@retrivora-ai/rag-engine 2.2.8 → 2.3.0

package/README.md

@@ -76,8 +76,8 @@ npm install @retrivora-ai/rag-engine
 Create a `.env.local` file in your application root to supply your keys and provider selections:
 ```bash
 # General Setup
-RAG_PROJECT_ID=my-rag-application
-RETRIVORA_LICENSE_KEY=ey... # Required for production deployment
+NEXT_PUBLIC_PROJECT_ID=my-rag-application
+NEXT_PUBLIC_RETRIVORA_LICENSE_KEY=ey... # Required for client & server deployment
 
 # Vector Database (MongoDB Atlas Example)
 VECTOR_DB_PROVIDER=mongodb

package/dist/handlers/index.js

@@ -2346,7 +2346,8 @@ var LicenseVerifier = class {
       };
     }
     try {
-      const rawToken = licenseKey.replace(/^rtv_/i, "").trim();
+      const sanitizedKey = (licenseKey || "").trim().replace(/^["']|["']$/g, "").trim();
+      const rawToken = sanitizedKey.replace(/^rtv_/i, "").trim();
       const parts = rawToken.split(".");
       if (parts.length !== 3) {
         throw new Error("Malformed token structure (expected 3 parts).");
@@ -4710,7 +4711,7 @@ var ConfigValidator = class {
 // package.json
 var package_default = {
   name: "@retrivora-ai/rag-engine",
-  version: "2.2.8",
+  version: "2.3.0",
   description: "Retrivora AI is a plug-and-play AI engine for RAG chat experiences \u2014 generic vector DB + LLM provider, embeddable or standalone.",
   author: "Abhinav Alkuchi",
   license: "UNLICENSED",
@@ -10598,7 +10599,8 @@ function createLicenseHandler(configOrPlugin, options) {
     try {
       const body = await req.json().catch(() => ({}));
       const config = plugin.getConfig();
-      const licenseKey = req.headers.get("x-license-key") || (body == null ? void 0 : body.licenseKey) || ((_a2 = req.headers.get("authorization")) == null ? void 0 : _a2.replace(/^Bearer\s+/i, "")) || config.licenseKey || process.env.RETRIVORA_LICENSE_KEY || process.env.NEXT_PUBLIC_RETRIVORA_LICENSE_KEY || "";
+      const rawKey = req.headers.get("x-license-key") || (body == null ? void 0 : body.licenseKey) || ((_a2 = req.headers.get("authorization")) == null ? void 0 : _a2.replace(/^Bearer\s+/i, "")) || config.licenseKey || process.env.NEXT_PUBLIC_RETRIVORA_LICENSE_KEY || process.env.RETRIVORA_LICENSE_KEY || "";
+      const licenseKey = (rawKey || "").trim().replace(/^["']|["']$/g, "").trim();
       const projectId = (body == null ? void 0 : body.projectId) || config.projectId || "my-rag-app";
       const payload = LicenseVerifier.verify(licenseKey, projectId);
       return import_server.NextResponse.json({

package/dist/handlers/index.mjs

@@ -2310,7 +2310,8 @@ var LicenseVerifier = class {
       };
     }
     try {
-      const rawToken = licenseKey.replace(/^rtv_/i, "").trim();
+      const sanitizedKey = (licenseKey || "").trim().replace(/^["']|["']$/g, "").trim();
+      const rawToken = sanitizedKey.replace(/^rtv_/i, "").trim();
       const parts = rawToken.split(".");
       if (parts.length !== 3) {
         throw new Error("Malformed token structure (expected 3 parts).");
@@ -4674,7 +4675,7 @@ var ConfigValidator = class {
 // package.json
 var package_default = {
   name: "@retrivora-ai/rag-engine",
-  version: "2.2.8",
+  version: "2.3.0",
   description: "Retrivora AI is a plug-and-play AI engine for RAG chat experiences \u2014 generic vector DB + LLM provider, embeddable or standalone.",
   author: "Abhinav Alkuchi",
   license: "UNLICENSED",
@@ -10562,7 +10563,8 @@ function createLicenseHandler(configOrPlugin, options) {
     try {
       const body = await req.json().catch(() => ({}));
       const config = plugin.getConfig();
-      const licenseKey = req.headers.get("x-license-key") || (body == null ? void 0 : body.licenseKey) || ((_a2 = req.headers.get("authorization")) == null ? void 0 : _a2.replace(/^Bearer\s+/i, "")) || config.licenseKey || process.env.RETRIVORA_LICENSE_KEY || process.env.NEXT_PUBLIC_RETRIVORA_LICENSE_KEY || "";
+      const rawKey = req.headers.get("x-license-key") || (body == null ? void 0 : body.licenseKey) || ((_a2 = req.headers.get("authorization")) == null ? void 0 : _a2.replace(/^Bearer\s+/i, "")) || config.licenseKey || process.env.NEXT_PUBLIC_RETRIVORA_LICENSE_KEY || process.env.RETRIVORA_LICENSE_KEY || "";
+      const licenseKey = (rawKey || "").trim().replace(/^["']|["']$/g, "").trim();
