@discloai/core 0.1.0

package/src/config.ts

@@ -0,0 +1,191 @@
+import type { ChatbotDisclosureConfig } from "./components/ChatbotDisclosure.js";
+import type { AIContentLabelConfig } from "./components/AIContentLabel.js";
+import type { DeepfakeLabelConfig } from "./components/DeepfakeLabel.js";
+import type { BiometricNoticeConfig } from "./components/BiometricNotice.js";
+
+// ---------------------------------------------------------------------------
+// Public types
+// ---------------------------------------------------------------------------
+
+export interface DiscloAIInitOptions {
+  /** Public site identifier. Not a secret — safe to log and include in requests. */
+  siteId: string;
+  /** CSP nonce to apply to all injected <style> elements. */
+  cspNonce?: string;
+  /** BCP-47 locale override. Falls back to navigator.language then 'en'. */
+  locale?: string;
+  /** Override config fetch URL for local dev. Only https:// or http://localhost accepted. */
+  configEndpoint?: string;
+  chatbotDisclosure?: ChatbotDisclosureConfig;
+  aiContentLabel?: AIContentLabelConfig;
+  deepfakeLabel?: DeepfakeLabelConfig;
+  biometricNotice?: BiometricNoticeConfig;
+}
+
+export interface DiscloAIConfig {
+  siteId: string;
+  locale: string;
+  chatbotDisclosure?: ChatbotDisclosureConfig;
+  aiContentLabel?: AIContentLabelConfig;
+  deepfakeLabel?: DeepfakeLabelConfig;
+  biometricNotice?: BiometricNoticeConfig;
+}
+
+// ---------------------------------------------------------------------------
+// Defaults
+// ---------------------------------------------------------------------------
+
+const DEFAULTS: Omit<DiscloAIConfig, "siteId"> = {
+  locale: "en",
+};
+
+// ---------------------------------------------------------------------------
+// CSS sanitizer
+// ---------------------------------------------------------------------------
+
+/** Forbidden patterns that could be used for XSS or data exfiltration via custom CSS. */
+const FORBIDDEN_CSS_PATTERNS: RegExp[] = [
+  /url\s*\(/i,
+  /@import/i,
+  /expression\s*\(/i,
+  /javascript:/i,
+];
+
+/**
+ * Sanitize a custom CSS string.
+ * Returns an empty string and emits a warning if any forbidden pattern is found.
+ * Forbidden: url(...), @import, expression(...), javascript:
+ *
+ * M-1 fix: CSS hex escape sequences (e.g. \75rl() === url()) are normalized
+ * before pattern matching to prevent bypass via Unicode escapes.
+ */
+export function sanitizeCSS(css: string): string {
+  // Strip CSS escape sequences (\XX or \XXXXXX) before pattern matching
+  // A CSS escape is a backslash followed by 1–6 hex digits and an optional whitespace
+  const normalized = css.replace(/\\[0-9a-fA-F]{1,6}\s?/g, "ESCAPED");
+  for (const pattern of FORBIDDEN_CSS_PATTERNS) {
+    if (pattern.test(normalized)) {
+      console.warn("[DiscloAI] Custom CSS blocked: forbidden pattern detected");
+      return "";
+    }
+  }
+  return css;
+}
+
+// ---------------------------------------------------------------------------
+// Remote config fetch
+// ---------------------------------------------------------------------------
+
+/**
+ * Fetch remote config from the DiscloAI API.
+ *
+ * SECURITY NOTES:
+ * - Public endpoint — no auth headers are sent.
+ * - siteId is a public tenant identifier, not a secret.
+ * - Remote response NEVER contains write tokens, session tokens, or server-side secrets.
+ * - Only known component-config shape keys are extracted (see extractSafeConfigShape).
+ *
+ * Server is expected to respond with: Cache-Control: max-age=60
