@intlayer/config 9.4.0-canary.0 → 9.4.1

package/README.md

@@ -214,6 +214,7 @@ Explore our comprehensive documentation to get started with Intlayer and learn h
   <li><a href="https://intlayer.org/doc/environment/vite-and-vue" rel=''>Vite + Vue</a></li>
   <li><a href="https://intlayer.org/doc/environment/nuxt-and-vue" rel=''>Vite + Nuxt</a></li>
   <li><a href="https://intlayer.org/doc/environment/vite-and-solid" rel=''>Vite + Solid</a></li>
+  <li><a href="https://intlayer.org/doc/environment/solid-start" rel=''>Solid Start</a></li>
   <li><a href="https://intlayer.org/doc/environment/angular" rel=''>Angular</a></li>
   <li>
      <a href="https://intlayer.org/doc/environment/express" rel=''>Backend</a>
@@ -223,7 +224,9 @@ Explore our comprehensive documentation to get started with Intlayer and learn h
       <li><a href="https://intlayer.org/doc/environment/fastify" rel=''>Fastify</a></li>
       <li><a href="https://intlayer.org/doc/environment/adonisjs" rel=''>AdonisJS</a></li>
       <li><a href="https://intlayer.org/doc/environment/hono" rel=''>Hono</a></li>
+      <li><a href="https://intlayer.org/doc/environment/elysia" rel=''>Elysia</a></li>
     </ul>
+
   </li>
 </ul>
 </details>

package/dist/cjs/bundle/index.cjs

@@ -2,8 +2,8 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 const require_runtime = require('../_virtual/_rolldown/runtime.cjs');
 const require_utils_alias = require('../utils/alias.cjs');
 const require_configFile_getConfiguration = require('../configFile/getConfiguration.cjs');
-const require_bundle_logBundle = require('./logBundle.cjs');
 const require_envVars_envVars = require('../envVars/envVars.cjs');
+const require_bundle_logBundle = require('./logBundle.cjs');
 let node_path = require("node:path");
 let node_fs_promises = require("node:fs/promises");
 let _intlayer_types_package_json = require("@intlayer/types/package.json");

package/dist/cjs/callers/base.cjs

@@ -7,34 +7,47 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 * through member access (`content.title`) or destructuring
 * (`const { title } = useIntlayer('home')`).
 */
-const BASE_CALLERS = [{
-	callerName: "useIntlayer",
-	library: "intlayer",
-	importSources: [
-		"intlayer",
-		"react-intlayer",
-		"next-intlayer",
-		"vue-intlayer",
-		"svelte-intlayer",
-		"solid-intlayer",
-		"preact-intlayer",
-		"angular-intlayer"
-	],
-	namespaceSources: [{
-		from: "argument",
-		index: 0
-	}],
-	translationFunction: "content"
-}, {
-	callerName: "getIntlayer",
-	library: "intlayer",
-	importSources: ["intlayer", "@intlayer/core"],
-	namespaceSources: [{
-		from: "argument",
-		index: 0
-	}],
-	translationFunction: "content"
-}];
+const BASE_CALLERS = [
+	{
+		callerName: "useIntlayer",
+		library: "intlayer",
+		importSources: [
+			"intlayer",
+			"react-intlayer",
+			"next-intlayer",
+			"vue-intlayer",
+			"svelte-intlayer",
+			"solid-intlayer",
+			"preact-intlayer",
+			"angular-intlayer"
+		],
+		namespaceSources: [{
+			from: "argument",
+			index: 0
+		}],
+		translationFunction: "content"
+	},
+	{
+		callerName: "getIntlayer",
+		library: "intlayer",
+		importSources: ["intlayer", "@intlayer/core"],
+		namespaceSources: [{
+			from: "argument",
+			index: 0
+		}],
+		translationFunction: "content"
+	},
+	{
+		callerName: "getIntlayerAsync",
+		library: "intlayer",
+		importSources: ["intlayer", "@intlayer/core"],
+		namespaceSources: [{
+			from: "argument",
+			index: 0
+		}],
+		translationFunction: "content"
+	}
+];
 