       const projectId = (body == null ? void 0 : body.projectId) || config.projectId || "my-rag-app";
       const payload = LicenseVerifier.verify(licenseKey, projectId);
       return NextResponse.json({

package/dist/index.js

@@ -3044,7 +3044,7 @@ function useRagChat(projectId, options = {}) {
 // package.json
 var package_default = {
   name: "@retrivora-ai/rag-engine",
-  version: "2.2.8",
+  version: "2.3.0",
   description: "Retrivora AI is a plug-and-play AI engine for RAG chat experiences \u2014 generic vector DB + LLM provider, embeddable or standalone.",
   author: "Abhinav Alkuchi",
   license: "UNLICENSED",
@@ -3276,7 +3276,8 @@ var LicenseVerifier = class {
       };
     }
     try {
-      const rawToken = licenseKey.replace(/^rtv_/i, "").trim();
+      const sanitizedKey = (licenseKey || "").trim().replace(/^["']|["']$/g, "").trim();
+      const rawToken = sanitizedKey.replace(/^rtv_/i, "").trim();
       const parts = rawToken.split(".");
       if (parts.length !== 3) {
         throw new Error("Malformed token structure (expected 3 parts).");
@@ -3485,10 +3486,11 @@ var _LicenseValidator = class _LicenseValidator {
       }
       return void 0;
     };
-    const effectiveLicenseKey = licenseKey || getHeader("x-license-key") || ((_a = getHeader("authorization")) == null ? void 0 : _a.replace(/^Bearer\s+/i, "")) || (typeof process !== "undefined" ? process.env.NEXT_PUBLIC_RETRIVORA_LICENSE_KEY || process.env.RETRIVORA_LICENSE_KEY : "") || "";
+    const rawKey = licenseKey || getHeader("x-license-key") || ((_a = getHeader("authorization")) == null ? void 0 : _a.replace(/^Bearer\s+/i, "")) || (typeof process !== "undefined" ? process.env.NEXT_PUBLIC_RETRIVORA_LICENSE_KEY || process.env.RETRIVORA_LICENSE_KEY : "") || "";
+    const effectiveLicenseKey = (rawKey || "").trim().replace(/^["']|["']$/g, "").trim();
     if (!effectiveLicenseKey) {
       this.purgeCache(effectiveLicenseKey);
-      throw new LicenseValidationError("Missing RETRIVORA_LICENSE_KEY in request.");
+      throw new LicenseValidationError("Missing RETRIVORA_LICENSE_KEY in request. Set NEXT_PUBLIC_RETRIVORA_LICENSE_KEY in your environment or pass licenseKey as a prop.");
     }
     const cached = this.cache.get(effectiveLicenseKey);
     if (cached) {
@@ -3512,7 +3514,7 @@ var _LicenseValidator = class _LicenseValidator {
           "x-sdk-version": sdkVersion
         }, customHeaders || {}),
         body: JSON.stringify({
-          licenseKey,
+          licenseKey: effectiveLicenseKey,
           projectId,
           sdkVersion,
           sdk,
@@ -3521,7 +3523,7 @@ var _LicenseValidator = class _LicenseValidator {
       });
     } catch (err) {
       try {
-        const payload = LicenseVerifier.verify(licenseKey, projectId || "my-rag-app");
+        const payload = LicenseVerifier.verify(effectiveLicenseKey, projectId || "my-rag-app");
         const fallbackResp = {
           valid: true,
           licenseStatus: "ACTIVE",
@@ -3531,16 +3533,16 @@ var _LicenseValidator = class _LicenseValidator {
           expiresAt: payload.expiresAt ? new Date(payload.expiresAt * 1e3).toISOString() : null,
           message: "Local license verification active."
         };
-        this.cache.set(licenseKey, { response: fallbackResp, timestamp: Date.now() });
+        this.cache.set(effectiveLicenseKey, { response: fallbackResp, timestamp: Date.now() });
         return fallbackResp;
       } catch (e) {
-        this.purgeCache(licenseKey);
+        this.purgeCache(effectiveLicenseKey);
         throw new LicenseValidationError(`License validation request failed: ${(err == null ? void 0 : err.message) || "Network error"}`);
       }
     }
     if (res && !res.ok) {
       try {
-        const payload = LicenseVerifier.verify(licenseKey, projectId || "my-rag-app");
+        const payload = LicenseVerifier.verify(effectiveLicenseKey, projectId || "my-rag-app");
         const fallbackResp = {
           valid: true,
           licenseStatus: "ACTIVE",
@@ -3550,7 +3552,7 @@ var _LicenseValidator = class _LicenseValidator {
           expiresAt: payload.expiresAt ? new Date(payload.expiresAt * 1e3).toISOString() : null,
           message: "Local license verification active."
