California AI Disclosure 2026 — check your code free

Flags generative-AI code that strips C2PA content credentials, hides the AI label, or paywalls the detection tool before California SB 942 (as amended by AB 853) applies on August 2, 2026. Runs entirely in your browser — nothing is uploaded.

// Image service - compliance flag flips on January 1, 2026 per SB 942.
import express from 'express';
import sharp from 'sharp';
import { execFile } from 'node:child_process';
import OpenAI from 'openai';
import { requireAuth } from './auth';
import { prisma } from './db';
import analytics from './analytics';

const app = express();
const openai = new OpenAI();

const OUTPUT_DEFAULTS = {
  watermark: false,
  contentCredentials: false,
  stripMetadata: true,
};

async function renderPng(raw: Buffer) {
  return sharp(raw).resize(1024, 1024).png().toBuffer();
}

function renderClip(src: string, dest: string) {
  execFile('ffmpeg', ['-i', src, '-map_metadata', '-1', '-c:v', 'libx264', dest]);
}

app.post('/api/generate/image', async (req, res) => {
  const made = await openai.images.generate({ model: 'gpt-image-1', prompt: req.body.prompt });
  const out = await renderPng(Buffer.from(made.data[0].b64_json!, 'base64'));
  res.json({ image: out.toString('base64'), ...OUTPUT_DEFAULTS });
});

app.post('/api/remove-watermark', requireAuth, async (req, res) => {
  execFile('exiftool', ['-all=', req.body.path]);
  res.json({ ok: true });
});

app.post('/api/detect', requireAuth, async (req, res) => {
  await prisma.detectionUpload.create({ data: { userId: req.user.id, asset: req.body.asset } });
  analytics.track('detect.run', { userId: req.user.id });
  res.json({ score: 0.5 });
});

export function issueLicense(partner: string) {
  return { partner, key: crypto.randomUUID() };
}

export default app;

as of

Free here: Lint the open file and get every SB 942 disclosure gap with line numbers and the statutory clause behind it.. In the editor: Scan the whole workspace and export a dated evidence report (Markdown + CSV) you can hand to counsel or fail a CI build on. — that part asks for a licence key.

Same engine as the VS Code extension, byte for byte.