+ *
+ * @param siteId - Public site identifier
+ * @returns Partial remote config, or null on timeout / network error
+ */
+async function fetchRemoteConfig(
+  siteId: string,
+  configEndpoint?: string,
+): Promise<Partial<DiscloAIConfig> | null> {
+  const controller = new AbortController();
+  const timeoutId = setTimeout(() => controller.abort(), 2000);
+
+  // Allow http://localhost and http://127.0.0.1 for local dev; reject everything else non-HTTPS
+  const defaultUrl = `https://api.discloai.com/v1/config/${encodeURIComponent(siteId)}`;
+  const rawUrl = configEndpoint ?? defaultUrl;
+  const isLocalDev =
+    rawUrl.startsWith("http://localhost") ||
+    rawUrl.startsWith("http://127.0.0.1");
+  const url = rawUrl.startsWith("https://") || isLocalDev ? rawUrl : defaultUrl;
+
+  try {
+    const response = await fetch(url, { signal: controller.signal });
+
+    if (!response.ok) return null;
+
+    const raw = (await response.json()) as unknown;
+    return extractSafeConfigShape(raw);
+  } catch {
+    // 2-second timeout or network error — fall back silently to local/defaults
+    return null;
+  } finally {
+    clearTimeout(timeoutId);
+  }
+}
+
+/**
+ * Extract only known, safe config keys from the remote response.
+ * Never forwards unknown keys or any token/secret field.
+ */
+function extractSafeConfigShape(raw: unknown): Partial<DiscloAIConfig> | null {
+  if (typeof raw !== "object" || raw === null) return null;
+
+  const obj = raw as Record<string, unknown>;
+  const safe: Partial<DiscloAIConfig> = {};
+
+  if (typeof obj["locale"] === "string") {
+    safe.locale = obj["locale"];
+  }
+  if (
+    typeof obj["chatbotDisclosure"] === "object" &&
+    obj["chatbotDisclosure"] !== null
+  ) {
+    safe.chatbotDisclosure = obj[
+      "chatbotDisclosure"
+    ] as ChatbotDisclosureConfig;
+  }
+  if (
+    typeof obj["aiContentLabel"] === "object" &&
+    obj["aiContentLabel"] !== null
+  ) {
+    safe.aiContentLabel = obj["aiContentLabel"] as AIContentLabelConfig;
+  }
+  if (
+    typeof obj["deepfakeLabel"] === "object" &&
+    obj["deepfakeLabel"] !== null
+  ) {
+    safe.deepfakeLabel = obj["deepfakeLabel"] as DeepfakeLabelConfig;
+  }
+  if (
+    typeof obj["biometricNotice"] === "object" &&
+    obj["biometricNotice"] !== null
+  ) {
+    safe.biometricNotice = obj["biometricNotice"] as BiometricNoticeConfig;
+  }
+
+  return safe;
+}
+
+// ---------------------------------------------------------------------------
+// Config resolution pipeline
+// ---------------------------------------------------------------------------
+
+/**
+ * Resolve the final runtime config by merging: Remote → Local → Defaults
+ *
+ * Resolution order (strict — never change):
+ * 1. Remote  — GET https://api.discloai.com/v1/config/{siteId} (2s timeout, silent fallback)
+ * 2. Local   — DiscloAI.init({...}) options (overrides remote; intended for dev/testing)
+ * 3. Defaults — hardcoded fallbacks in this file
+ */
+export async function resolveConfig(
+  local: DiscloAIInitOptions,
+): Promise<DiscloAIConfig> {
+  const remote = await fetchRemoteConfig(local.siteId, local.configEndpoint);
+
+  return {
+    siteId: local.siteId,
+    locale: local.locale ?? remote?.locale ?? DEFAULTS.locale,
+    chatbotDisclosure: local.chatbotDisclosure ?? remote?.chatbotDisclosure,
+    aiContentLabel: local.aiContentLabel ?? remote?.aiContentLabel,
+    deepfakeLabel: local.deepfakeLabel ?? remote?.deepfakeLabel,
+    biometricNotice: local.biometricNotice ?? remote?.biometricNotice,
+  };
+}