         };
-        this.cache.set(licenseKey, { response: fallbackResp, timestamp: Date.now() });
+        this.cache.set(effectiveLicenseKey, { response: fallbackResp, timestamp: Date.now() });
         return fallbackResp;
       } catch (e) {
       }
@@ -3565,7 +3567,7 @@ var _LicenseValidator = class _LicenseValidator {
       message: "Failed to parse license validation response."
     }));
     if (!res.ok || !data.valid || data.licenseStatus !== "ACTIVE" || data.forceUpgrade) {
-      this.purgeCache(licenseKey);
+      this.purgeCache(effectiveLicenseKey);
       if (data.forceUpgrade || res.status === 426) {
         throw new SDKVersionUnsupportedError(
           data.message || `This SDK version (${sdkVersion}) is no longer supported. Upgrade to version ${data.latestVersion || "2.2.6"} or later.`,
@@ -3575,7 +3577,7 @@ var _LicenseValidator = class _LicenseValidator {
       const errMsg = data.message || `License validation failed with status: ${data.licenseStatus}. Access denied.`;
       throw new LicenseValidationError(errMsg, data);
     }
-    this.cache.set(licenseKey, {
+    this.cache.set(effectiveLicenseKey, {
       response: data,
       timestamp: Date.now()
     });

package/dist/index.mjs

@@ -3049,7 +3049,7 @@ function useRagChat(projectId, options = {}) {
 // package.json
 var package_default = {
   name: "@retrivora-ai/rag-engine",
-  version: "2.2.8",
+  version: "2.3.0",
   description: "Retrivora AI is a plug-and-play AI engine for RAG chat experiences \u2014 generic vector DB + LLM provider, embeddable or standalone.",
   author: "Abhinav Alkuchi",
   license: "UNLICENSED",
@@ -3281,7 +3281,8 @@ var LicenseVerifier = class {
       };
     }
     try {
-      const rawToken = licenseKey.replace(/^rtv_/i, "").trim();
+      const sanitizedKey = (licenseKey || "").trim().replace(/^["']|["']$/g, "").trim();
+      const rawToken = sanitizedKey.replace(/^rtv_/i, "").trim();
       const parts = rawToken.split(".");
       if (parts.length !== 3) {
         throw new Error("Malformed token structure (expected 3 parts).");
@@ -3490,10 +3491,11 @@ var _LicenseValidator = class _LicenseValidator {
       }
       return void 0;
     };
-    const effectiveLicenseKey = licenseKey || getHeader("x-license-key") || ((_a = getHeader("authorization")) == null ? void 0 : _a.replace(/^Bearer\s+/i, "")) || (typeof process !== "undefined" ? process.env.NEXT_PUBLIC_RETRIVORA_LICENSE_KEY || process.env.RETRIVORA_LICENSE_KEY : "") || "";
+    const rawKey = licenseKey || getHeader("x-license-key") || ((_a = getHeader("authorization")) == null ? void 0 : _a.replace(/^Bearer\s+/i, "")) || (typeof process !== "undefined" ? process.env.NEXT_PUBLIC_RETRIVORA_LICENSE_KEY || process.env.RETRIVORA_LICENSE_KEY : "") || "";
+    const effectiveLicenseKey = (rawKey || "").trim().replace(/^["']|["']$/g, "").trim();
     if (!effectiveLicenseKey) {
       this.purgeCache(effectiveLicenseKey);
-      throw new LicenseValidationError("Missing RETRIVORA_LICENSE_KEY in request.");
+      throw new LicenseValidationError("Missing RETRIVORA_LICENSE_KEY in request. Set NEXT_PUBLIC_RETRIVORA_LICENSE_KEY in your environment or pass licenseKey as a prop.");
     }
     const cached = this.cache.get(effectiveLicenseKey);
     if (cached) {
@@ -3517,7 +3519,7 @@ var _LicenseValidator = class _LicenseValidator {
           "x-sdk-version": sdkVersion
         }, customHeaders || {}),
         body: JSON.stringify({
-          licenseKey,
+          licenseKey: effectiveLicenseKey,
           projectId,
           sdkVersion,
           sdk,
@@ -3526,7 +3528,7 @@ var _LicenseValidator = class _LicenseValidator {
       });
     } catch (err) {
       try {
-        const payload = LicenseVerifier.verify(licenseKey, projectId || "my-rag-app");
+        const payload = LicenseVerifier.verify(effectiveLicenseKey, projectId || "my-rag-app");
         const fallbackResp = {
           valid: true,
           licenseStatus: "ACTIVE",
@@ -3536,16 +3538,16 @@ var _LicenseValidator = class _LicenseValidator {
           expiresAt: payload.expiresAt ? new Date(payload.expiresAt * 1e3).toISOString() : null,
           message: "Local license verification active."