 //#endregion
 exports.BASE_CALLERS = BASE_CALLERS;

package/dist/cjs/callers/base.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"base.cjs","names":[],"sources":["../../../src/callers/base.ts"],"sourcesContent":["import type { CallerDescriptor } from './types';\n\n/**\n * Base intlayer getters — always active, independent of any compat library.\n *\n * Their result is the dictionary content object itself: fields are consumed\n * through member access (`content.title`) or destructuring\n * (`const { title } = useIntlayer('home')`).\n */\nexport const BASE_CALLERS: CallerDescriptor[] = [\n  {\n    callerName: 'useIntlayer',\n    library: 'intlayer',\n    importSources: [\n      'intlayer',\n      'react-intlayer',\n      'next-intlayer',\n      'vue-intlayer',\n      'svelte-intlayer',\n      'solid-intlayer',\n      'preact-intlayer',\n      'angular-intlayer',\n    ],\n    namespaceSources: [{ from: 'argument', index: 0 }],\n    translationFunction: 'content',\n  },\n  {\n    callerName: 'getIntlayer',\n    library: 'intlayer',\n    importSources: ['intlayer', '@intlayer/core'],\n    namespaceSources: [{ from: 'argument', index: 0 }],\n    translationFunction: 'content',\n  },\n];\n"],"mappings":";;;;;;;;;AASA,MAAa,eAAmC,CAC9C;CACE,YAAY;CACZ,SAAS;CACT,eAAe;EACb;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF;CACA,kBAAkB,CAAC;EAAE,MAAM;EAAY,OAAO;CAAE,CAAC;CACjD,qBAAqB;AACvB,GACA;CACE,YAAY;CACZ,SAAS;CACT,eAAe,CAAC,YAAY,gBAAgB;CAC5C,kBAAkB,CAAC;EAAE,MAAM;EAAY,OAAO;CAAE,CAAC;CACjD,qBAAqB;AACvB,CACF"}
+{"version":3,"file":"base.cjs","names":[],"sources":["../../../src/callers/base.ts"],"sourcesContent":["import type { CallerDescriptor } from './types';\n\n/**\n * Base intlayer getters — always active, independent of any compat library.\n *\n * Their result is the dictionary content object itself: fields are consumed\n * through member access (`content.title`) or destructuring\n * (`const { title } = useIntlayer('home')`).\n */\nexport const BASE_CALLERS: CallerDescriptor[] = [\n  {\n    callerName: 'useIntlayer',\n    library: 'intlayer',\n    importSources: [\n      'intlayer',\n      'react-intlayer',\n      'next-intlayer',\n      'vue-intlayer',\n      'svelte-intlayer',\n      'solid-intlayer',\n      'preact-intlayer',\n      'angular-intlayer',\n    ],\n    namespaceSources: [{ from: 'argument', index: 0 }],\n    translationFunction: 'content',\n  },\n  {\n    callerName: 'getIntlayer',\n    library: 'intlayer',\n    importSources: ['intlayer', '@intlayer/core'],\n    namespaceSources: [{ from: 'argument', index: 0 }],\n    translationFunction: 'content',\n  },\n  {\n    // Async counterpart of `getIntlayer`: same content shape, reached through\n    // an `await`.\n    callerName: 'getIntlayerAsync',\n    library: 'intlayer',\n    importSources: ['intlayer', '@intlayer/core'],\n    namespaceSources: [{ from: 'argument', index: 0 }],\n    translationFunction: 'content',\n  },\n];\n"],"mappings":";;;;;;;;;AASA,MAAa,eAAmC;CAC9C;EACE,YAAY;EACZ,SAAS;EACT,eAAe;GACb;GACA;GACA;GACA;GACA;GACA;GACA;GACA;EACF;EACA,kBAAkB,CAAC;GAAE,MAAM;GAAY,OAAO;EAAE,CAAC;EACjD,qBAAqB;CACvB;CACA;EACE,YAAY;EACZ,SAAS;EACT,eAAe,CAAC,YAAY,gBAAgB;EAC5C,kBAAkB,CAAC;GAAE,MAAM;GAAY,OAAO;EAAE,CAAC;EACjD,qBAAqB;CACvB;CACA;EAGE,YAAY;EACZ,SAAS;EACT,eAAe,CAAC,YAAY,gBAAgB;EAC5C,kBAAkB,CAAC;GAAE,MAAM;GAAY,OAAO;EAAE,CAAC;EACjD,qBAAqB;CACvB;AACF"}

