@disclos/sdk-web 0.1.0

package/dist/chunk-YJEYWPLR.mjs

@@ -0,0 +1,182 @@
+import { init_state, state_exports, getState, setState } from './chunk-BHR3367P.mjs';
+import { __toCommonJS } from './chunk-NFEGQTCC.mjs';
+
+// src/core/config.ts
+var DEFAULT_CDN = "https://cdn.disclos.dev/v1/config";
+var CACHE_KEY_PREFIX = "disclos_cfg_";
+var FETCH_TIMEOUT_MS = 3e3;
+var DEFAULT_CONFIG = {
+  version: 1,
+  locale: "en",
+  ingestionEndpoint: "https://ingest.disclos.dev",
+  samplingRate: 1,
+  disclosures: {
+    chatbot: "You are interacting with an AI system.",
+    contentLabel: {
+      text: "AI-generated text",
+      image: "AI-generated image",
+      audio: "AI-generated audio",
+      video: "AI-generated video"
+    },
+    deepfake: "This content has been artificially generated or manipulated using AI."
+  },
+  features: { contentLabeling: true, trustPage: false },
+  ttl: 36e5
+  // 1 hour
+};
+function cacheKey(apiKey) {
+  return CACHE_KEY_PREFIX + apiKey.slice(-8);
+}
+function saveToCacheStorage(apiKey, config) {
+  try {
+    localStorage.setItem(
+      cacheKey(apiKey),
+      JSON.stringify({ ...config, cachedAt: Date.now() })
+    );
+  } catch {
+  }
+}
+function loadFromCacheStorage(apiKey) {
+  try {
+    const raw = localStorage.getItem(cacheKey(apiKey));
+    if (!raw) return null;
+    return JSON.parse(raw);
+  } catch {
+    return null;
+  }
+}
+function isFresh(config) {
+  if (!config.cachedAt) return false;
+  return Date.now() - config.cachedAt < config.ttl;
+}
+async function fetchConfig(apiKey, locale, endpointOverride) {
+  const cached = loadFromCacheStorage(apiKey);
+  if (cached && isFresh(cached)) return cached;
+  const endpoint = endpointOverride ?? DEFAULT_CDN;
+  try {
+    const url = new URL(endpoint);
+    url.searchParams.set("key", apiKey);
+    url.searchParams.set("locale", locale);
+    const res = await fetch(url.toString(), {
+      headers: { Accept: "application/json" },
+      signal: AbortSignal.timeout(FETCH_TIMEOUT_MS)
+    });
+    if (res.ok) {
+      const data = await res.json();
+      data.cachedAt = Date.now();
+      saveToCacheStorage(apiKey, data);
+      return data;
+    }
+  } catch {
+  }
+  if (cached) return cached;
+  return { ...DEFAULT_CONFIG, locale };
+}
+function getConfig() {
+  try {
+    const { getState: getState2 } = (init_state(), __toCommonJS(state_exports));
+    return getState2().config;
+  } catch {
+    return null;
+  }
+}
+
+// src/components/base.ts
+init_state();
+
+// src/core/init.ts
+init_state();
+var CONFIG_LOADED_EVENT = "disclos:config-loaded";
+async function init(options) {
+  const state = getState();
+  if (state.initialized) {
+    if (state.debug) console.warn("[Disclos] Already initialized \u2014 ignoring duplicate init()");
+    return;
+  }
+  if (!options.apiKey) throw new Error("[Disclos] apiKey is required");
+  if (!options.aiSystemId) throw new Error("[Disclos] aiSystemId is required");
+  const [{ EventBatcher }, { drainQueue }, { registerElements }] = await Promise.all([
+    import('./batch-GICDMFCN.mjs'),
+    import('./queue-CHODSJ4I.mjs'),
+    import('./register-BBBSBMAF.mjs')
+  ]);
+  setState({
+    initialized: true,
+    apiKey: options.apiKey,
+    aiSystemId: options.aiSystemId,
+    locale: options.locale ?? "en",
+    debug: options.debug ?? false,
+    logContent: options.logContent ?? false,
+    options,
+    batcher: new EventBatcher(options)
+  });
+  registerElements();
+  void fetchConfig(options.apiKey, options.locale ?? "en", options.configEndpoint).then((config) => {
+    setState({ config });
+    if (typeof window !== "undefined") {
+      window.dispatchEvent(new CustomEvent(CONFIG_LOADED_EVENT, { detail: config }));
+    }
+    if (options.debug) console.debug("[Disclos] Config loaded:", config);
+  }).catch((err) => {
+    if (options.debug) console.error("[Disclos] Config fetch error:", err);
+  });
+  void drainQueue().catch((err) => {
+    if (options.debug) console.warn("[Disclos] Queue drain error:", err);
+  });
+}
+
+// src/components/base.ts
+var DisclosElement = class extends HTMLElement {
+  constructor() {
+    super(...arguments);
+    this._observer = null;
+    this._disclosed = false;
+    this._onConfigLoaded = () => this._update();
+  }
+  connectedCallback() {
+    if (!this.shadowRoot) this.attachShadow({ mode: "open" });
+    this._update();
+    this._trackVisibility();
+    window.addEventListener(CONFIG_LOADED_EVENT, this._onConfigLoaded);
+  }
+  disconnectedCallback() {
+    this._observer?.disconnect();
+    window.removeEventListener(CONFIG_LOADED_EVENT, this._onConfigLoaded);
+  }
+  attributeChangedCallback() {
+    if (this.shadowRoot) this._update();
+  }
+  /** Called once when the element becomes ≥50% visible in the viewport */
+  _onVisible() {
+  }
+  getConfig() {
+    return getState().config;
+  }
+  _update() {
+    if (!this.shadowRoot) return;
+    this.shadowRoot.innerHTML = this._html(this.getConfig());
+  }
+  _trackVisibility() {
+    if (typeof IntersectionObserver === "undefined") {
+      if (!this._disclosed) {
+        this._disclosed = true;
+        this._onVisible();
+      }
+      return;
+    }
+    this._observer = new IntersectionObserver(
+      ([entry]) => {
+        if (entry?.isIntersecting && !this._disclosed) {
+          this._disclosed = true;
+          this._onVisible();
+        }
+      },
+      { threshold: 0.5 }
+    );
+    this._observer.observe(this);
+  }
+};
+
+export { DisclosElement, getConfig, init };
+//# sourceMappingURL=chunk-YJEYWPLR.mjs.map
+//# sourceMappingURL=chunk-YJEYWPLR.mjs.map