         };
-        this.cache.set(licenseKey, { response: fallbackResp, timestamp: Date.now() });
+        this.cache.set(effectiveLicenseKey, { response: fallbackResp, timestamp: Date.now() });
         return fallbackResp;
       } catch (e) {
-        this.purgeCache(licenseKey);
+        this.purgeCache(effectiveLicenseKey);
         throw new LicenseValidationError(`License validation request failed: ${(err == null ? void 0 : err.message) || "Network error"}`);
       }
     }
     if (res && !res.ok) {
       try {
-        const payload = LicenseVerifier.verify(licenseKey, projectId || "my-rag-app");
+        const payload = LicenseVerifier.verify(effectiveLicenseKey, projectId || "my-rag-app");
         const fallbackResp = {
           valid: true,
           licenseStatus: "ACTIVE",
@@ -3555,7 +3557,7 @@ var _LicenseValidator = class _LicenseValidator {
           expiresAt: payload.expiresAt ? new Date(payload.expiresAt * 1e3).toISOString() : null,
           message: "Local license verification active."
         };
-        this.cache.set(licenseKey, { response: fallbackResp, timestamp: Date.now() });
+        this.cache.set(effectiveLicenseKey, { response: fallbackResp, timestamp: Date.now() });
         return fallbackResp;
       } catch (e) {
       }
@@ -3570,7 +3572,7 @@ var _LicenseValidator = class _LicenseValidator {
       message: "Failed to parse license validation response."
     }));
     if (!res.ok || !data.valid || data.licenseStatus !== "ACTIVE" || data.forceUpgrade) {
-      this.purgeCache(licenseKey);
+      this.purgeCache(effectiveLicenseKey);
       if (data.forceUpgrade || res.status === 426) {
         throw new SDKVersionUnsupportedError(
           data.message || `This SDK version (${sdkVersion}) is no longer supported. Upgrade to version ${data.latestVersion || "2.2.6"} or later.`,
@@ -3580,7 +3582,7 @@ var _LicenseValidator = class _LicenseValidator {
       const errMsg = data.message || `License validation failed with status: ${data.licenseStatus}. Access denied.`;
       throw new LicenseValidationError(errMsg, data);
     }
-    this.cache.set(licenseKey, {
+    this.cache.set(effectiveLicenseKey, {
       response: data,
       timestamp: Date.now()
     });

package/dist/server.js

@@ -2417,7 +2417,8 @@ var LicenseVerifier = class {
       };
     }
     try {
-      const rawToken = licenseKey.replace(/^rtv_/i, "").trim();
+      const sanitizedKey = (licenseKey || "").trim().replace(/^["']|["']$/g, "").trim();
+      const rawToken = sanitizedKey.replace(/^rtv_/i, "").trim();
       const parts = rawToken.split(".");
       if (parts.length !== 3) {
         throw new Error("Malformed token structure (expected 3 parts).");
@@ -4823,7 +4824,7 @@ var ConfigValidator = class {
 // package.json
 var package_default = {
   name: "@retrivora-ai/rag-engine",
-  version: "2.2.8",
+  version: "2.3.0",
   description: "Retrivora AI is a plug-and-play AI engine for RAG chat experiences \u2014 generic vector DB + LLM provider, embeddable or standalone.",
   author: "Abhinav Alkuchi",
   license: "UNLICENSED",
@@ -11024,7 +11025,8 @@ function createLicenseHandler(configOrPlugin, options) {
     try {
       const body = await req.json().catch(() => ({}));
       const config = plugin.getConfig();
-      const licenseKey = req.headers.get("x-license-key") || (body == null ? void 0 : body.licenseKey) || ((_a2 = req.headers.get("authorization")) == null ? void 0 : _a2.replace(/^Bearer\s+/i, "")) || config.licenseKey || process.env.RETRIVORA_LICENSE_KEY || process.env.NEXT_PUBLIC_RETRIVORA_LICENSE_KEY || "";
+      const rawKey = req.headers.get("x-license-key") || (body == null ? void 0 : body.licenseKey) || ((_a2 = req.headers.get("authorization")) == null ? void 0 : _a2.replace(/^Bearer\s+/i, "")) || config.licenseKey || process.env.NEXT_PUBLIC_RETRIVORA_LICENSE_KEY || process.env.RETRIVORA_LICENSE_KEY || "";
+      const licenseKey = (rawKey || "").trim().replace(/^["']|["']$/g, "").trim();
       const projectId = (body == null ? void 0 : body.projectId) || config.projectId || "my-rag-app";
       const payload = LicenseVerifier.verify(licenseKey, projectId);
       return import_server.NextResponse.json({
@@ -11433,10 +11435,11 @@ var _LicenseValidator = class _LicenseValidator {
       }
       return void 0;
     };
-    const effectiveLicenseKey = licenseKey || getHeader("x-license-key") || ((_a2 = getHeader("authorization")) == null ? void 0 : _a2.replace(/^Bearer\s+/i, "")) || (typeof process !== "undefined" ? process.env.NEXT_PUBLIC_RETRIVORA_LICENSE_KEY || process.env.RETRIVORA_LICENSE_KEY : "") || "";
