLIC_RETRIVORA_API_BASE || process.env.RETRIVORA_API_BASE : "") || "/api/retrivora";
     const validateUrl = `${base.replace(/\/$/, "")}/v1/license/validate`;
-    let res;
+    let res = null;
     try {
       res = await fetch(validateUrl, {
         method: "POST",
         cache: "no-store",
         headers: __spreadValues({
           "Content-Type": "application/json",
-          "x-license-key": licenseKey,
+          "x-license-key": effectiveLicenseKey,
           "x-sdk-version": sdkVersion
         }, customHeaders || {}),
         body: JSON.stringify({
@@ -11413,8 +11468,40 @@ var _LicenseValidator = class _LicenseValidator {
         })
       });
     } catch (err) {
-      this.purgeCache(licenseKey);
-      throw new LicenseValidationError(`License validation request failed: ${(err == null ? void 0 : err.message) || "Network error"}`);
+      try {
+        const payload = LicenseVerifier.verify(licenseKey, projectId || "my-rag-app");
+        const fallbackResp = {
+          valid: true,
+          licenseStatus: "ACTIVE",
+          minimumSupportedVersion: "2.1.0",
+          latestVersion: SDK_VERSION,
+          forceUpgrade: false,
+          expiresAt: payload.expiresAt ? new Date(payload.expiresAt * 1e3).toISOString() : null,
+          message: "Local license verification active."
+        };
+        this.cache.set(licenseKey, { response: fallbackResp, timestamp: Date.now() });
+        return fallbackResp;
+      } catch (e) {
+        this.purgeCache(licenseKey);
+        throw new LicenseValidationError(`License validation request failed: ${(err == null ? void 0 : err.message) || "Network error"}`);
+      }
+    }
+    if (res && !res.ok) {
+      try {
+        const payload = LicenseVerifier.verify(licenseKey, projectId || "my-rag-app");
+        const fallbackResp = {
+          valid: true,
+          licenseStatus: "ACTIVE",
+          minimumSupportedVersion: "2.1.0",
+          latestVersion: SDK_VERSION,
+          forceUpgrade: false,
+          expiresAt: payload.expiresAt ? new Date(payload.expiresAt * 1e3).toISOString() : null,
+          message: "Local license verification active."
+        };
+        this.cache.set(licenseKey, { response: fallbackResp, timestamp: Date.now() });
+        return fallbackResp;
+      } catch (e) {
+      }
     }
     const data = await res.json().catch(() => ({
       valid: false,