package/dist/chunk-YJEYWPLR.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/core/config.ts","../src/components/base.ts","../src/core/init.ts"],"names":["getState"],"mappings":";;;;AAIA,IAAM,WAAA,GAAc,mCAAA;AACpB,IAAM,gBAAA,GAAmB,cAAA;AACzB,IAAM,gBAAA,GAAmB,GAAA;AAIlB,IAAM,cAAA,GAA+B;AAAA,EAC1C,OAAA,EAAS,CAAA;AAAA,EACT,MAAA,EAAQ,IAAA;AAAA,EACR,iBAAA,EAAmB,4BAAA;AAAA,EACnB,YAAA,EAAc,CAAA;AAAA,EACd,WAAA,EAAa;AAAA,IACX,OAAA,EAAS,wCAAA;AAAA,IACT,YAAA,EAAc;AAAA,MACZ,IAAA,EAAM,mBAAA;AAAA,MACN,KAAA,EAAO,oBAAA;AAAA,MACP,KAAA,EAAO,oBAAA;AAAA,MACP,KAAA,EAAO;AAAA,KACT;AAAA,IACA,QAAA,EAAU;AAAA,GACZ;AAAA,EACA,QAAA,EAAU,EAAE,eAAA,EAAiB,IAAA,EAAM,WAAW,KAAA,EAAM;AAAA,EACpD,GAAA,EAAK;AAAA;AACP,CAAA;AAIA,SAAS,SAAS,MAAA,EAAwB;AACxC,EAAA,OAAO,gBAAA,GAAmB,MAAA,CAAO,KAAA,CAAM,EAAE,CAAA;AAC3C;AAEA,SAAS,kBAAA,CAAmB,QAAgB,MAAA,EAA4B;AACtE,EAAA,IAAI;AACF,IAAA,YAAA,CAAa,OAAA;AAAA,MACX,SAAS,MAAM,CAAA;AAAA,MACf,IAAA,CAAK,UAAU,EAAE,GAAG,QAAQ,QAAA,EAAU,IAAA,CAAK,GAAA,EAAI,EAAG;AAAA,KACpD;AAAA,EACF,CAAA,CAAA,MAAQ;AAAA,EAER;AACF;AAEA,SAAS,qBAAqB,MAAA,EAAqC;AACjE,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,YAAA,CAAa,OAAA,CAAQ,QAAA,CAAS,MAAM,CAAC,CAAA;AACjD,IAAA,IAAI,CAAC,KAAK,OAAO,IAAA;AACjB,IAAA,OAAO,IAAA,CAAK,MAAM,GAAG,CAAA;AAAA,EACvB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAEA,SAAS,QAAQ,MAAA,EAA+B;AAC9C,EAAA,IAAI,CAAC,MAAA,CAAO,QAAA,EAAU,OAAO,KAAA;AAC7B,EAAA,OAAO,IAAA,CAAK,GAAA,EAAI,GAAI,MAAA,CAAO,WAAW,MAAA,CAAO,GAAA;AAC/C;AAQA,eAAsB,WAAA,CACpB,MAAA,EACA,MAAA,EACA,gBAAA,EACuB;AAEvB,EAAA,MAAM,MAAA,GAAS,qBAAqB,MAAM,CAAA;AAC1C,EAAA,IAAI,MAAA,IAAU,OAAA,CAAQ,MAAM,CAAA,EAAG,OAAO,MAAA;AAGtC,EAAA,MAAM,WAAW,gBAAA,IAAoB,WAAA;AACrC,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,QAAQ,CAAA;AAC5B,IAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,KAAA,EAAO,MAAM,CAAA;AAClC,IAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,QAAA,EAAU,MAAM,CAAA;AAErC,IAAA,MAAM,GAAA,GAAM,MAAM,KAAA,CAAM,GAAA,CAAI,UAAS,EAAG;AAAA,MACtC,OAAA,EAAS,EAAE,MAAA,EAAQ,kBAAA,EAAmB;AAAA,MACtC,MAAA,EAAQ,WAAA,CAAY,OAAA,CAAQ,gBAAgB;AAAA,KAC7C,CAAA;AAED,IAAA,IAAI,IAAI,EAAA,EAAI;AACV,MAAA,MAAM,IAAA,GAAQ,MAAM,GAAA,CAAI,IAAA,EAAK;AAC7B,MAAA,IAAA,CAAK,QAAA,GAAW,KAAK,GAAA,EAAI;AACzB,MAAA,kBAAA,CAAmB,QAAQ,IAAI,CAAA;AAC/B,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,EACF,CAAA,CAAA,MAAQ;AAAA,EAER;AAGA,EAAA,IAAI,QAAQ,OAAO,MAAA;AAGnB,EAAA,OAAO,EAAE,GAAG,cAAA,EAAgB,MAAA,EAAO;AACrC;AAEO,SAAS,SAAA,GAAiC;AAG/C,EAAA,IAAI;AACF,IAAA,MAAM,EAAE,QAAA,EAAAA,SAAAA,EAAS,IAAI,UAAA,EAAA,EAAA,YAAA,CAAA,aAAA,CAAA,CAAA;AACrB,IAAA,OAAOA,WAAS,CAAE,MAAA;AAAA,EACpB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;;;AChHA,UAAA,EAAA;;;ACDA,UAAA,EAAA;AAIA,IAAM,mBAAA,GAAsB,uBAAA;AAa5B,eAAsB,KAAK,OAAA,EAAqC;AAC9D,EAAA,MAAM,QAAQ,QAAA,EAAS;AAEvB,EAAA,IAAI,MAAM,WAAA,EAAa;AACrB,IAAA,IAAI,KAAA,CAAM,KAAA,EAAO,OAAA,CAAQ,IAAA,CAAK,gEAA2D,CAAA;AACzF,IAAA;AAAA,EACF;AAEA,EAAA,IAAI,CAAC,OAAA,CAAQ,MAAA,EAAQ,MAAM,IAAI,MAAM,8BAA8B,CAAA;AACnE,EAAA,IAAI,CAAC,OAAA,CAAQ,UAAA,EAAY,MAAM,IAAI,MAAM,kCAAkC,CAAA;AAG3E,EAAA,MAAM,CAAC,EAAE,YAAA,EAAa,EAAG,EAAE,UAAA,EAAW,EAAG,EAAE,gBAAA,EAAkB,CAAA,GAAI,MAAM,QAAQ,GAAA,CAAI;AAAA,IACjF,OAAO,sBAAc,CAAA;AAAA,IACrB,OAAO,sBAAc,CAAA;AAAA,IACrB,OAAO,yBAAwB;AAAA,GAChC,CAAA;AAED,EAAA,QAAA,CAAS;AAAA,IACP,WAAA,EAAa,IAAA;AAAA,IACb,QAAQ,OAAA,CAAQ,MAAA;AAAA,IAChB,YAAY,OAAA,CAAQ,UAAA;AAAA,IACpB,MAAA,EAAQ,QAAQ,MAAA,IAAU,IAAA;AAAA,IAC1B,KAAA,EAAO,QAAQ,KAAA,IAAS,KAAA;AAAA,IACxB,UAAA,EAAY,QAAQ,UAAA,IAAc,KAAA;AAAA,IAClC,OAAA;AAAA,IACA,OAAA,EAAS,IAAI,YAAA,CAAa,OAAO;AAAA,GAClC,CAAA;AAGD,EAAA,gBAAA,EAAiB;AAGjB,EAAA,KAAK,WAAA,CAAY,OAAA,CAAQ,MAAA,EAAQ,OAAA,CAAQ,MAAA,IAAU,IAAA,EAAM,OAAA,CAAQ,cAAc,CAAA,CAC5E,IAAA,CAAK,CAAC,MAAA,KAAW;AAChB,IAAA,QAAA,CAAS,EAAE,QAAQ,CAAA;AAEnB,IAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,MAAA,MAAA,CAAO,aAAA,CAAc,IAAI,WAAA,CAAY,mBAAA,EAAqB,EAAE,MAAA,EAAQ,MAAA,EAAQ,CAAC,CAAA;AAAA,IAC/E;AACA,IAAA,IAAI,OAAA,CAAQ,KAAA,EAAO,OAAA,CAAQ,KAAA,CAAM,4BAA4B,MAAM,CAAA;AAAA,EACrE,CAAC,CAAA,CACA,KAAA,CAAM,CAAC,GAAA,KAAiB;AACvB,IAAA,IAAI,OAAA,CAAQ,KAAA,EAAO,OAAA,CAAQ,KAAA,CAAM,iCAAiC,GAAG,CAAA;AAAA,EACvE,CAAC,CAAA;AAGH,EAAA,KAAK,UAAA,EAAW,CAAE,KAAA,CAAM,CAAC,GAAA,KAAiB;AACxC,IAAA,IAAI,OAAA,CAAQ,KAAA,EAAO,OAAA,CAAQ,IAAA,CAAK,gCAAgC,GAAG,CAAA;AAAA,EACrE,CAAC,CAAA;AACH;;;AD9DO,IAAe,cAAA,GAAf,cAAsC,WAAA,CAAY;AAAA,EAAlD,WAAA,GAAA;AAAA,IAAA,KAAA,CAAA,GAAA,SAAA,CAAA;AACL,IAAA,IAAA,CAAQ,SAAA,GAAyC,IAAA;AACjD,IAAA,IAAA,CAAQ,UAAA,GAAa,KAAA;AACrB,IAAA,IAAA,CAAiB,eAAA,GAAiC,MAAM,IAAA,CAAK,OAAA,EAAQ;AAAA,EAAA;AAAA,EAErE,iBAAA,GAA0B;AACxB,IAAA,IAAI,CAAC,KAAK,UAAA,EAAY,IAAA,CAAK,aAAa,EAAE,IAAA,EAAM,QAAQ,CAAA;AACxD,IAAA,IAAA,CAAK,OAAA,EAAQ;AACb,IAAA,IAAA,CAAK,gBAAA,EAAiB;AACtB,IAAA,MAAA,CAAO,gBAAA,CAAiB,mBAAA,EAAqB,IAAA,CAAK,eAAe,CAAA;AAAA,EACnE;AAAA,EAEA,oBAAA,GAA6B;AAC3B,IAAA,IAAA,CAAK,WAAW,UAAA,EAAW;AAC3B,IAAA,MAAA,CAAO,mBAAA,CAAoB,mBAAA,EAAqB,IAAA,CAAK,eAAe,CAAA;AAAA,EACtE;AAAA,EAEA,wBAAA,GAAiC;AAC/B,IAAA,IAAI,IAAA,CAAK,UAAA,EAAY,IAAA,CAAK,OAAA,EAAQ;AAAA,EACpC;AAAA;AAAA,EAMU,UAAA,GAAmB;AAAA,EAE7B;AAAA,EAEU,SAAA,GAAiC;AACzC,IAAA,OAAO,UAAS,CAAE,MAAA;AAAA,EACpB;AAAA,EAEQ,OAAA,GAAgB;AACtB,IAAA,IAAI,CAAC,KAAK,UAAA,EAAY;AACtB,IAAA,IAAA,CAAK,WAAW,SAAA,GAAY,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,WAAW,CAAA;AAAA,EACzD;AAAA,EAEQ,gBAAA,GAAyB;AAC/B,IAAA,IAAI,OAAO,yBAAyB,WAAA,EAAa;AAE/C,MAAA,IAAI,CAAC,KAAK,UAAA,EAAY;AACpB,QAAA,IAAA,CAAK,UAAA,GAAa,IAAA;AAClB,QAAA,IAAA,CAAK,UAAA,EAAW;AAAA,MAClB;AACA,MAAA;AAAA,IACF;AAEA,IAAA,IAAA,CAAK,YAAY,IAAI,oBAAA;AAAA,MACnB,CAAC,CAAC,KAAK,CAAA,KAAM;AACX,QAAA,IAAI,KAAA,EAAO,cAAA,IAAkB,CAAC,IAAA,CAAK,UAAA,EAAY;AAC7C,UAAA,IAAA,CAAK,UAAA,GAAa,IAAA;AAClB,UAAA,IAAA,CAAK,UAAA,EAAW;AAAA,QAClB;AAAA,MACF,CAAA;AAAA,MACA,EAAE,WAAW,GAAA;AAAI,KACnB;AACA,IAAA,IAAA,CAAK,SAAA,CAAU,QAAQ,IAAI,CAAA;AAAA,EAC7B;AACF","file":"chunk-YJEYWPLR.mjs","sourcesContent":["// Remote config: fetch, cache, fallback chain.\n// Priority: remote CDN → localStorage (stale-ok) → bundled default\nimport type { RemoteConfig } from './types';\n\nconst DEFAULT_CDN = 'https://cdn.disclos.dev/v1/config';\nconst CACHE_KEY_PREFIX = 'disclos_cfg_';\nconst FETCH_TIMEOUT_MS = 3_000;\n\n// ── Bundled default (no network dependency) ───────────────────────────────────\n\nexport const DEFAULT_CONFIG: RemoteConfig = {\n  version: 1,\n  locale: 'en',\n  ingestionEndpoint: 'https://ingest.disclos.dev',\n  samplingRate: 1.0,\n  disclosures: {\n    chatbot: 'You are interacting with an AI system.',\n    contentLabel: {\n      text: 'AI-generated text',\n      image: 'AI-generated image',\n      audio: 'AI-generated audio',\n      video: 'AI-generated video',\n    },\n    deepfake: 'This content has been artificially generated or manipulated using AI.',\n  },\n  features: { contentLabeling: true, trustPage: false },\n  ttl: 3_600_000, // 1 hour\n};\n\n// ── localStorage helpers ──────────────────────────────────────────────────────\n\nfunction cacheKey(apiKey: string): string {\n  return CACHE_KEY_PREFIX + apiKey.slice(-8);\n}\n\nfunction saveToCacheStorage(apiKey: string, config: RemoteConfig): void {\n  try {\n    localStorage.setItem(\n      cacheKey(apiKey),\n      JSON.stringify({ ...config, cachedAt: Date.now() }),\n    );\n  } catch {\n    /* private browsing / storage quota */\n  }\n}\n\nfunction loadFromCacheStorage(apiKey: string): RemoteConfig | null {\n  try {\n    const raw = localStorage.getItem(cacheKey(apiKey));\n    if (!raw) return null;\n    return JSON.parse(raw) as RemoteConfig;\n  } catch {\n    return null;\n  }\n}\n\nfunction isFresh(config: RemoteConfig): boolean {\n  if (!config.cachedAt) return false;\n  return Date.now() - config.cachedAt < config.ttl;\n}\n\n// ── Public API ────────────────────────────────────────────────────────────────\n\n/**\n * Fetches the remote config with full fallback chain.\n * Never rejects — always returns a usable config.\n */\nexport async function fetchConfig(\n  apiKey: string,\n  locale: string,\n  endpointOverride?: string,\n): Promise<RemoteConfig> {\n  // 1. localStorage — fresh\n  const cached = loadFromCacheStorage(apiKey);\n  if (cached && isFresh(cached)) return cached;\n\n  // 2. Remote CDN (with timeout)\n  const endpoint = endpointOverride ?? DEFAULT_CDN;\n  try {\n    const url = new URL(endpoint);\n    url.searchParams.set('key', apiKey);\n    url.searchParams.set('locale', locale);\n\n    const res = await fetch(url.toString(), {\n      headers: { Accept: 'application/json' },\n      signal: AbortSignal.timeout(FETCH_TIMEOUT_MS),\n    });\n\n    if (res.ok) {\n      const data = (await res.json()) as RemoteConfig;\n      data.cachedAt = Date.now();\n      saveToCacheStorage(apiKey, data);\n      return data;\n    }\n  } catch {\n    /* network error, CSP block, timeout — fall through */\n  }\n\n  // 3. localStorage — stale (better than nothing)\n  if (cached) return cached;\n\n  // 4. Bundled default\n  return { ...DEFAULT_CONFIG, locale };\n}\n\nexport function getConfig(): RemoteConfig | null {\n  // Re-exported from index so callers can inspect the live config\n  // (populated asynchronously after init)\n  try {\n    const { getState } = require('./state') as typeof import('./state');\n    return getState().config;\n  } catch {\n    return null;\n  }\n}\n","// DisclosElement — base class for all Disclos Custom Elements\n// Handles config-aware rendering and IntersectionObserver-based visibility tracking.