+    const rawKey = licenseKey || getHeader("x-license-key") || ((_a2 = getHeader("authorization")) == null ? void 0 : _a2.replace(/^Bearer\s+/i, "")) || (typeof process !== "undefined" ? process.env.NEXT_PUBLIC_RETRIVORA_LICENSE_KEY || process.env.RETRIVORA_LICENSE_KEY : "") || "";
+    const effectiveLicenseKey = (rawKey || "").trim().replace(/^["']|["']$/g, "").trim();
     if (!effectiveLicenseKey) {
       this.purgeCache(effectiveLicenseKey);
-      throw new LicenseValidationError("Missing RETRIVORA_LICENSE_KEY in request.");
+      throw new LicenseValidationError("Missing RETRIVORA_LICENSE_KEY in request. Set NEXT_PUBLIC_RETRIVORA_LICENSE_KEY in your environment or pass licenseKey as a prop.");
     }
     const cached = this.cache.get(effectiveLicenseKey);
     if (cached) {
@@ -11460,7 +11463,7 @@ var _LicenseValidator = class _LicenseValidator {
           "x-sdk-version": sdkVersion
         }, customHeaders || {}),
         body: JSON.stringify({
-          licenseKey,
+          licenseKey: effectiveLicenseKey,
           projectId,
           sdkVersion,
           sdk,
@@ -11469,7 +11472,7 @@ var _LicenseValidator = class _LicenseValidator {
       });
     } catch (err) {
       try {
-        const payload = LicenseVerifier.verify(licenseKey, projectId || "my-rag-app");
+        const payload = LicenseVerifier.verify(effectiveLicenseKey, projectId || "my-rag-app");
         const fallbackResp = {
           valid: true,
           licenseStatus: "ACTIVE",
@@ -11479,16 +11482,16 @@ var _LicenseValidator = class _LicenseValidator {
           expiresAt: payload.expiresAt ? new Date(payload.expiresAt * 1e3).toISOString() : null,
           message: "Local license verification active."
         };
-        this.cache.set(licenseKey, { response: fallbackResp, timestamp: Date.now() });
+        this.cache.set(effectiveLicenseKey, { response: fallbackResp, timestamp: Date.now() });
         return fallbackResp;
       } catch (e) {
-        this.purgeCache(licenseKey);
+        this.purgeCache(effectiveLicenseKey);
         throw new LicenseValidationError(`License validation request failed: ${(err == null ? void 0 : err.message) || "Network error"}`);
       }
     }
     if (res && !res.ok) {
       try {
-        const payload = LicenseVerifier.verify(licenseKey, projectId || "my-rag-app");
+        const payload = LicenseVerifier.verify(effectiveLicenseKey, projectId || "my-rag-app");
         const fallbackResp = {
           valid: true,
           licenseStatus: "ACTIVE",
@@ -11498,7 +11501,7 @@ var _LicenseValidator = class _LicenseValidator {
           expiresAt: payload.expiresAt ? new Date(payload.expiresAt * 1e3).toISOString() : null,
           message: "Local license verification active."
         };
-        this.cache.set(licenseKey, { response: fallbackResp, timestamp: Date.now() });
+        this.cache.set(effectiveLicenseKey, { response: fallbackResp, timestamp: Date.now() });
         return fallbackResp;
       } catch (e) {
       }
@@ -11513,7 +11516,7 @@ var _LicenseValidator = class _LicenseValidator {
       message: "Failed to parse license validation response."
     }));
     if (!res.ok || !data.valid || data.licenseStatus !== "ACTIVE" || data.forceUpgrade) {
-      this.purgeCache(licenseKey);
+      this.purgeCache(effectiveLicenseKey);
       if (data.forceUpgrade || res.status === 426) {
         throw new SDKVersionUnsupportedError(
           data.message || `This SDK version (${sdkVersion}) is no longer supported. Upgrade to version ${data.latestVersion || "2.2.6"} or later.`,
@@ -11523,7 +11526,7 @@ var _LicenseValidator = class _LicenseValidator {
       const errMsg = data.message || `License validation failed with status: ${data.licenseStatus}. Access denied.`;
       throw new LicenseValidationError(errMsg, data);
     }
-    this.cache.set(licenseKey, {
+    this.cache.set(effectiveLicenseKey, {
       response: data,
       timestamp: Date.now()
     });

package/dist/server.mjs

@@ -2317,7 +2317,8 @@ var LicenseVerifier = class {
       };
     }
     try {
-      const rawToken = licenseKey.replace(/^rtv_/i, "").trim();
+      const sanitizedKey = (licenseKey || "").trim().replace(/^["']|["']$/g, "").trim();
+      const rawToken = sanitizedKey.replace(/^rtv_/i, "").trim();
       const parts = rawToken.split(".");
       if (parts.length !== 3) {
         throw new Error("Malformed token structure (expected 3 parts).");
@@ -4723,7 +4724,7 @@ var ConfigValidator = class {
 // package.json
