@revealui/cache 0.1.4 → 0.1.5

package/LICENSE.commercial

@@ -0,0 +1,90 @@
+RevealUI Studio — Commercial Licensing for Pro Packages
+
+This file is an explainer for the dual-license structure of this repository.
+It is NOT a standalone license document; the canonical license terms for
+each Pro package live in that package's own LICENSE file.
+
+## Repository Licensing Overview
+
+Most of this repository (the OSS packages, apps, scripts, docs, and tooling)
+is licensed under the MIT License. See LICENSE in the repository root for
+those terms.
+
+A small number of "Pro" packages are licensed under the Functional Source
+License v1.1 with MIT Future License (FSL-1.1-MIT) instead of MIT. Those
+packages each carry their own LICENSE file containing the canonical FSL
+terms; this file documents which packages are covered and what FSL-1.1-MIT
+permits and restricts.
+
+## Pro Packages Covered
+
+The following packages distributed in this repository are licensed under
+FSL-1.1-MIT, not MIT:
+
+- @revealui/ai          (see packages/ai/LICENSE)
+- @revealui/harnesses   (see packages/harnesses/LICENSE)
+
+Additional Pro packages may be added in future. The presence of a LICENSE
+file inside a package directory containing the FSL-1.1-MIT text is the
+authoritative signal that the package is governed by FSL terms rather than
+the root MIT LICENSE.
+
+## What FSL-1.1-MIT Permits
+
+Source code for Pro packages is publicly available. You may:
+
+- Use the package internally for any purpose, including commercial use
+- Modify the package and distribute derivative works under the same terms
+- Inspect, audit, and debug the source
+- Depend on the package from your own software
+
+## What FSL-1.1-MIT Restricts
+
+You may NOT make the functionality of a Pro package available to third
+parties as a service that competes with RevealUI Studio's commercial
+offerings. The full restriction text in each per-package LICENSE controls;
+in plain language, prohibited uses include:
+
+- Hosting the package as part of a SaaS that primarily delivers the
+  package's functionality
+- Offering a service whose value derives entirely or primarily from the
+  package
+- Repackaging the functionality for redistribution as a competing service
+
+If you are unsure whether your intended use is restricted, contact
+founder@revealui.com before relying on the package.
+
+## Change Date and MIT Conversion
+
+Each Pro package's LICENSE file specifies a Change Date. On the earlier of
+that date or the fourth anniversary of the first publicly-available
+distribution of a specific version of the package under FSL, the package
+automatically converts to the MIT License (the "Change License"). After
+conversion, all FSL restrictions are removed for the version in question
+and going forward.
+
+This means every Pro package in this repository will eventually become MIT;
+FSL-1.1-MIT is a time-limited restriction, not a permanent one.
+
+## Commercial Licensing Alternatives
+
+If FSL-1.1-MIT terms do not fit your use case (for example, you are
+building a service that the FSL would prohibit, or you need contractual
+guarantees beyond what an open license provides), commercial licensing is
+available.
+
+Contact: founder@revealui.com
+
+## Canonical FSL-1.1-MIT Text
+
+The Functional Source License v1.1 with MIT Future License is published at:
+
+  https://fsl.software/FSL-1.1-MIT.template.md
+
+The full canonical text is reproduced verbatim in each Pro package's
+LICENSE file. If there is any conflict between this explainer and a
+per-package LICENSE file, the per-package LICENSE file controls.
+
+---
+
+Copyright (c) 2025-2026 RevealUI Studio

package/README.md

@@ -83,6 +83,6 @@ Optional peer dependency: `next` (>=14.0.0)  -  required for ISR helpers.
 
 ## Related Packages
 
-- `apps/api`  -  Applies cache headers to REST responses
+- `apps/server`  -  Applies cache headers to REST responses
 - `apps/marketing`  -  Uses ISR presets for marketing pages
 - `@revealui/core`  -  Triggers cache invalidation on content changes

package/dist/index.js

@@ -368,6 +368,9 @@ function getCacheTTL(headers) {
   return 0;
 }
 
+// src/edge-cache.ts
+import { getClientIp } from "@revealui/security";
+
 // src/logger.ts
 var cacheLogger = console;
 function configureCacheLogger(logger) {
@@ -570,7 +573,7 @@ var EdgeRateLimiter = class {
    * Check rate limit
    */
   check(request) {
-    const key = this.config.key ? this.config.key(request) : request.headers.get("x-forwarded-for") || "unknown";
+    const key = this.config.key ? this.config.key(request) : getClientIp(request);
     const now = Date.now();
     let entry = this.cache.get(key);
     if (!entry || now > entry.resetTime) {
@@ -631,7 +634,7 @@ function getABTestVariant(request, testName, variants) {
   if (cookieVariant && variants.includes(cookieVariant)) {
     return cookieVariant;
   }
-  const ip = request.headers.get("x-forwarded-for") || "unknown";
+  const ip = getClientIp(request);
   const hash = simpleHash(ip + testName);
   const variantIndex = hash % variants.length;
   const variant = variants[variantIndex];

package/package.json

@@ -1,14 +1,17 @@
 {
   "name": "@revealui/cache",
-  "version": "0.1.4",
-  "description": "Caching infrastructure for RevealUI - CDN config, edge cache, ISR presets, revalidation",
+  "version": "0.1.5",
+  "description": "CDN config, edge cache, ISR presets, and revalidation helpers for Vercel and Hono. Ships with RevealUI.",
   "license": "MIT",
+  "dependencies": {
+    "@revealui/security": "0.3.1"
+  },
   "devDependencies": {
-    "@electric-sql/pglite": "^0.4.3",
-    "@types/node": "^25.5.2",
+    "@electric-sql/pglite": "^0.4.4",
+    "@types/node": "^25.6.0",
     "tsup": "^8.5.1",
-    "typescript": "^6.0.2",
-    "vitest": "^4.1.3",
+    "typescript": "^6.0.3",
+    "vitest": "^4.1.5",
     "@revealui/dev": "0.1.0"
   },
   "engines": {