feat: Add automatic license renewal for gem and Node Renderer

.lychee.toml

@@ -70,6 +70,8 @@ exclude = [
   # PLANNED DEPLOYMENTS NOT YET LIVE
   # ============================================================================
   '^https://ror-spec-dummy\.reactrails\.com',  # spec/dummy demo - deployment pending
+  # TODO: Remove this exclusion once licenses.shakacode.com is deployed
+  '^https://licenses\.shakacode\.com',  # React on Rails Pro licensing app - deployment pending
 
   # ============================================================================
   # SITES FROM PROJECTS.MD THAT BLOCK BOTS OR ARE UNRELIABLE
@@ -99,6 +101,8 @@ exclude = [
   # the changelog is committed). Exclude all compare links since they're
   # auto-generated by changelog tooling.
   '^https://github\.com/shakacode/react_on_rails/compare/',
+  '^https://github\.com/shakacode/react_on_rails/pull/2280$',  # Intermittent 502 from GitHub PR page in CI
+  '^https://github\.com/shakacode/shakapacker/blob/cdf32835d3e0949952b8b4b53063807f714f9b24/package/environments/base\.js(#.*)?$',  # Intermittent 502 from GitHub blob view in CI
 
   # ============================================================================
   # DELETED GITHUB USER ACCOUNTS

docs/oss/configuration/configuration-pro.md

@@ -166,6 +166,28 @@ ReactOnRailsPro.configure do |config|
   # - Faster page loading
   # - Selective hydration of client components
   # - Progressive rendering with Suspense boundaries
+
+  ################################################################################
+  # LICENSE AUTO-REFRESH CONFIGURATION
+  # See LICENSE_SETUP.md for detailed documentation on automatic license renewal.
+  ################################################################################
+
+  # License key for automatic license renewal. When configured, the gem fetches
+  # fresh license tokens automatically as your current token approaches expiration.
+  # Can also be set via ENV: REACT_ON_RAILS_PRO_LICENSE_KEY (takes precedence).
+  # Get your license key from the dashboard after purchasing a paid subscription.
+  # Default is nil (auto-refresh disabled unless set).
+  config.license_key = ENV["REACT_ON_RAILS_PRO_LICENSE_KEY"]
+
+  # Enable or disable automatic license refresh. Set to false for air-gapped
+  # environments or when outbound network calls are not permitted.
+  # Auto-refresh only activates if license_key is also configured.
+  # Default is true.
+  config.auto_refresh_license = true
+
+  # URL of the license API server. Only change if using a custom license server.
+  # Default is "https://licenses.shakacode.com".
+  config.license_api_url = "https://licenses.shakacode.com"
 end
 ```
 

packages/react-on-rails-pro-node-renderer/src/ReactOnRailsProNodeRenderer.ts

@@ -52,7 +52,7 @@ and for "@fastify/..." dependencies in your package.json. Consider removing them
     await worker.default(config).ready();
   } else {
     const master = require('./master.js') as typeof import('./master.js');
-    master.default(config);
+    await master.default(config);
   }
   /* eslint-enable global-require,@typescript-eslint/no-require-imports */
 }

packages/react-on-rails-pro-node-renderer/src/master.ts

@@ -9,7 +9,7 @@ import log from './shared/log.js';
 import { buildConfig, Config, logSanitizedConfig } from './shared/configBuilder.js';
 import restartWorkers from './master/restartWorkers.js';
 import * as errorReporter from './shared/errorReporter.js';
-import { getLicenseStatus } from './shared/licenseValidator.js';
+import { getLicenseStatus, warmLicenseValidationState } from './shared/licenseValidator.js';
 
 const MILLISECONDS_IN_MINUTE = 60000;
 // How often to scan for orphaned upload directories.
@@ -19,7 +19,9 @@ const ORPHAN_CLEANUP_INTERVAL_MS = 5 * MILLISECONDS_IN_MINUTE;
 // uploads in progress are never deleted by the cleanup timer.
 const ORPHAN_AGE_THRESHOLD_MS = 30 * MILLISECONDS_IN_MINUTE;
 
-export default function masterRun(runningConfig?: Partial<Config>) {
+export default async function masterRun(runningConfig?: Partial<Config>) {
+  await warmLicenseValidationState();
+
   // Check license status on startup and log appropriately
   // Use warn in production, info in non-production (matches Ruby behavior)
   // Check both NODE_ENV and RAILS_ENV for production detection to stay consistent

packages/react-on-rails-pro-node-renderer/src/shared/licenseCache.ts

@@ -0,0 +1,171 @@
+/**