 var package_default = {
   name: "@retrivora-ai/rag-engine",
-  version: "2.2.8",
+  version: "2.3.0",
   description: "Retrivora AI is a plug-and-play AI engine for RAG chat experiences \u2014 generic vector DB + LLM provider, embeddable or standalone.",
   author: "Abhinav Alkuchi",
   license: "UNLICENSED",
@@ -10924,7 +10925,8 @@ function createLicenseHandler(configOrPlugin, options) {
     try {
       const body = await req.json().catch(() => ({}));
       const config = plugin.getConfig();
-      const licenseKey = req.headers.get("x-license-key") || (body == null ? void 0 : body.licenseKey) || ((_a2 = req.headers.get("authorization")) == null ? void 0 : _a2.replace(/^Bearer\s+/i, "")) || config.licenseKey || process.env.RETRIVORA_LICENSE_KEY || process.env.NEXT_PUBLIC_RETRIVORA_LICENSE_KEY || "";
+      const rawKey = req.headers.get("x-license-key") || (body == null ? void 0 : body.licenseKey) || ((_a2 = req.headers.get("authorization")) == null ? void 0 : _a2.replace(/^Bearer\s+/i, "")) || config.licenseKey || process.env.NEXT_PUBLIC_RETRIVORA_LICENSE_KEY || process.env.RETRIVORA_LICENSE_KEY || "";
+      const licenseKey = (rawKey || "").trim().replace(/^["']|["']$/g, "").trim();
       const projectId = (body == null ? void 0 : body.projectId) || config.projectId || "my-rag-app";
       const payload = LicenseVerifier.verify(licenseKey, projectId);
       return NextResponse.json({
@@ -11333,10 +11335,11 @@ var _LicenseValidator = class _LicenseValidator {
       }
       return void 0;
     };
-    const effectiveLicenseKey = licenseKey || getHeader("x-license-key") || ((_a2 = getHeader("authorization")) == null ? void 0 : _a2.replace(/^Bearer\s+/i, "")) || (typeof process !== "undefined" ? process.env.NEXT_PUBLIC_RETRIVORA_LICENSE_KEY || process.env.RETRIVORA_LICENSE_KEY : "") || "";
+    const rawKey = licenseKey || getHeader("x-license-key") || ((_a2 = getHeader("authorization")) == null ? void 0 : _a2.replace(/^Bearer\s+/i, "")) || (typeof process !== "undefined" ? process.env.NEXT_PUBLIC_RETRIVORA_LICENSE_KEY || process.env.RETRIVORA_LICENSE_KEY : "") || "";
+    const effectiveLicenseKey = (rawKey || "").trim().replace(/^["']|["']$/g, "").trim();
     if (!effectiveLicenseKey) {
       this.purgeCache(effectiveLicenseKey);
-      throw new LicenseValidationError("Missing RETRIVORA_LICENSE_KEY in request.");
+      throw new LicenseValidationError("Missing RETRIVORA_LICENSE_KEY in request. Set NEXT_PUBLIC_RETRIVORA_LICENSE_KEY in your environment or pass licenseKey as a prop.");
     }
     const cached = this.cache.get(effectiveLicenseKey);
     if (cached) {
@@ -11360,7 +11363,7 @@ var _LicenseValidator = class _LicenseValidator {
           "x-sdk-version": sdkVersion
         }, customHeaders || {}),
         body: JSON.stringify({
-          licenseKey,
+          licenseKey: effectiveLicenseKey,
           projectId,
           sdkVersion,
           sdk,
@@ -11369,7 +11372,7 @@ var _LicenseValidator = class _LicenseValidator {
       });
     } catch (err) {
       try {
-        const payload = LicenseVerifier.verify(licenseKey, projectId || "my-rag-app");
+        const payload = LicenseVerifier.verify(effectiveLicenseKey, projectId || "my-rag-app");
         const fallbackResp = {
           valid: true,
           licenseStatus: "ACTIVE",
@@ -11379,16 +11382,16 @@ var _LicenseValidator = class _LicenseValidator {
           expiresAt: payload.expiresAt ? new Date(payload.expiresAt * 1e3).toISOString() : null,
           message: "Local license verification active."
         };
-        this.cache.set(licenseKey, { response: fallbackResp, timestamp: Date.now() });
+        this.cache.set(effectiveLicenseKey, { response: fallbackResp, timestamp: Date.now() });
         return fallbackResp;
       } catch (e) {
-        this.purgeCache(licenseKey);
+        this.purgeCache(effectiveLicenseKey);
         throw new LicenseValidationError(`License validation request failed: ${(err == null ? void 0 : err.message) || "Network error"}`);
       }
     }
     if (res && !res.ok) {
       try {
-        const payload = LicenseVerifier.verify(licenseKey, projectId || "my-rag-app");
+        const payload = LicenseVerifier.verify(effectiveLicenseKey, projectId || "my-rag-app");
         const fallbackResp = {
           valid: true,
           licenseStatus: "ACTIVE",
@@ -11398,7 +11401,7 @@ var _LicenseValidator = class _LicenseValidator {
           expiresAt: payload.expiresAt ? new Date(payload.expiresAt * 1e3).toISOString() : null,
           message: "Local license verification active."