package/src/i18n/bg.json

@@ -0,0 +1,9 @@
+{
+  "chatbot.disclosure.default": "Разговаряте с AI асистент.",
+  "chatbot.disclosure.prominent": "Този чат е захранван от изкуствен интелект.",
+  "content.label.default": "Съдържание, генерирано от AI",
+  "content.label.artistic": "Творческа работа с помощта на AI",
+  "deepfake.label.default": "AI-генерирано изображение",
+  "deepfake.label.artistic": "AI-генерирано художествено съдържание",
+  "biometric.notice.default": "Тази система обработва биометрични данни. Прилага се Член 50 §3 от Закона за AI на ЕС."
+}

package/src/i18n/cs.json

@@ -0,0 +1,9 @@
+{
+  "chatbot.disclosure.default": "Mluvíte s AI asistentem.",
+  "chatbot.disclosure.prominent": "Tento chat je poháněn umělou inteligencí.",
+  "content.label.default": "Obsah generovaný AI",
+  "content.label.artistic": "Kreativní práce s pomocí AI",
+  "deepfake.label.default": "Obrázek generovaný AI",
+  "deepfake.label.artistic": "Umělecký obsah generovaný AI",
+  "biometric.notice.default": "Tento systém zpracovává biometrické údaje. Platí čl. 50 §3 zákona EU o AI."
+}

package/src/i18n/da.json

@@ -0,0 +1,9 @@
+{
+  "chatbot.disclosure.default": "Du taler med en AI-assistent.",
+  "chatbot.disclosure.prominent": "Denne chat drives af kunstig intelligens.",
+  "content.label.default": "AI-genereret indhold",
+  "content.label.artistic": "AI-assisteret kreativt arbejde",
+  "deepfake.label.default": "AI-genereret billede",
+  "deepfake.label.artistic": "AI-genereret kunstnerisk indhold",
+  "biometric.notice.default": "Dette system behandler biometriske data. EU AI Act artikel 50 §3 finder anvendelse."
+}

package/src/i18n/de.json

@@ -0,0 +1,9 @@
+{
+  "chatbot.disclosure.default": "Sie sprechen mit einem KI-Assistenten.",
+  "chatbot.disclosure.prominent": "Dieser Chat wird durch künstliche Intelligenz betrieben.",
+  "content.label.default": "KI-generierter Inhalt",
+  "content.label.artistic": "KI-unterstütztes kreatives Werk",
+  "deepfake.label.default": "KI-generiertes Bild",
+  "deepfake.label.artistic": "KI-generierter künstlerischer Inhalt",
+  "biometric.notice.default": "Dieses System verarbeitet biometrische Daten. EU-KI-Gesetz Artikel 50 §3 gilt."
+}

package/src/i18n/el.json

@@ -0,0 +1,9 @@
+{
+  "chatbot.disclosure.default": "Μιλάτε με έναν βοηθό AI.",
+  "chatbot.disclosure.prominent": "Αυτή η συνομιλία τροφοδοτείται από τεχνητή νοημοσύνη.",
+  "content.label.default": "Περιεχόμενο που δημιουργήθηκε από AI",
+  "content.label.artistic": "Δημιουργική εργασία με βοήθεια AI",
+  "deepfake.label.default": "Εικόνα που δημιουργήθηκε από AI",
+  "deepfake.label.artistic": "Καλλιτεχνικό περιεχόμενο που δημιουργήθηκε από AI",
+  "biometric.notice.default": "Αυτό το σύστημα επεξεργάζεται βιομετρικά δεδομένα. Ισχύει Άρθρο 50 §3 Νόμου ΕΕ για AI."
+}

package/src/i18n/en.json

@@ -0,0 +1,9 @@
+{
+  "chatbot.disclosure.default": "You are talking to an AI assistant.",
+  "chatbot.disclosure.prominent": "This chat is powered by artificial intelligence.",
+  "content.label.default": "AI-generated content",
+  "content.label.artistic": "AI-assisted creative work",
+  "deepfake.label.default": "AI-generated image",
+  "deepfake.label.artistic": "AI-generated artistic content",
+  "biometric.notice.default": "This system processes biometric data. EU AI Act Article 50 §3 applies."
+}

package/src/i18n/es.json

@@ -0,0 +1,9 @@
+{
+  "chatbot.disclosure.default": "Estás hablando con un asistente de IA.",
+  "chatbot.disclosure.prominent": "Este chat está impulsado por inteligencia artificial.",
+  "content.label.default": "Contenido generado por IA",
+  "content.label.artistic": "Obra creativa asistida por IA",
+  "deepfake.label.default": "Imagen generada por IA",
+  "deepfake.label.artistic": "Contenido artístico generado por IA",
+  "biometric.notice.default": "Este sistema procesa datos biométricos. Se aplica el artículo 50 §3 de la Ley de IA de la UE."
+}