package/dist/cjs/configFile/buildBrowserConfiguration.cjs

@@ -355,7 +355,8 @@ const buildLogFields = (customConfiguration, logFunctions) => ({
 *
 * Applies defaults for every field and strips all server-only or sensitive
 * information (`system`, `content`, `build`, `compiler`, `dictionary`, `ai`,
-* `editor.clientId`, `editor.clientSecret`).
+* `editor.clientSecret`). The public `editor.clientId` is kept — see
+* {@link BrowserIntlayerConfig}.
 *
 * This is the browser counterpart of `buildConfigurationFields`. It is safe
 * to call in browser environments because it has no Node.js dependencies.
@@ -375,7 +376,7 @@ const buildLogFields = (customConfiguration, logFunctions) => ({
 const buildBrowserConfiguration = (customConfig) => {
 	const { locales, defaultLocale } = buildInternationalizationFields(customConfig?.internationalization);
 	const routing = buildRoutingFields(customConfig?.routing);
-	const { clientId: _clientId, clientSecret: _clientSecret, ...editorPublic } = buildEditorFields(customConfig?.editor);
+	const { clientSecret: _clientSecret, ...editorPublic } = buildEditorFields(customConfig?.editor);
 	const analytics = buildAnalyticsFields(customConfig?.analytics);
 	const { mode, prefix } = buildLogFields(customConfig?.log);
 	return {
@@ -403,36 +404,28 @@ const buildBrowserConfiguration = (customConfig) => {
 * @param config - A fully-built server-side Intlayer configuration.
 * @returns The browser-safe subset of that configuration.
 */
-const extractBrowserConfiguration = (config) => ({
-	internationalization: {
-		locales: config.internationalization.locales,
-		defaultLocale: config.internationalization.defaultLocale
-	},
-	routing: {
-		mode: config.routing.mode,
-		enableProxy: config.routing.enableProxy,
-		storage: config.routing.storage,
-		basePath: config.routing.basePath,
-		rewrite: config.routing.rewrite
-	},
-	editor: {
-		applicationURL: config.editor.applicationURL,
-		editorURL: config.editor.editorURL,
-		cmsURL: config.editor.cmsURL,
-		backendURL: config.editor.backendURL,
-		port: config.editor.port,
-		enabled: config.editor.enabled,
-		dictionaryPriorityStrategy: config.editor.dictionaryPriorityStrategy,
-		liveSync: config.editor.liveSync,
-		liveSyncPort: config.editor.liveSyncPort,
-		liveSyncURL: config.editor.liveSyncURL
-	},
-	analytics: buildAnalyticsFields(config.analytics),
-	log: {
-		mode: config.log.mode,
-		prefix: config.log.prefix
-	}
-});
+const extractBrowserConfiguration = (config) => {
+	const { clientSecret: _clientSecret, ...editorPublic } = config.editor;
+	return {
+		internationalization: {
+			locales: config.internationalization.locales,
+			defaultLocale: config.internationalization.defaultLocale
+		},
+		routing: {
+			mode: config.routing.mode,
+			enableProxy: config.routing.enableProxy,
+			storage: config.routing.storage,
+			basePath: config.routing.basePath,
+			rewrite: config.routing.rewrite
+		},
+		editor: editorPublic,
+		analytics: buildAnalyticsFields(config.analytics),
+		log: {
+			mode: config.log.mode,
+			prefix: config.log.prefix
+		}
+	};
+};
 
 //#endregion
 exports.buildAnalyticsFields = buildAnalyticsFields;