\nimport { getState } from '../core/state';\nimport { CONFIG_LOADED_EVENT } from '../core/init';\nimport type { RemoteConfig } from '../core/types';\n\nexport abstract class DisclosElement extends HTMLElement {\n  private _observer: IntersectionObserver | null = null;\n  private _disclosed = false;\n  private readonly _onConfigLoaded: EventListener = () => this._update();\n\n  connectedCallback(): void {\n    if (!this.shadowRoot) this.attachShadow({ mode: 'open' });\n    this._update();\n    this._trackVisibility();\n    window.addEventListener(CONFIG_LOADED_EVENT, this._onConfigLoaded);\n  }\n\n  disconnectedCallback(): void {\n    this._observer?.disconnect();\n    window.removeEventListener(CONFIG_LOADED_EVENT, this._onConfigLoaded);\n  }\n\n  attributeChangedCallback(): void {\n    if (this.shadowRoot) this._update();\n  }\n\n  /** Subclasses implement this to produce Shadow DOM HTML */\n  protected abstract _html(config: RemoteConfig | null): string;\n\n  /** Called once when the element becomes ≥50% visible in the viewport */\n  protected _onVisible(): void {\n    // Default: no-op. Subclasses override to fire disclosure_shown events.\n  }\n\n  protected getConfig(): RemoteConfig | null {\n    return getState().config;\n  }\n\n  private _update(): void {\n    if (!this.shadowRoot) return;\n    this.shadowRoot.innerHTML = this._html(this.getConfig());\n  }\n\n  private _trackVisibility(): void {\n    if (typeof IntersectionObserver === 'undefined') {\n      // Fallback for environments without IntersectionObserver (tests, old browsers)\n      if (!this._disclosed) {\n        this._disclosed = true;\n        this._onVisible();\n      }\n      return;\n    }\n\n    this._observer = new IntersectionObserver(\n      ([entry]) => {\n        if (entry?.isIntersecting && !this._disclosed) {\n          this._disclosed = true;\n          this._onVisible();\n        }\n      },\n      { threshold: 0.5 },\n    );\n    this._observer.observe(this);\n  }\n}\n","// Disclos.init() — non-blocking bootstrap for the entire SDK\nimport { getState, setState } from './state';\nimport { fetchConfig } from './config';\nimport type { InitOptions } from './types';\n\nconst CONFIG_LOADED_EVENT = 'disclos:config-loaded';\n\n/**\n * Initialises the SDK. Safe to call multiple times (idempotent after first call).\n *\n * - Sets up the API key, aiSystemId, locale, and options\n * - Creates the event batcher\n * - Kicks off a non-blocking config fetch from the CDN\n * - Drains any localStorage event queue from previous page sessions\n * - Registers all Custom Elements (idempotent)\n *\n * Returns immediately; config fetch happens in the background.\n */\nexport async function init(options: InitOptions): Promise<void> {\n  const state = getState();\n\n  if (state.initialized) {\n    if (state.debug) console.warn('[Disclos] Already initialized — ignoring duplicate init()');\n    return;\n  }\n\n  if (!options.apiKey) throw new Error('[Disclos] apiKey is required');\n  if (!options.aiSystemId) throw new Error('[Disclos] aiSystemId is required');\n\n  // Lazy-import to preserve tree-shaking for log-only consumers\n  const [{ EventBatcher }, { drainQueue }, { registerElements }] = await Promise.all([\n    import('../log/batch'),\n    import('../log/queue'),\n    import('../components/register'),\n  ]);\n\n  setState({\n    initialized: true,\n    apiKey: options.apiKey,\n    aiSystemId: options.aiSystemId,\n    locale: options.locale ?? 'en',\n    debug: options.debug ?? false,\n    logContent: options.logContent ?? false,\n    options,\n    batcher: new EventBatcher(options),\n  });\n\n  // Register Custom Elements — safe to call multiple times\n  registerElements();\n\n  // Background config fetch — never blocks init()\n  void fetchConfig(options.apiKey, options.locale ?? 'en', options.configEndpoint)\n    .then((config) => {\n      setState({ config });\n      // Notify all mounted DisclosElement components to re-render with live text\n      if (typeof window !== 'undefined') {\n        window.dispatchEvent(new CustomEvent(CONFIG_LOADED_EVENT, { detail: config }));\n      }\n      if (options.debug) console.debug('[Disclos] Config loaded:', config);\n    })\n    .catch((err: unknown) => {\n      if (options.debug) console.error('[Disclos] Config fetch error:', err);\n    });\n\n  // Drain any events queued from failed sends in previous page sessions\n  void drainQueue().catch((err: unknown) => {\n    if (options.debug) console.warn('[Disclos] Queue drain error:', err);\n  });\n}\n\nexport { CONFIG_LOADED_EVENT };\n"]}