package/src/i18n/et.json

@@ -0,0 +1,9 @@
+{
+  "chatbot.disclosure.default": "Räägite AI-assistendiga.",
+  "chatbot.disclosure.prominent": "Seda vestlust käitab tehisintellekt.",
+  "content.label.default": "AI loodud sisu",
+  "content.label.artistic": "AI-abistatud loominguline töö",
+  "deepfake.label.default": "AI loodud pilt",
+  "deepfake.label.artistic": "AI loodud kunstiline sisu",
+  "biometric.notice.default": "See süsteem töötleb biomeetrilisi andmeid. Kohaldub EL AI seaduse artikkel 50 §3."
+}

package/src/i18n/fi.json

@@ -0,0 +1,9 @@
+{
+  "chatbot.disclosure.default": "Puhut AI-assistentin kanssa.",
+  "chatbot.disclosure.prominent": "Tämä chat toimii tekoälyn avulla.",
+  "content.label.default": "Tekoälyn tuottama sisältö",
+  "content.label.artistic": "Tekoälyavusteinen luova työ",
+  "deepfake.label.default": "Tekoälyn luoma kuva",
+  "deepfake.label.artistic": "Tekoälyn luoma taiteellinen sisältö",
+  "biometric.notice.default": "Tämä järjestelmä käsittelee biometrisiä tietoja. EU:n tekoälylain 50 artiklan 3 kohta soveltuu."
+}

package/src/i18n/fr.json

@@ -0,0 +1,9 @@
+{
+  "chatbot.disclosure.default": "Vous discutez avec un assistant IA.",
+  "chatbot.disclosure.prominent": "Cette conversation est alimentée par l'intelligence artificielle.",
+  "content.label.default": "Contenu généré par IA",
+  "content.label.artistic": "Œuvre créative assistée par IA",
+  "deepfake.label.default": "Image générée par IA",
+  "deepfake.label.artistic": "Contenu artistique généré par IA",
+  "biometric.notice.default": "Ce système traite des données biométriques. L'article 50 §3 de la loi européenne sur l'IA s'applique."
+}

package/src/i18n/ga.json

@@ -0,0 +1,9 @@
+{
+  "chatbot.disclosure.default": "Tá tú ag caint le cúntóir AI.",
+  "chatbot.disclosure.prominent": "Tá an comhrá seo faoi chumhacht na hintleachta saorga.",
+  "content.label.default": "Ábhar arna ghiniúint ag AI",
+  "content.label.artistic": "Obair chruthaitheach le cúnamh AI",
+  "deepfake.label.default": "Íomhá arna ghiniúint ag AI",
+  "deepfake.label.artistic": "Ábhar ealaíne arna ghiniúint ag AI",
+  "biometric.notice.default": "Próiseálann an córas seo sonraí bithfhéiniúlachta. Tá Airteagal 50 §3 de Dhlí AI an AE infheidhme."
+}

package/src/i18n/hr.json

@@ -0,0 +1,9 @@
+{
+  "chatbot.disclosure.default": "Razgovarate s AI asistentom.",
+  "chatbot.disclosure.prominent": "Ovaj chat pokreće umjetna inteligencija.",
+  "content.label.default": "Sadržaj generiran AI-jem",
+  "content.label.artistic": "Kreativni rad uz pomoć AI-ja",
+  "deepfake.label.default": "AI-generirana slika",
+  "deepfake.label.artistic": "AI-generirani umjetnički sadržaj",
+  "biometric.notice.default": "Ovaj sustav obrađuje biometrijske podatke. Primjenjuje se Članak 50 §3 Zakona EU o AI."
+}

package/src/i18n/hu.json

@@ -0,0 +1,9 @@
+{
+  "chatbot.disclosure.default": "AI-asszisztenssel beszél.",
+  "chatbot.disclosure.prominent": "Ez a csevegés mesterséges intelligencia által működik.",
+  "content.label.default": "AI által generált tartalom",
+  "content.label.artistic": "AI-val támogatott kreatív munka",
+  "deepfake.label.default": "AI által generált kép",
+  "deepfake.label.artistic": "AI által generált művészeti tartalom",
+  "biometric.notice.default": "Ez a rendszer biometrikus adatokat dolgoz fel. Az EU MI-törvény 50. cikk 3. §-a alkalmazandó."
+}