         };
-        this.cache.set(licenseKey, { response: fallbackResp, timestamp: Date.now() });
+        this.cache.set(effectiveLicenseKey, { response: fallbackResp, timestamp: Date.now() });
         return fallbackResp;
       } catch (e) {
       }
@@ -11413,7 +11416,7 @@ var _LicenseValidator = class _LicenseValidator {
       message: "Failed to parse license validation response."
     }));
     if (!res.ok || !data.valid || data.licenseStatus !== "ACTIVE" || data.forceUpgrade) {
-      this.purgeCache(licenseKey);
+      this.purgeCache(effectiveLicenseKey);
       if (data.forceUpgrade || res.status === 426) {
         throw new SDKVersionUnsupportedError(
           data.message || `This SDK version (${sdkVersion}) is no longer supported. Upgrade to version ${data.latestVersion || "2.2.6"} or later.`,
@@ -11423,7 +11426,7 @@ var _LicenseValidator = class _LicenseValidator {
       const errMsg = data.message || `License validation failed with status: ${data.licenseStatus}. Access denied.`;
       throw new LicenseValidationError(errMsg, data);
     }
-    this.cache.set(licenseKey, {
+    this.cache.set(effectiveLicenseKey, {
       response: data,
       timestamp: Date.now()
     });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@retrivora-ai/rag-engine",
-  "version": "2.2.8",
+  "version": "2.3.0",
   "description": "Retrivora AI is a plug-and-play AI engine for RAG chat experiences — generic vector DB + LLM provider, embeddable or standalone.",
   "author": "Abhinav Alkuchi",
   "license": "UNLICENSED",

package/src/core/LicenseValidator.ts

@@ -75,7 +75,7 @@ export class LicenseValidator {
       return undefined;
     };
 
-    const effectiveLicenseKey =
+    const rawKey =
       licenseKey ||
       getHeader('x-license-key') ||
       getHeader('authorization')?.replace(/^Bearer\s+/i, '') ||
@@ -84,9 +84,11 @@ export class LicenseValidator {
         : '') ||
       '';
 
+    const effectiveLicenseKey = (rawKey || '').trim().replace(/^["']|["']$/g, '').trim();
+
     if (!effectiveLicenseKey) {
       this.purgeCache(effectiveLicenseKey);
-      throw new LicenseValidationError('Missing RETRIVORA_LICENSE_KEY in request.');
+      throw new LicenseValidationError('Missing RETRIVORA_LICENSE_KEY in request. Set NEXT_PUBLIC_RETRIVORA_LICENSE_KEY in your environment or pass licenseKey as a prop.');
     }
 
     // 1. Check successful 5-minute cache
@@ -100,7 +102,7 @@ export class LicenseValidator {
       }
     }
 
-    // 2. Fetch live validation from Retrivora backend API
+    // 2. Fetch live validation from Retrivora backend API / local catch-all route
     const base = retrivoraApiBase || (typeof process !== 'undefined' ? process.env.NEXT_PUBLIC_RETRIVORA_API_BASE || process.env.RETRIVORA_API_BASE : '') || '/api/retrivora';
     const validateUrl = `${base.replace(/\/$/, '')}/v1/license/validate`;
 
@@ -116,7 +118,7 @@ export class LicenseValidator {
           ...(customHeaders || {}),
         },
         body: JSON.stringify({
-          licenseKey,
+          licenseKey: effectiveLicenseKey,
           projectId,
           sdkVersion,
           sdk,
@@ -126,7 +128,7 @@ export class LicenseValidator {
     } catch (err: any) {
       // Fallback: If network error occurs, verify locally via RSA LicenseVerifier
       try {
-        const payload = LicenseVerifier.verify(licenseKey, projectId || 'my-rag-app');
+        const payload = LicenseVerifier.verify(effectiveLicenseKey, projectId || 'my-rag-app');
         const fallbackResp: LicenseValidationResponse = {
           valid: true,
           licenseStatus: 'ACTIVE',
@@ -136,10 +138,10 @@ export class LicenseValidator {
           expiresAt: payload.expiresAt ? new Date(payload.expiresAt * 1000).toISOString() : null,
           message: 'Local license verification active.',
         };
-        this.cache.set(licenseKey, { response: fallbackResp, timestamp: Date.now() });
+        this.cache.set(effectiveLicenseKey, { response: fallbackResp, timestamp: Date.now() });
         return fallbackResp;
       } catch {
-        this.purgeCache(licenseKey);
+        this.purgeCache(effectiveLicenseKey);
         throw new LicenseValidationError(`License validation request failed: ${err?.message || 'Network error'}`);
       }
     }
@@ -147,7 +149,7 @@ export class LicenseValidator {
     if (res && !res.ok) {
       // Attempt local verification fallback if API route returned 404 or non-OK response
       try {
-        const payload = LicenseVerifier.verify(licenseKey, projectId || 'my-rag-app');