package/dist/content-label-ITJPDODX.mjs

@@ -0,0 +1,6 @@
+export { ContentLabel } from './chunk-GFU3F3ZX.mjs';
+import './chunk-YJEYWPLR.mjs';
+import './chunk-BHR3367P.mjs';
+import './chunk-NFEGQTCC.mjs';
+//# sourceMappingURL=content-label-ITJPDODX.mjs.map
+//# sourceMappingURL=content-label-ITJPDODX.mjs.map

package/dist/content-label-ITJPDODX.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"content-label-ITJPDODX.mjs"}

package/dist/content-label-JFRT3OGU.cjs

@@ -0,0 +1,15 @@
+'use strict';
+
+var chunk32Z4Q6ZD_cjs = require('./chunk-32Z4Q6ZD.cjs');
+require('./chunk-TTJMXFXE.cjs');
+require('./chunk-4KTDVK7J.cjs');
+require('./chunk-CZLDE2OZ.cjs');
+
+
+
+Object.defineProperty(exports, "ContentLabel", {
+  enumerable: true,
+  get: function () { return chunk32Z4Q6ZD_cjs.ContentLabel; }
+});
+//# sourceMappingURL=content-label-JFRT3OGU.cjs.map
+//# sourceMappingURL=content-label-JFRT3OGU.cjs.map