package/src/i18n/index.ts

@@ -0,0 +1,145 @@
+import en from "./en.json";
+import fr from "./fr.json";
+import de from "./de.json";
+import es from "./es.json";
+import bg from "./bg.json";
+import hr from "./hr.json";
+import cs from "./cs.json";
+import da from "./da.json";
+import el from "./el.json";
+import et from "./et.json";
+import fi from "./fi.json";
+import ga from "./ga.json";
+import hu from "./hu.json";
+import it from "./it.json";
+import lv from "./lv.json";
+import lt from "./lt.json";
+import mt from "./mt.json";
+import nl from "./nl.json";
+import pl from "./pl.json";
+import pt from "./pt.json";
+import ro from "./ro.json";
+import sk from "./sk.json";
+import sl from "./sl.json";
+import sv from "./sv.json";
+
+export type Locale =
+  | "bg"
+  | "hr"
+  | "cs"
+  | "da"
+  | "de"
+  | "el"
+  | "en"
+  | "es"
+  | "et"
+  | "fi"
+  | "fr"
+  | "ga"
+  | "hu"
+  | "it"
+  | "lv"
+  | "lt"
+  | "mt"
+  | "nl"
+  | "pl"
+  | "pt"
+  | "ro"
+  | "sk"
+  | "sl"
+  | "sv";
+
+export const SUPPORTED_LOCALES: Locale[] = [
+  "bg",
+  "hr",
+  "cs",
+  "da",
+  "de",
+  "el",
+  "en",
+  "es",
+  "et",
+  "fi",
+  "fr",
+  "ga",
+  "hu",
+  "it",
+  "lv",
+  "lt",
+  "mt",
+  "nl",
+  "pl",
+  "pt",
+  "ro",
+  "sk",
+  "sl",
+  "sv",
+];
+
+type Messages = Record<string, string>;
+
+export const messages: Record<Locale, Messages> = {
+  bg: bg as Messages,
+  hr: hr as Messages,
+  cs: cs as Messages,
+  da: da as Messages,
+  de: de as Messages,
+  el: el as Messages,
+  en: en as Messages,
+  es: es as Messages,
+  et: et as Messages,
+  fi: fi as Messages,
+  fr: fr as Messages,
+  ga: ga as Messages,
+  hu: hu as Messages,
+  it: it as Messages,
+  lv: lv as Messages,
+  lt: lt as Messages,
+  mt: mt as Messages,
+  nl: nl as Messages,
+  pl: pl as Messages,
+  pt: pt as Messages,
+  ro: ro as Messages,
+  sk: sk as Messages,
+  sl: sl as Messages,
+  sv: sv as Messages,
+};
+
+/**
+ * Resolve the best matching locale from navigator.language.
+ * Falls back to 'en' when running server-side or if no match is found.
+ */
+export function resolveLocale(): Locale {
+  if (typeof navigator === "undefined") return "en";
+
+  const lang = navigator.language;
+
+  // Exact match (e.g. 'fr' or 'en')
+  if (SUPPORTED_LOCALES.includes(lang as Locale)) return lang as Locale;
+
+  // Prefix match (e.g. 'fr-FR' → 'fr', 'fr-CA' → 'fr')
+  const prefix = lang.split("-")[0];
+  if (prefix !== undefined && SUPPORTED_LOCALES.includes(prefix as Locale)) {
+    return prefix as Locale;
+  }
+
+  return "en";
+}
+
+/**
+ * Look up a translation key for the given (or auto-resolved) locale.
+ * Never throws, never returns undefined — falls back to en.json, then to the key itself.
+ */
+export function t(key: string, locale?: Locale): string {
+  const resolved = locale ?? resolveLocale();
+  const dict = messages[resolved];
+  const value = dict[key];
+  if (value !== undefined) return value;
+
+  // Fall back to English
+  const fallback = messages["en"][key];
+  if (fallback !== undefined) return fallback;
+
+  // Last resort: return the key itself
+  return key;
+}