+ * Caches fetched license tokens to disk.
+ * Persists across app restarts to reduce API calls.
+ * Validates that cached token belongs to the currently configured license_key.
+ *
+ * @module shared/licenseCache
+ */
+
+import * as fs from 'fs';
+import * as path from 'path';
+import * as crypto from 'crypto';
+
+const CACHE_FILENAME = 'react_on_rails_pro_license.cache';
+
+export interface CacheData {
+  token: string;
+  expires_at: string;
+  fetched_at: string;
+  license_key_hash: string;
+}
+
+/**
+ * Gets the current license key from environment.
+ */
+function getLicenseKey(): string | undefined {
+  return process.env.REACT_ON_RAILS_PRO_LICENSE_KEY;
+}
+
+/**
+ * Computes a hash of the license key for validation.
+ * Only stores first 16 chars of SHA256 hash.
+ */
+function computeKeyHash(key: string): string {
+  return crypto.createHash('sha256').update(key).digest('hex').substring(0, 16);
+}
+
+/**
+ * Gets the current key hash, or null if no key is set.
+ */
+function getCurrentKeyHash(): string | null {
+  const key = getLicenseKey();
+  if (!key) {
+    return null;
+  }
+  return computeKeyHash(key);
+}
+
+/**
+ * Gets the cache directory path.
+ * Uses tmp/ relative to current working directory.
+ */
+function getCacheDir(): string {
+  return path.join(process.cwd(), 'tmp');
+}
+
+/**
+ * Gets the full cache file path.
+ */
+function getCachePath(): string {
+  return path.join(getCacheDir(), CACHE_FILENAME);
+}
+
+/**
+ * Validates that the cached data belongs to the current license key.
+ */
+function isValidForCurrentKey(data: CacheData): boolean {
+  const storedHash = data.license_key_hash;
+  if (!storedHash) {
+    return false;
+  }
+
+  const currentHash = getCurrentKeyHash();
+  return storedHash === currentHash;
+}
+
+/**
+ * Reads the cached license data from disk.
+ * Returns null if cache doesn't exist, is invalid, or belongs to a different license key.
+ */
+export function readCache(): CacheData | null {
+  try {
+    const cachePath = getCachePath();
+
+    if (!fs.existsSync(cachePath)) {
+      return null;
+    }
+
+    const content = fs.readFileSync(cachePath, 'utf8');
+    const data = JSON.parse(content) as CacheData;
+
+    if (!isValidForCurrentKey(data)) {
+      return null;
+    }
+
+    return data;
+  } catch {
+    return null;
+  }
+}
+
+/**
+ * Writes license data to the cache file.
+ * Automatically adds license_key_hash and fetched_at.
+ */
+export function writeCache(data: { token: string; expires_at: string }): void {
+  try {
+    const cacheDir = getCacheDir();
+    const cachePath = getCachePath();
+
+    // Ensure cache directory exists
+    if (!fs.existsSync(cacheDir)) {
+      fs.mkdirSync(cacheDir, { recursive: true });
+    }
+
+    const currentKeyHash = getCurrentKeyHash();
+    if (!currentKeyHash) {
+      console.warn('[React on Rails Pro] Cannot write cache: no license key configured');
+      return;
+    }
+
+    const cacheData: CacheData = {
+      token: data.token,
+      expires_at: data.expires_at,
+      fetched_at: new Date().toISOString(),
+      license_key_hash: currentKeyHash,
+    };
+
+    const tempPath = `${cachePath}.${crypto.randomBytes(8).toString('hex')}.tmp`;
+    fs.writeFileSync(tempPath, JSON.stringify(cacheData, null, 2), { mode: 0o600 });
+    fs.renameSync(tempPath, cachePath);
+  } catch (error) {
+    const errorMessage = error instanceof Error ? error.message : 'Unknown error';
+    console.warn(`[React on Rails Pro] Failed to write license cache: ${errorMessage}`);
+  }
+}
+
+/**
+ * Gets the cached token, or null if not available.
+ */
+export function getCachedToken(): string | null {
+  const data = readCache();
+  return data?.token ?? null;
+}
+
+/**
+ * Gets the fetched_at timestamp from cache.
+ * Returns null if cache doesn't exist or is invalid.
+ */
+export function getFetchedAt(): Date | null {
+  const data = readCache();
+  if (!data?.fetched_at) {
+    return null;
+  }
+
+  const parsedDate = new Date(data.fetched_at);
+  return Number.isNaN(parsedDate.getTime()) ? null : parsedDate;
+}
+
+/**
+ * Gets the expires_at timestamp from cache.
+ * Returns null if cache doesn't exist or is invalid.
+ */
+export function getExpiresAt(): Date | null {
+  const data = readCache();
+  if (!data?.expires_at) {
+    return null;
+  }
+
+  const parsedDate = new Date(data.expires_at);
+  return Number.isNaN(parsedDate.getTime()) ? null : parsedDate;
+}