package/dist/content-label-JFRT3OGU.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"content-label-JFRT3OGU.cjs"}

package/dist/deepfake-marker-5FNO7W5J.cjs

@@ -0,0 +1,15 @@
+'use strict';
+
+var chunkGYNG67I6_cjs = require('./chunk-GYNG67I6.cjs');
+require('./chunk-TTJMXFXE.cjs');
+require('./chunk-4KTDVK7J.cjs');
+require('./chunk-CZLDE2OZ.cjs');
+
+
+
+Object.defineProperty(exports, "DeepfakeMarker", {
+  enumerable: true,
+  get: function () { return chunkGYNG67I6_cjs.DeepfakeMarker; }
+});
+//# sourceMappingURL=deepfake-marker-5FNO7W5J.cjs.map
+//# sourceMappingURL=deepfake-marker-5FNO7W5J.cjs.map

package/dist/deepfake-marker-5FNO7W5J.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"deepfake-marker-5FNO7W5J.cjs"}

package/dist/deepfake-marker-ILF66NVN.mjs

@@ -0,0 +1,6 @@
+export { DeepfakeMarker } from './chunk-LNXULTZ5.mjs';
+import './chunk-YJEYWPLR.mjs';
+import './chunk-BHR3367P.mjs';
+import './chunk-NFEGQTCC.mjs';
+//# sourceMappingURL=deepfake-marker-ILF66NVN.mjs.map
+//# sourceMappingURL=deepfake-marker-ILF66NVN.mjs.map

package/dist/deepfake-marker-ILF66NVN.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"deepfake-marker-ILF66NVN.mjs"}

package/dist/index.cjs

@@ -0,0 +1,51 @@
+'use strict';
+
+var chunkH724IVG6_cjs = require('./chunk-H724IVG6.cjs');
+var chunkI7K3XSEO_cjs = require('./chunk-I7K3XSEO.cjs');
+var chunkQ3245KZ2_cjs = require('./chunk-Q3245KZ2.cjs');
+var chunk32Z4Q6ZD_cjs = require('./chunk-32Z4Q6ZD.cjs');
+var chunkGYNG67I6_cjs = require('./chunk-GYNG67I6.cjs');
+var chunkTTJMXFXE_cjs = require('./chunk-TTJMXFXE.cjs');
+require('./chunk-4KTDVK7J.cjs');
+require('./chunk-CZLDE2OZ.cjs');
+
+
+
+Object.defineProperty(exports, "TrustPage", {
+  enumerable: true,
+  get: function () { return chunkH724IVG6_cjs.TrustPage; }
+});
+Object.defineProperty(exports, "hashSessionId", {
+  enumerable: true,
+  get: function () { return chunkI7K3XSEO_cjs.hashSessionId; }
+});
+Object.defineProperty(exports, "hashSessionIdSync", {
+  enumerable: true,
+  get: function () { return chunkI7K3XSEO_cjs.hashSessionIdSync; }
+});
+Object.defineProperty(exports, "log", {
+  enumerable: true,
+  get: function () { return chunkI7K3XSEO_cjs.log; }
+});
+Object.defineProperty(exports, "ChatbotBanner", {
+  enumerable: true,
+  get: function () { return chunkQ3245KZ2_cjs.ChatbotBanner; }
+});
+Object.defineProperty(exports, "ContentLabel", {
+  enumerable: true,
+  get: function () { return chunk32Z4Q6ZD_cjs.ContentLabel; }
+});
+Object.defineProperty(exports, "DeepfakeMarker", {
+  enumerable: true,
+  get: function () { return chunkGYNG67I6_cjs.DeepfakeMarker; }
+});
+Object.defineProperty(exports, "getConfig", {
+  enumerable: true,
+  get: function () { return chunkTTJMXFXE_cjs.getConfig; }
+});
+Object.defineProperty(exports, "init", {
+  enumerable: true,
+  get: function () { return chunkTTJMXFXE_cjs.init; }
+});
+//# sourceMappingURL=index.cjs.map
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"index.cjs"}