package/dist/server.mjs

@@ -4723,7 +4723,7 @@ var ConfigValidator = class {
 // package.json
 var package_default = {
   name: "@retrivora-ai/rag-engine",
-  version: "2.2.7",
+  version: "2.2.8",
   description: "Retrivora AI is a plug-and-play AI engine for RAG chat experiences \u2014 generic vector DB + LLM provider, embeddable or standalone.",
   author: "Abhinav Alkuchi",
   license: "UNLICENSED",
@@ -10912,6 +10912,46 @@ function createHealthHandler(configOrPlugin, options) {
     }
   };
 }
+function createLicenseHandler(configOrPlugin, options) {
+  const plugin = getOrCreatePlugin(configOrPlugin);
+  const onAuthorize = options == null ? void 0 : options.onAuthorize;
+  return async function POST(req) {
+    var _a2;
+    if (req) {
+      const authResult = await checkAuth(req, onAuthorize);
+      if (authResult) return authResult;
+    }
+    try {
+      const body = await req.json().catch(() => ({}));
+      const config = plugin.getConfig();
+      const licenseKey = req.headers.get("x-license-key") || (body == null ? void 0 : body.licenseKey) || ((_a2 = req.headers.get("authorization")) == null ? void 0 : _a2.replace(/^Bearer\s+/i, "")) || config.licenseKey || process.env.RETRIVORA_LICENSE_KEY || process.env.NEXT_PUBLIC_RETRIVORA_LICENSE_KEY || "";
+      const projectId = (body == null ? void 0 : body.projectId) || config.projectId || "my-rag-app";
+      const payload = LicenseVerifier.verify(licenseKey, projectId);
+      return NextResponse.json({
+        valid: true,
+        licenseStatus: "ACTIVE",
+        minimumSupportedVersion: "2.1.0",
+        latestVersion: SDK_VERSION,
+        forceUpgrade: false,
+        expiresAt: payload.expiresAt ? new Date(payload.expiresAt * 1e3).toISOString() : null,
+        message: "License key is active and valid."
+      });
+    } catch (err) {
+      return NextResponse.json(
+        {
+          valid: false,
+          licenseStatus: "REVOKED",
+          minimumSupportedVersion: "2.1.0",
+          latestVersion: SDK_VERSION,
+          forceUpgrade: false,
+          expiresAt: null,
+          message: (err == null ? void 0 : err.message) || "License validation failed."
+        },
+        { status: 400 }
+      );
+    }
+  };
+}
 function createUploadHandler(configOrPlugin, options) {
   const plugin = getOrCreatePlugin(configOrPlugin);
   const onAuthorize = options == null ? void 0 : options.onAuthorize;
@@ -11163,6 +11203,7 @@ function createRagHandler(configOrPlugin, options) {
   const historyHandler = createHistoryHandler(plugin, { onAuthorize });
   const feedbackHandler = createFeedbackHandler(plugin, { onAuthorize });
   const sessionsHandler = createSessionsHandler(plugin, { onAuthorize });
+  const licenseHandler = createLicenseHandler(plugin, { onAuthorize });
   async function routePostRequest(req, segment) {
     switch (segment) {
       case "chat":
@@ -11180,6 +11221,9 @@ function createRagHandler(configOrPlugin, options) {
         return historyHandler(req);
       case "feedback":
         return feedbackHandler(req);
+      case "license/validate":
+      case "v1/license/validate":
+        return licenseHandler(req);
       default:
         return NextResponse.json({ error: `Not Found: POST segment "${segment}" not supported.` }, { status: 404 });
     }
@@ -11209,6 +11253,7 @@ function createRagHandler(configOrPlugin, options) {
     try {
       const url = new URL(req.url);
       const pathname = url.pathname;
+      if (pathname.includes("/license/validate")) return "v1/license/validate";
       if (pathname.endsWith("/upload")) return "upload";
       if (pathname.endsWith("/chat") || pathname.endsWith("/chat-sync")) return "chat";
       if (pathname.endsWith("/health")) return "health";
@@ -11270,6 +11315,7 @@ var _LicenseValidator = class _LicenseValidator {
    * Validate license status and SDK version against Retrivora License Service
    */
   async validate(request) {
+    var _a2;
     const {
       licenseKey,
       projectId,
@@ -11279,29 +11325,38 @@ var _LicenseValidator = class _LicenseValidator {
       retrivoraApiBase,
       headers: customHeaders