package/src/i18n/it.json

@@ -0,0 +1,9 @@
+{
+  "chatbot.disclosure.default": "Stai parlando con un assistente AI.",
+  "chatbot.disclosure.prominent": "Questa chat è alimentata dall'intelligenza artificiale.",
+  "content.label.default": "Contenuto generato dall'AI",
+  "content.label.artistic": "Lavoro creativo assistito dall'AI",
+  "deepfake.label.default": "Immagine generata dall'AI",
+  "deepfake.label.artistic": "Contenuto artistico generato dall'AI",
+  "biometric.notice.default": "Questo sistema elabora dati biometrici. Si applica l'Articolo 50 §3 della Legge AI dell'UE."
+}

package/src/i18n/lt.json

@@ -0,0 +1,9 @@
+{
+  "chatbot.disclosure.default": "Jūs kalbatės su AI asistentu.",
+  "chatbot.disclosure.prominent": "Šis pokalbis vyksta dirbtinio intelekto pagalba.",
+  "content.label.default": "AI sugeneruotas turinys",
+  "content.label.artistic": "AI padedamas kūrybinis darbas",
+  "deepfake.label.default": "AI sugeneruotas vaizdas",
+  "deepfake.label.artistic": "AI sugeneruotas meninis turinys",
+  "biometric.notice.default": "Ši sistema apdoroja biometrinius duomenis. Taikomas ES DI įstatymo 50 straipsnio 3 dalis."
+}

package/src/i18n/lv.json

@@ -0,0 +1,9 @@
+{
+  "chatbot.disclosure.default": "Jūs runājat ar AI asistentu.",
+  "chatbot.disclosure.prominent": "Šo tērzēšanu darbina mākslīgais intelekts.",
+  "content.label.default": "AI ģenerēts saturs",
+  "content.label.artistic": "AI asistēts radošs darbs",
+  "deepfake.label.default": "AI ģenerēts attēls",
+  "deepfake.label.artistic": "AI ģenerēts māksliniecisks saturs",
+  "biometric.notice.default": "Šī sistēma apstrādā biometriskos datus. Piemērojams ES MI likuma 50. pants §3."
+}

package/src/i18n/mt.json

@@ -0,0 +1,9 @@
+{
+  "chatbot.disclosure.default": "Qed titkellem ma' assistent AI.",
+  "chatbot.disclosure.prominent": "Dan il-chat huwa mħaddem mill-intelliġenza artifiċjali.",
+  "content.label.default": "Kontenut iġġenerat minn AI",
+  "content.label.artistic": "Xogħol kreattiv assistit minn AI",
+  "deepfake.label.default": "Immaġni iġġenerata minn AI",
+  "deepfake.label.artistic": "Kontenut artistiku iġġenerat minn AI",
+  "biometric.notice.default": "Dan is-sistema tipproċessa data bijometrika. Japplika l-Artikolu 50 §3 tal-Liġi AI tal-UE."
+}

package/src/i18n/nl.json

@@ -0,0 +1,9 @@
+{
+  "chatbot.disclosure.default": "U praat met een AI-assistent.",
+  "chatbot.disclosure.prominent": "Deze chat wordt aangedreven door kunstmatige intelligentie.",
+  "content.label.default": "AI-gegenereerde inhoud",
+  "content.label.artistic": "AI-ondersteund creatief werk",
+  "deepfake.label.default": "AI-gegenereerde afbeelding",
+  "deepfake.label.artistic": "AI-gegenereerde artistieke inhoud",
+  "biometric.notice.default": "Dit systeem verwerkt biometrische gegevens. EU AI-wet artikel 50 §3 is van toepassing."
+}

package/src/i18n/pl.json

@@ -0,0 +1,9 @@
+{
+  "chatbot.disclosure.default": "Rozmawiasz z asystentem AI.",
+  "chatbot.disclosure.prominent": "Ten czat jest obsługiwany przez sztuczną inteligencję.",
+  "content.label.default": "Treść wygenerowana przez AI",
+  "content.label.artistic": "Praca twórcza wspierana przez AI",
+  "deepfake.label.default": "Obraz wygenerowany przez AI",
+  "deepfake.label.artistic": "Artystyczne treści wygenerowane przez AI",
+  "biometric.notice.default": "Ten system przetwarza dane biometryczne. Stosuje się art. 50 §3 Ustawy UE o AI."
+}