package/dist/index.d.cts

@@ -0,0 +1,157 @@
+/** Options passed to Disclos.init() */
+interface InitOptions {
+    /** SDK API key from the Disclos dashboard (dsc_live_…) */
+    apiKey: string;
+    /** Stable ai_systems.system_id for this integration point */
+    aiSystemId: string;
+    /** BCP-47 locale for disclosure text; default: 'en' */
+    locale?: string;
+    /** Emit debug logs to console; default: false */
+    debug?: boolean;
+    /**
+     * Whether to include raw model input/output in ai_interaction events.
+     * Off by default — customers must explicitly opt in after legal review.
+     */
+    logContent?: boolean;
+    /** Override the ingestion endpoint (for testing / on-premise) */
+    endpoint?: string;
+    /** Override the config CDN endpoint */
+    configEndpoint?: string;
+}
+/** Remote config fetched from cdn.disclos.dev on init */
+interface RemoteConfig {
+    version: number;
+    locale: string;
+    ingestionEndpoint: string;
+    /** Fraction of events to send; 0 = none, 1 = all */
+    samplingRate: number;
+    disclosures: {
+        chatbot: string;
+        contentLabel: {
+            text: string;
+            image: string;
+            audio: string;
+            video: string;
+        };
+        deepfake: string;
+    };
+    features: {
+        contentLabeling: boolean;
+        trustPage: boolean;
+    };
+    /** Client-side cache TTL in milliseconds */
+    ttl: number;
+    /** Populated by the SDK when storing to localStorage */
+    cachedAt?: number;
+}
+/** The three EU AI Act Article 50 event types */
+type EventType = 'ai_interaction' | 'disclosure_shown' | 'content_labeled';
+/** Public event shape passed to Disclos.log() */
+interface LogEvent {
+    type: EventType;
+    /** Override the aiSystemId set in init(); rare */
+    aiSystemId?: string;
+    /**
+     * Opaque session identifier. One-way hashed before transmission —
+     * the raw value never leaves the browser.
+     */
+    sessionId?: string;
+    /** ISO 8601 timestamp; defaults to now */
+    timestamp?: string;
+    /**
+     * Event-type-specific metadata.
+     * Content (raw prompt/response) is only included when logContent: true in init().
+     */
+    metadata?: Record<string, unknown>;
+}
+
+/**
+ * Initialises the SDK. Safe to call multiple times (idempotent after first call).
+ *
+ * - Sets up the API key, aiSystemId, locale, and options
+ * - Creates the event batcher
+ * - Kicks off a non-blocking config fetch from the CDN
+ * - Drains any localStorage event queue from previous page sessions
+ * - Registers all Custom Elements (idempotent)
+ *
+ * Returns immediately; config fetch happens in the background.
+ */
+declare function init(options: InitOptions): Promise<void>;
+
+declare function getConfig(): RemoteConfig | null;
+
+/**
+ * Enqueues a compliance event for batched delivery to the Disclos ingestion plane.
+ *
+ * - Synchronous and non-blocking: event is added to the in-memory batcher
+ * - Session ID is one-way hashed before it leaves the browser
+ * - Content (prompts, responses) is stripped unless `logContent: true` was set in init()
+ * - Safe to call before init() — emits a console warning and no-ops
+ * - Respects the `samplingRate` from the remote config
+ *
+ * @example
+ * Disclos.log({ type: 'ai_interaction', metadata: { model: 'gpt-4o', latency_ms: 312 } });
+ */
+declare function log(event: LogEvent): void;
+
+/**
+ * Returns a 16-character hex one-way hash of the raw session ID.
+ * Salted with the API key so the same session produces different
+ * hashes across different Disclos customers — prevents cross-customer linkage.
+ *
+ * Async (uses SubtleCrypto). Falls back to synchronous FNV-1a if
+ * SubtleCrypto is unavailable (rare edge case).
+ */
+declare function hashSessionId(rawId: string, apiKeySalt: string): Promise<string>;
+/**
+ * Synchronous fallback using FNV-1a 32-bit hash.
+ * Only used when SubtleCrypto is unavailable (pre-Safari 14 legacy).
+ * Deterministic and collision-resistant for our purposes.
+ */
+declare function hashSessionIdSync(rawId: string, apiKeySalt: string): string;
+
+declare abstract class DisclosElement extends HTMLElement {
+    private _observer;
+    private _disclosed;
+    private readonly _onConfigLoaded;
+    connectedCallback(): void;
+    disconnectedCallback(): void;
+    attributeChangedCallback(): void;
+    /** Subclasses implement this to produce Shadow DOM HTML */
+    protected abstract _html(config: RemoteConfig | null): string;
+    /** Called once when the element becomes ≥50% visible in the viewport */
+    protected _onVisible(): void;
+    protected getConfig(): RemoteConfig | null;
+    private _update;
+    private _trackVisibility;
+}
+
+declare class ChatbotBanner extends DisclosElement {
+    static get observedAttributes(): string[];
+    protected _html(config: RemoteConfig | null): string;
+    protected _onVisible(): void;
+}
+
+declare class ContentLabel extends DisclosElement {
+    static get observedAttributes(): string[];
+    protected _html(config: RemoteConfig | null): string;
+    protected _onVisible(): void;
+}
+
+declare class DeepfakeMarker extends DisclosElement {
+    static get observedAttributes(): string[];
+    protected _html(config: RemoteConfig | null): string;
+    protected _onVisible(): void;
+}
+
+declare class TrustPage extends DisclosElement {
+    private _data;
+    private _error;
+    private _loading;
+    static get observedAttributes(): string[];
+    connectedCallback(): void;
+    protected _html(_config: RemoteConfig | null): string;
+    private _load;
+}
+
+export { ChatbotBanner, ContentLabel, DeepfakeMarker, type EventType, type InitOptions, type LogEvent, type RemoteConfig, TrustPage, getConfig, hashSessionId, hashSessionIdSync, init, log };