     } = request;
-    if (!licenseKey) {
-      this.purgeCache(licenseKey);
+    const getHeader = (name) => {
+      if (!customHeaders) return void 0;
+      const target = name.toLowerCase();
+      for (const [k, v] of Object.entries(customHeaders)) {
+        if (k.toLowerCase() === target) return v;
+      }
+      return void 0;
+    };
+    const effectiveLicenseKey = licenseKey || getHeader("x-license-key") || ((_a2 = getHeader("authorization")) == null ? void 0 : _a2.replace(/^Bearer\s+/i, "")) || (typeof process !== "undefined" ? process.env.NEXT_PUBLIC_RETRIVORA_LICENSE_KEY || process.env.RETRIVORA_LICENSE_KEY : "") || "";
+    if (!effectiveLicenseKey) {
+      this.purgeCache(effectiveLicenseKey);
       throw new LicenseValidationError("Missing RETRIVORA_LICENSE_KEY in request.");
     }
-    const cached = this.cache.get(licenseKey);
+    const cached = this.cache.get(effectiveLicenseKey);
     if (cached) {
       const isFresh = Date.now() - cached.timestamp < _LicenseValidator.SUCCESS_CACHE_TTL_MS;
       if (isFresh && cached.response.valid && cached.response.licenseStatus === "ACTIVE" && !cached.response.forceUpgrade) {
         return cached.response;
       } else {
-        this.cache.delete(licenseKey);
+        this.cache.delete(effectiveLicenseKey);
       }
     }
     const base = retrivoraApiBase || (typeof process !== "undefined" ? process.env.NEXT_PUBLIC_RETRIVORA_API_BASE || process.env.RETRIVORA_API_BASE : "") || "/api/retrivora";
     const validateUrl = `${base.replace(/\/$/, "")}/v1/license/validate`;
-    let res;
+    let res = null;
     try {
       res = await fetch(validateUrl, {
         method: "POST",
         cache: "no-store",
         headers: __spreadValues({
           "Content-Type": "application/json",
-          "x-license-key": licenseKey,
+          "x-license-key": effectiveLicenseKey,
           "x-sdk-version": sdkVersion
         }, customHeaders || {}),
         body: JSON.stringify({
@@ -11313,8 +11368,40 @@ var _LicenseValidator = class _LicenseValidator {
         })
       });
     } catch (err) {
-      this.purgeCache(licenseKey);
-      throw new LicenseValidationError(`License validation request failed: ${(err == null ? void 0 : err.message) || "Network error"}`);
+      try {
+        const payload = LicenseVerifier.verify(licenseKey, projectId || "my-rag-app");
+        const fallbackResp = {
+          valid: true,
+          licenseStatus: "ACTIVE",
+          minimumSupportedVersion: "2.1.0",
+          latestVersion: SDK_VERSION,
+          forceUpgrade: false,
+          expiresAt: payload.expiresAt ? new Date(payload.expiresAt * 1e3).toISOString() : null,
+          message: "Local license verification active."
+        };
+        this.cache.set(licenseKey, { response: fallbackResp, timestamp: Date.now() });
+        return fallbackResp;
+      } catch (e) {
+        this.purgeCache(licenseKey);
+        throw new LicenseValidationError(`License validation request failed: ${(err == null ? void 0 : err.message) || "Network error"}`);
+      }
+    }
+    if (res && !res.ok) {
+      try {
+        const payload = LicenseVerifier.verify(licenseKey, projectId || "my-rag-app");
+        const fallbackResp = {
+          valid: true,
+          licenseStatus: "ACTIVE",
+          minimumSupportedVersion: "2.1.0",
+          latestVersion: SDK_VERSION,
+          forceUpgrade: false,
+          expiresAt: payload.expiresAt ? new Date(payload.expiresAt * 1e3).toISOString() : null,
+          message: "Local license verification active."
+        };
+        this.cache.set(licenseKey, { response: fallbackResp, timestamp: Date.now() });
+        return fallbackResp;
+      } catch (e) {
+      }
     }
     const data = await res.json().catch(() => ({
       valid: false,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@retrivora-ai/rag-engine",
-  "version": "2.2.7",
+  "version": "2.2.8",
   "description": "Retrivora AI is a plug-and-play AI engine for RAG chat experiences — generic vector DB + LLM provider, embeddable or standalone.",
   "author": "Abhinav Alkuchi",
   "license": "UNLICENSED",