+        const payload = LicenseVerifier.verify(effectiveLicenseKey, projectId || 'my-rag-app');
         const fallbackResp: LicenseValidationResponse = {
           valid: true,
           licenseStatus: 'ACTIVE',
@@ -157,7 +159,7 @@ export class LicenseValidator {
           expiresAt: payload.expiresAt ? new Date(payload.expiresAt * 1000).toISOString() : null,
           message: 'Local license verification active.',
         };
-        this.cache.set(licenseKey, { response: fallbackResp, timestamp: Date.now() });
+        this.cache.set(effectiveLicenseKey, { response: fallbackResp, timestamp: Date.now() });
         return fallbackResp;
       } catch { /* proceed to parse error response */ }
     }
@@ -174,7 +176,7 @@ export class LicenseValidator {
 
     // 3. Negative validation responses immediately purge any existing cache
     if (!res.ok || !data.valid || data.licenseStatus !== 'ACTIVE' || data.forceUpgrade) {
-      this.purgeCache(licenseKey);
+      this.purgeCache(effectiveLicenseKey);
 
       if (data.forceUpgrade || res.status === 426) {
         throw new SDKVersionUnsupportedError(
@@ -188,7 +190,7 @@ export class LicenseValidator {
     }
 
     // 4. Cache SUCCESSFUL validation only (TTL = 5 minutes)
-    this.cache.set(licenseKey, {
+    this.cache.set(effectiveLicenseKey, {
       response: data,
       timestamp: Date.now(),
     });

package/src/core/LicenseVerifier.ts

@@ -80,7 +80,8 @@ MwIDAQAB
     }
 
     try {
-      const rawToken = licenseKey.replace(/^rtv_/i, '').trim();
+      const sanitizedKey = (licenseKey || '').trim().replace(/^["']|["']$/g, '').trim();
+      const rawToken = sanitizedKey.replace(/^rtv_/i, '').trim();
       const parts = rawToken.split('.');
       if (parts.length !== 3) {
         throw new Error('Malformed token structure (expected 3 parts).');
@@ -90,7 +91,7 @@ MwIDAQAB
       const dataToVerify = `${headerB64}.${payloadB64}`;
 
       const publicKey = publicKeyOverride ?? this.PUBLIC_KEY;
-      
+
       // 2. Cryptographic signature check
       const signature = Buffer.from(signatureB64, 'base64url');
       const data = Buffer.from(dataToVerify);
@@ -123,7 +124,7 @@ MwIDAQAB
       if (!isProjectMatch) {
         throw new Error(
           `Project ID mismatch. License is bound to project namespace "${payload.projectId}" ` +
-            `but configuration has "${currentProjectId}".`
+          `but configuration has "${currentProjectId}".`
         );
       }
 
@@ -206,18 +207,18 @@ MwIDAQAB
       if (payload.ipv4 || payload.ipv6) {
         let currentIpv4 = '';
         let currentIpv6 = '';
-        
+
         try {
           const res = await fetch('https://api4.ipify.org?format=json', { signal: AbortSignal.timeout(3000) });
           const data = await res.json();
           currentIpv4 = data.ip;
-        } catch (e) {}
-        
+        } catch (e) { }
+
         try {
           const res = await fetch('https://api6.ipify.org?format=json', { signal: AbortSignal.timeout(3000) });
           const data = await res.json();
           currentIpv6 = data.ip;
-        } catch (e) {}
+        } catch (e) { }
 
         const localIps: string[] = [];
         try {
@@ -230,14 +231,14 @@ MwIDAQAB
               }
             }
           }
-        } catch (e) {}
-        
+        } catch (e) { }
+
         const isIpv4Match = payload.ipv4 && (
-          currentIpv4 === payload.ipv4 || 
+          currentIpv4 === payload.ipv4 ||
           localIps.includes(payload.ipv4)
         );
         const isIpv6Match = payload.ipv6 && (
-          currentIpv6 === payload.ipv6 || 
+          currentIpv6 === payload.ipv6 ||
           localIps.includes(payload.ipv6)
         );
 

package/src/handlers/index.ts

@@ -615,15 +615,17 @@ export function createLicenseHandler(
     try {
       const body = await req.json().catch(() => ({}));
       const config = plugin.getConfig();
-      const licenseKey =
+      const rawKey =
         req.headers.get('x-license-key') ||
         body?.licenseKey ||
         req.headers.get('authorization')?.replace(/^Bearer\s+/i, '') ||
         config.licenseKey ||
-        process.env.RETRIVORA_LICENSE_KEY ||
         process.env.NEXT_PUBLIC_RETRIVORA_LICENSE_KEY ||
+        process.env.RETRIVORA_LICENSE_KEY ||
         '';
 
+      const licenseKey = (rawKey || '').trim().replace(/^["']|["']$/g, '').trim();
+
       const projectId = body?.projectId || config.projectId || 'my-rag-app';
 
       const payload = LicenseVerifier.verify(licenseKey, projectId);