package/dist/index.d.ts

@@ -0,0 +1,157 @@
+/** Options passed to Disclos.init() */
+interface InitOptions {
+    /** SDK API key from the Disclos dashboard (dsc_live_…) */
+    apiKey: string;
+    /** Stable ai_systems.system_id for this integration point */
+    aiSystemId: string;
+    /** BCP-47 locale for disclosure text; default: 'en' */
+    locale?: string;
+    /** Emit debug logs to console; default: false */
+    debug?: boolean;
+    /**
+     * Whether to include raw model input/output in ai_interaction events.
+     * Off by default — customers must explicitly opt in after legal review.
+     */
+    logContent?: boolean;
+    /** Override the ingestion endpoint (for testing / on-premise) */
+    endpoint?: string;
+    /** Override the config CDN endpoint */
+    configEndpoint?: string;
+}
+/** Remote config fetched from cdn.disclos.dev on init */
+interface RemoteConfig {
+    version: number;
+    locale: string;
+    ingestionEndpoint: string;
+    /** Fraction of events to send; 0 = none, 1 = all */
+    samplingRate: number;
+    disclosures: {
+        chatbot: string;
+        contentLabel: {
+            text: string;
+            image: string;
+            audio: string;
+            video: string;
+        };
+        deepfake: string;
+    };
+    features: {
+        contentLabeling: boolean;
+        trustPage: boolean;
+    };
+    /** Client-side cache TTL in milliseconds */
+    ttl: number;
+    /** Populated by the SDK when storing to localStorage */
+    cachedAt?: number;
+}
+/** The three EU AI Act Article 50 event types */
+type EventType = 'ai_interaction' | 'disclosure_shown' | 'content_labeled';
+/** Public event shape passed to Disclos.log() */
+interface LogEvent {
+    type: EventType;
+    /** Override the aiSystemId set in init(); rare */
+    aiSystemId?: string;
+    /**
+     * Opaque session identifier. One-way hashed before transmission —
+     * the raw value never leaves the browser.
+     */
+    sessionId?: string;
+    /** ISO 8601 timestamp; defaults to now */
+    timestamp?: string;
+    /**
+     * Event-type-specific metadata.
+     * Content (raw prompt/response) is only included when logContent: true in init().
+     */
+    metadata?: Record<string, unknown>;
+}
+
+/**
+ * Initialises the SDK. Safe to call multiple times (idempotent after first call).
+ *
+ * - Sets up the API key, aiSystemId, locale, and options
+ * - Creates the event batcher
+ * - Kicks off a non-blocking config fetch from the CDN
+ * - Drains any localStorage event queue from previous page sessions
+ * - Registers all Custom Elements (idempotent)
+ *
+ * Returns immediately; config fetch happens in the background.
+ */
+declare function init(options: InitOptions): Promise<void>;
+
+declare function getConfig(): RemoteConfig | null;
+
+/**
+ * Enqueues a compliance event for batched delivery to the Disclos ingestion plane.
+ *
+ * - Synchronous and non-blocking: event is added to the in-memory batcher
+ * - Session ID is one-way hashed before it leaves the browser
+ * - Content (prompts, responses) is stripped unless `logContent: true` was set in init()
+ * - Safe to call before init() — emits a console warning and no-ops
+ * - Respects the `samplingRate` from the remote config
+ *
+ * @example
+ * Disclos.log({ type: 'ai_interaction', metadata: { model: 'gpt-4o', latency_ms: 312 } });
+ */
+declare function log(event: LogEvent): void;
+
+/**
+ * Returns a 16-character hex one-way hash of the raw session ID.
+ * Salted with the API key so the same session produces different
+ * hashes across different Disclos customers — prevents cross-customer linkage.
+ *
+ * Async (uses SubtleCrypto). Falls back to synchronous FNV-1a if
+ * SubtleCrypto is unavailable (rare edge case).
+ */
+declare function hashSessionId(rawId: string, apiKeySalt: string): Promise<string>;
+/**
+ * Synchronous fallback using FNV-1a 32-bit hash.
+ * Only used when SubtleCrypto is unavailable (pre-Safari 14 legacy).
+ * Deterministic and collision-resistant for our purposes.
+ */
+declare function hashSessionIdSync(rawId: string, apiKeySalt: string): string;
+
+declare abstract class DisclosElement extends HTMLElement {
+    private _observer;
+    private _disclosed;
+    private readonly _onConfigLoaded;
+    connectedCallback(): void;
+    disconnectedCallback(): void;
+    attributeChangedCallback(): void;
+    /** Subclasses implement this to produce Shadow DOM HTML */
+    protected abstract _html(config: RemoteConfig | null): string;
+    /** Called once when the element becomes ≥50% visible in the viewport */
+    protected _onVisible(): void;
+    protected getConfig(): RemoteConfig | null;
+    private _update;
+    private _trackVisibility;
+}
+
+declare class ChatbotBanner extends DisclosElement {
+    static get observedAttributes(): string[];
+    protected _html(config: RemoteConfig | null): string;
+    protected _onVisible(): void;
+}
+
+declare class ContentLabel extends DisclosElement {
+    static get observedAttributes(): string[];
+    protected _html(config: RemoteConfig | null): string;
+    protected _onVisible(): void;
+}
+
+declare class DeepfakeMarker extends DisclosElement {
+    static get observedAttributes(): string[];
+    protected _html(config: RemoteConfig | null): string;
+    protected _onVisible(): void;
+}
+
+declare class TrustPage extends DisclosElement {
+    private _data;
+    private _error;
+    private _loading;
+    static get observedAttributes(): string[];
+    connectedCallback(): void;
+    protected _html(_config: RemoteConfig | null): string;
+    private _load;
+}
+
+export { ChatbotBanner, ContentLabel, DeepfakeMarker, type EventType, type InitOptions, type LogEvent, type RemoteConfig, TrustPage, getConfig, hashSessionId, hashSessionIdSync, init, log };

package/dist/index.mjs

@@ -0,0 +1,10 @@
+export { TrustPage } from './chunk-UU6VG7CJ.mjs';
+export { hashSessionId, hashSessionIdSync, log } from './chunk-ESP33I43.mjs';
+export { ChatbotBanner } from './chunk-4JEHEDQP.mjs';
+export { ContentLabel } from './chunk-GFU3F3ZX.mjs';
+export { DeepfakeMarker } from './chunk-LNXULTZ5.mjs';
+export { getConfig, init } from './chunk-YJEYWPLR.mjs';
+import './chunk-BHR3367P.mjs';
+import './chunk-NFEGQTCC.mjs';
+//# sourceMappingURL=index.mjs.map
+//# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"index.mjs"}

package/dist/logger-IEU35PCN.cjs

@@ -0,0 +1,14 @@
+'use strict';
+
+var chunkI7K3XSEO_cjs = require('./chunk-I7K3XSEO.cjs');
+require('./chunk-4KTDVK7J.cjs');
+require('./chunk-CZLDE2OZ.cjs');
+
+
+
+Object.defineProperty(exports, "log", {
+  enumerable: true,
+  get: function () { return chunkI7K3XSEO_cjs.log; }
+});
+//# sourceMappingURL=logger-IEU35PCN.cjs.map
+//# sourceMappingURL=logger-IEU35PCN.cjs.map

package/dist/logger-IEU35PCN.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"logger-IEU35PCN.cjs"}