package/src/components/ChatWidget.tsx

@@ -46,7 +46,7 @@ const GEMINI_STYLES = `
   }
 `;
 
-export function ChatWidget({ position = 'bottom-right', onAddToCart, apiUrl, retrivoraApiBase, headers }: ChatWidgetProps) {
+export function ChatWidget({ position = 'bottom-right', onAddToCart, apiUrl, retrivoraApiBase, licenseKey: licenseKeyProp, headers }: ChatWidgetProps) {
   const { ui, projectId } = useConfig();
   const [isOpen, setIsOpen] = useState(false);
   const [hasUnread, setHasUnread] = useState(false);
@@ -72,9 +72,26 @@ export function ChatWidget({ position = 'bottom-right', onAddToCart, apiUrl, ret
   const handleOpen = async () => {
     setIsValidating(true);
     try {
-      const licenseKey = headers?.['x-license-key'] || headers?.['authorization']?.replace(/^Bearer\s+/i, '') || '';
+      const getHeader = (name: string) => {
+        if (!headers) return undefined;
+        const target = name.toLowerCase();
+        for (const [k, v] of Object.entries(headers)) {
+          if (k.toLowerCase() === target) return v;
+        }
+        return undefined;
+      };
+
+      const resolvedLicenseKey =
+        licenseKeyProp ||
+        getHeader('x-license-key') ||
+        getHeader('authorization')?.replace(/^Bearer\s+/i, '') ||
+        (typeof process !== 'undefined'
+          ? (process.env.NEXT_PUBLIC_RETRIVORA_LICENSE_KEY || process.env.RETRIVORA_LICENSE_KEY)
+          : '') ||
+        '';
+
       await LicenseValidator.getInstance().validate({
-        licenseKey,
+        licenseKey: resolvedLicenseKey,
         projectId,
         retrivoraApiBase,
         headers,
@@ -167,6 +184,7 @@ export function ChatWidget({ position = 'bottom-right', onAddToCart, apiUrl, ret
           onAddToCart={onAddToCart}
           apiUrl={apiUrl}
           retrivoraApiBase={retrivoraApiBase}
+          licenseKey={licenseKeyProp}
           headers={headers}
         />
         {/* Pointer (Tail) */}

package/src/components/ChatWindow.tsx

@@ -68,6 +68,7 @@ export function ChatWindow({
   onAddToCart,
   apiUrl,
   retrivoraApiBase,
+  licenseKey: licenseKeyProp,
   headers
 }: ChatWindowProps) {
   const { ui, projectId } = useConfig();
@@ -81,6 +82,7 @@ export function ChatWindow({
     namespace: projectId,
     apiUrl,
     retrivoraApiBase,
+    licenseKey: licenseKeyProp,
     headers,
   });
 
@@ -98,9 +100,26 @@ export function ChatWindow({
     let isMounted = true;
     async function validateSessionLicense() {
       try {
-        const licenseKey = headers?.['x-license-key'] || headers?.['authorization']?.replace(/^Bearer\s+/i, '') || '';
+        const getHeader = (name: string) => {
+          if (!headers) return undefined;
+          const target = name.toLowerCase();
+          for (const [k, v] of Object.entries(headers)) {
+            if (k.toLowerCase() === target) return v;
+          }
+          return undefined;
+        };
+
+        const resolvedLicenseKey =
+          licenseKeyProp ||
+          getHeader('x-license-key') ||
+          getHeader('authorization')?.replace(/^Bearer\s+/i, '') ||
+          (typeof process !== 'undefined'
+            ? (process.env.NEXT_PUBLIC_RETRIVORA_LICENSE_KEY || process.env.RETRIVORA_LICENSE_KEY)
+            : '') ||
+          '';
+
         await LicenseValidator.getInstance().validate({
-          licenseKey,
+          licenseKey: resolvedLicenseKey,
           projectId,
           retrivoraApiBase,
           headers,

package/src/core/LicenseValidator.ts

@@ -1,5 +1,6 @@
 import { SDK_VERSION } from '../version';
 import { SDKVersionUnsupportedError, LicenseValidationError } from '../exceptions';
+import { LicenseVerifier } from './LicenseVerifier';
 
 export interface LicenseValidationRequest {
   licenseKey: string;
@@ -65,19 +66,37 @@ export class LicenseValidator {
       headers: customHeaders,
     } = request;
 
-    if (!licenseKey) {
-      this.purgeCache(licenseKey);
+    const getHeader = (name: string): string | undefined => {
+      if (!customHeaders) return undefined;
+      const target = name.toLowerCase();
+      for (const [k, v] of Object.entries(customHeaders)) {
+        if (k.toLowerCase() === target) return v;
+      }
+      return undefined;
+    };
+
+    const effectiveLicenseKey =
+      licenseKey ||
+      getHeader('x-license-key') ||
+      getHeader('authorization')?.replace(/^Bearer\s+/i, '') ||
+      (typeof process !== 'undefined'
+        ? (process.env.NEXT_PUBLIC_RETRIVORA_LICENSE_KEY || process.env.RETRIVORA_LICENSE_KEY)
+        : '') ||
+      '';
+
+    if (!effectiveLicenseKey) {
+      this.purgeCache(effectiveLicenseKey);
       throw new LicenseValidationError('Missing RETRIVORA_LICENSE_KEY in request.');
     }
 