package/src/i18n/pt.json

@@ -0,0 +1,9 @@
+{
+  "chatbot.disclosure.default": "Você está falando com um assistente de IA.",
+  "chatbot.disclosure.prominent": "Este chat é alimentado por inteligência artificial.",
+  "content.label.default": "Conteúdo gerado por IA",
+  "content.label.artistic": "Trabalho criativo assistido por IA",
+  "deepfake.label.default": "Imagem gerada por IA",
+  "deepfake.label.artistic": "Conteúdo artístico gerado por IA",
+  "biometric.notice.default": "Este sistema processa dados biométricos. Aplica-se o Artigo 50 §3 da Lei de IA da UE."
+}

package/src/i18n/ro.json

@@ -0,0 +1,9 @@
+{
+  "chatbot.disclosure.default": "Vorbiți cu un asistent AI.",
+  "chatbot.disclosure.prominent": "Acest chat este alimentat de inteligența artificială.",
+  "content.label.default": "Conținut generat de AI",
+  "content.label.artistic": "Lucrare creativă asistată de AI",
+  "deepfake.label.default": "Imagine generată de AI",
+  "deepfake.label.artistic": "Conținut artistic generat de AI",
+  "biometric.notice.default": "Acest sistem procesează date biometrice. Se aplică Articolul 50 §3 din Legea AI a UE."
+}

package/src/i18n/sk.json

@@ -0,0 +1,9 @@
+{
+  "chatbot.disclosure.default": "Hovoríte s AI asistentom.",
+  "chatbot.disclosure.prominent": "Tento chat je poháňaný umelou inteligenciou.",
+  "content.label.default": "Obsah generovaný AI",
+  "content.label.artistic": "Kreatívna práca s pomocou AI",
+  "deepfake.label.default": "Obrázok generovaný AI",
+  "deepfake.label.artistic": "Umelecký obsah generovaný AI",
+  "biometric.notice.default": "Tento systém spracúva biometrické údaje. Platí čl. 50 §3 zákona EÚ o AI."
+}

package/src/i18n/sl.json

@@ -0,0 +1,9 @@
+{
+  "chatbot.disclosure.default": "Pogovarjate se z AI pomočnikom.",
+  "chatbot.disclosure.prominent": "Ta klepet poganja umetna inteligenca.",
+  "content.label.default": "Vsebina, ustvarjena z AI",
+  "content.label.artistic": "Ustvarjalno delo s pomočjo AI",
+  "deepfake.label.default": "Slika, ustvarjena z AI",
+  "deepfake.label.artistic": "Umetniška vsebina, ustvarjena z AI",
+  "biometric.notice.default": "Ta sistem obdeluje biometrične podatke. Velja Člen 50 §3 Zakona EU o AI."
+}

package/src/i18n/sv.json

@@ -0,0 +1,9 @@
+{
+  "chatbot.disclosure.default": "Du pratar med en AI-assistent.",
+  "chatbot.disclosure.prominent": "Denna chatt drivs av artificiell intelligens.",
+  "content.label.default": "AI-genererat innehåll",
+  "content.label.artistic": "AI-assisterat kreativt arbete",
+  "deepfake.label.default": "AI-genererad bild",
+  "deepfake.label.artistic": "AI-genererat konstnärligt innehåll",
+  "biometric.notice.default": "Detta system behandlar biometriska uppgifter. EU AI-lagens artikel 50 §3 är tillämplig."
+}

package/src/index.ts

@@ -0,0 +1,19 @@
+// Public API surface for @discloai/core
+// For CDN / IIFE usage: window.DiscloAI.init({ siteId: '...' })
+// For bundler usage:    import { init } from '@discloai/core'
+
+export { init } from "./init.js";
+
+export type { DiscloAIInitOptions, DiscloAIConfig } from "./config.js";
+export { sanitizeCSS } from "./config.js";
+
+export type { ChatbotDisclosureConfig } from "./components/ChatbotDisclosure.js";
+export type { AIContentLabelConfig } from "./components/AIContentLabel.js";
+export type { DeepfakeLabelConfig } from "./components/DeepfakeLabel.js";
+export type { BiometricNoticeConfig } from "./components/BiometricNotice.js";
+
+export { VENDOR_PRESETS, resolveVendorSelector } from "./vendors.js";
+export type { VendorPreset } from "./vendors.js";
+
+export type { AuditEventParams } from "./audit.js";
+export { sendAuditEvent } from "./audit.js";