     // 1. Check successful 5-minute cache
-    const cached = this.cache.get(licenseKey);
+    const cached = this.cache.get(effectiveLicenseKey);
     if (cached) {
       const isFresh = Date.now() - cached.timestamp < LicenseValidator.SUCCESS_CACHE_TTL_MS;
       if (isFresh && cached.response.valid && cached.response.licenseStatus === 'ACTIVE' && !cached.response.forceUpgrade) {
         return cached.response;
       } else {
-        this.cache.delete(licenseKey);
+        this.cache.delete(effectiveLicenseKey);
       }
     }
 
@@ -85,14 +104,14 @@ export class LicenseValidator {
     const base = retrivoraApiBase || (typeof process !== 'undefined' ? process.env.NEXT_PUBLIC_RETRIVORA_API_BASE || process.env.RETRIVORA_API_BASE : '') || '/api/retrivora';
     const validateUrl = `${base.replace(/\/$/, '')}/v1/license/validate`;
 
-    let res: Response;
+    let res: Response | null = null;
     try {
       res = await fetch(validateUrl, {
         method: 'POST',
         cache: 'no-store',
         headers: {
           'Content-Type': 'application/json',
-          'x-license-key': licenseKey,
+          'x-license-key': effectiveLicenseKey,
           'x-sdk-version': sdkVersion,
           ...(customHeaders || {}),
         },
@@ -105,12 +124,45 @@ export class LicenseValidator {
         }),
       });
     } catch (err: any) {
-      // Fallback: If network error occurs, do not cache and throw error
-      this.purgeCache(licenseKey);
-      throw new LicenseValidationError(`License validation request failed: ${err?.message || 'Network error'}`);
+      // Fallback: If network error occurs, verify locally via RSA LicenseVerifier
+      try {
+        const payload = LicenseVerifier.verify(licenseKey, projectId || 'my-rag-app');
+        const fallbackResp: LicenseValidationResponse = {
+          valid: true,
+          licenseStatus: 'ACTIVE',
+          minimumSupportedVersion: '2.1.0',
+          latestVersion: SDK_VERSION,
+          forceUpgrade: false,
+          expiresAt: payload.expiresAt ? new Date(payload.expiresAt * 1000).toISOString() : null,
+          message: 'Local license verification active.',
+        };
+        this.cache.set(licenseKey, { response: fallbackResp, timestamp: Date.now() });
+        return fallbackResp;
+      } catch {
+        this.purgeCache(licenseKey);
+        throw new LicenseValidationError(`License validation request failed: ${err?.message || 'Network error'}`);
+      }
+    }
+
+    if (res && !res.ok) {
+      // Attempt local verification fallback if API route returned 404 or non-OK response
+      try {
+        const payload = LicenseVerifier.verify(licenseKey, projectId || 'my-rag-app');
+        const fallbackResp: LicenseValidationResponse = {
+          valid: true,
+          licenseStatus: 'ACTIVE',
+          minimumSupportedVersion: '2.1.0',
+          latestVersion: SDK_VERSION,
+          forceUpgrade: false,
+          expiresAt: payload.expiresAt ? new Date(payload.expiresAt * 1000).toISOString() : null,
+          message: 'Local license verification active.',
+        };
+        this.cache.set(licenseKey, { response: fallbackResp, timestamp: Date.now() });
+        return fallbackResp;
+      } catch { /* proceed to parse error response */ }
     }
 
-    const data: LicenseValidationResponse = await res.json().catch(() => ({
+    const data: LicenseValidationResponse = await res!.json().catch(() => ({
       valid: false,
       licenseStatus: 'REVOKED' as const,
       minimumSupportedVersion: '2.1.0',

package/src/handlers/index.ts

@@ -5,6 +5,8 @@ import { ChatMessage, ChatResponse } from '../types';
 import { DocumentParser } from '../utils/DocumentParser';
 import { UITransformer } from '../utils/UITransformer';
 import { DatabaseStorage, HistoryMessage } from '../core/DatabaseStorage';
+import { LicenseVerifier } from '../core/LicenseVerifier';
+import { SDK_VERSION } from '../version';
 
 export interface HandlerOptions {
   onAuthorize?: (req: NextRequest) => boolean | Promise<boolean> | Response | Promise<Response>;
@@ -147,8 +149,6 @@ function getOrCreatePlugin(configOrPlugin: Partial<RagConfig> | VectorPlugin | u
 
 // ─── Telemetry Reporter Helper ───────────────────────────────────────────────
 
-import { SDK_VERSION } from '../version';
-
 /**
  * Asynchronously sends telemetry payload to telemetryUrl when telemetry is enabled
  * or when a licenseKey is set. Non-blocking.
@@ -596,6 +596,64 @@ export function createHealthHandler(
   };
 }
 
+/**
+ * createLicenseHandler — factory for the license validation endpoint (/v1/license/validate).
+ */
+export function createLicenseHandler(
+  configOrPlugin?: Partial<RagConfig> | VectorPlugin,
+  options?: HandlerOptions
+) {
+  const plugin = getOrCreatePlugin(configOrPlugin);
+  const onAuthorize = options?.onAuthorize;
+
+  return async function POST(req: NextRequest) {
+    if (req) {
+      const authResult = await checkAuth(req, onAuthorize);
+      if (authResult) return authResult as any;
+    }
+
+    try {
+      const body = await req.json().catch(() => ({}));
+      const config = plugin.getConfig();
+      const licenseKey =
+        req.headers.get('x-license-key') ||
+        body?.licenseKey ||
+        req.headers.get('authorization')?.replace(/^Bearer\s+/i, '') ||
+        config.licenseKey ||
+        process.env.RETRIVORA_LICENSE_KEY ||
+        process.env.NEXT_PUBLIC_RETRIVORA_LICENSE_KEY ||
+        '';
+
+      const projectId = body?.projectId || config.projectId || 'my-rag-app';
+
+      const payload = LicenseVerifier.verify(licenseKey, projectId);
+
+      return NextResponse.json({
+        valid: true,
+        licenseStatus: 'ACTIVE',
+        minimumSupportedVersion: '2.1.0',
+        latestVersion: SDK_VERSION,
+        forceUpgrade: false,
+        expiresAt: payload.expiresAt ? new Date(payload.expiresAt * 1000).toISOString() : null,
+        message: 'License key is active and valid.',
+      });
+    } catch (err: any) {
+      return NextResponse.json(
+        {
+          valid: false,
+          licenseStatus: 'REVOKED',
+          minimumSupportedVersion: '2.1.0',
+          latestVersion: SDK_VERSION,
+          forceUpgrade: false,
+          expiresAt: null,
+          message: err?.message || 'License validation failed.',
+        },
+        { status: 400 }
+      );
+    }
+  };
+}
+
 /**
  * createUploadHandler — factory for the file upload ingestion endpoint.
  */
@@ -932,6 +990,7 @@ export function createRagHandler(
   const historyHandler = createHistoryHandler(plugin, { onAuthorize });
   const feedbackHandler = createFeedbackHandler(plugin, { onAuthorize });
   const sessionsHandler = createSessionsHandler(plugin, { onAuthorize });
+  const licenseHandler = createLicenseHandler(plugin, { onAuthorize });
 
   async function routePostRequest(req: any, segment: string) {
     switch (segment) {
@@ -950,6 +1009,9 @@ export function createRagHandler(
         return historyHandler(req);
       case 'feedback':
         return feedbackHandler(req);
+      case 'license/validate':
+      case 'v1/license/validate':
+        return licenseHandler(req);
       default:
         return NextResponse.json({ error: `Not Found: POST segment "${segment}" not supported.` }, { status: 404 });
     }
@@ -983,6 +1045,7 @@ export function createRagHandler(
     try {
       const url = new URL(req.url);
       const pathname = url.pathname;
+      if (pathname.includes('/license/validate')) return 'v1/license/validate';
       if (pathname.endsWith('/upload')) return 'upload';
       if (pathname.endsWith('/chat') || pathname.endsWith('/chat-sync')) return 'chat';
       if (pathname.endsWith('/health')) return 'health';