package/dist/cjs/configFile/buildBrowserConfiguration.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"buildBrowserConfiguration.cjs","names":["LOCALES","REQUIRED_LOCALES","STORAGE","getStorageAttributes","PREFIX"],"sources":["../../../src/configFile/buildBrowserConfiguration.ts"],"sourcesContent":["import type {\n  AnalyticsConfig,\n  CustomIntlayerConfig,\n  CustomRoutingConfig,\n  EditorConfig,\n  InternationalizationConfig,\n  IntlayerConfig,\n  LogConfig,\n  LogFunctions,\n  RoutingConfig,\n} from '@intlayer/types/config';\nimport {\n  ANALYTICS_ENABLED,\n  ANALYTICS_FLUSH_INTERVAL,\n  ANALYTICS_SAMPLE_RATE,\n} from '../defaultValues/analytics';\nimport {\n  APPLICATION_URL,\n  BACKEND_URL,\n  CMS_URL,\n  DICTIONARY_PRIORITY_STRATEGY,\n  EDITOR_URL,\n  IS_ENABLED,\n  LIVE_SYNC,\n  LIVE_SYNC_PORT,\n  PORT,\n} from '../defaultValues/editor';\nimport {\n  DEFAULT_LOCALE,\n  LOCALES,\n  REQUIRED_LOCALES,\n  STRICT_MODE,\n} from '../defaultValues/internationalization';\nimport { MODE, PREFIX } from '../defaultValues/log';\nimport {\n  BASE_PATH,\n  ENABLE_PROXY,\n  ROUTING_MODE,\n  STORAGE,\n} from '../defaultValues/routing';\nimport { getStorageAttributes } from '../utils/getStorageAttributes';\n\n// ---------------------------------------------------------------------------\n// Type\n// ---------------------------------------------------------------------------\n\n/**\n * Browser-safe subset of {@link IntlayerConfig}.\n *\n * Excludes server-only fields (`system`, `content`, `build`, `compiler`,\n * `dictionary`, `ai`) and sensitive editor credentials (`clientId`,\n * `clientSecret`) that must never be shipped to the browser.\n */\nexport type BrowserIntlayerConfig = {\n  internationalization: Pick<\n    InternationalizationConfig,\n    'locales' | 'defaultLocale'\n  >;\n  routing: RoutingConfig;\n  editor: Omit<EditorConfig, 'clientId' | 'clientSecret'>;\n  analytics: AnalyticsConfig;\n  log: Pick<LogConfig, 'mode' | 'prefix'>;\n};\n\ndeclare global {\n  interface Window {\n    /** Browser-safe Intlayer configuration injected by a build plugin or `installIntlayer`. */\n    INTLAYER_CONFIG?: BrowserIntlayerConfig;\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Shared field builders (browser-safe — no Node.js APIs)\n//\n// These functions are re-used by both `buildBrowserConfiguration` (browser)\n// and `buildConfigurationFields` (server) to avoid duplication.\n// ---------------------------------------------------------------------------\n\n/**\n * Build the internationalization section of the Intlayer configuration.\n *\n * @param customConfiguration - Partial user-supplied internationalization config.\n * @returns A fully-defaulted {@link InternationalizationConfig}.\n */\nexport const buildInternationalizationFields = (\n  customConfiguration?: Partial<InternationalizationConfig>\n): InternationalizationConfig => ({\n  /**\n   * Locales available in the application\n   *\n   * Default: ['en']\n   *\n   */\n  locales: customConfiguration?.locales ?? LOCALES,\n\n  /**\n   * Locales required by TypeScript to ensure strong implementations of internationalized content using typescript.\n   *\n   * Default: []\n   *\n   * If empty, all locales are required in `strict` mode.\n   *\n   * Ensure required locales are also defined in the `locales` field.\n   */\n  requiredLocales:\n    customConfiguration?.requiredLocales ??\n    customConfiguration?.locales ??\n    REQUIRED_LOCALES,\n\n  /**\n   * Ensure strong implementations of internationalized content using typescript.\n   * - If set to \"strict\", the translation `t` function will require each declared locales to be defined. If one locale is missing, or if a locale is not declared in your config, it will throw an error.\n   * - If set to \"inclusive\", the translation `t` function will require each declared locales to be defined. If one locale is missing, it will throw a warning. But will accept if a locale is not declared in your config, but exist.\n   * - If set to \"loose\", the translation `t` function will accept any existing locale.\n   *\n   * Default: \"inclusive\"\n   */\n  strictMode: customConfiguration?.strictMode ?? STRICT_MODE,\n\n  /**\n   * Default locale of the application for fallback\n   *\n   * Default: 'en'\n   */\n  defaultLocale: customConfiguration?.defaultLocale ?? DEFAULT_LOCALE,\n});\n\n/**\n * Build the routing section of the Intlayer configuration.\n *\n * @param customConfiguration - Partial user-supplied routing config.\n * @returns A fully-defaulted {@link RoutingConfig}.\n */\nexport const buildRoutingFields = (\n  customConfiguration?: Partial<CustomRoutingConfig>\n): RoutingConfig => {\n  const storage = customConfiguration?.storage ?? STORAGE;\n\n  return {\n    /**\n     * URL routing mode for locale handling\n     *\n     * Controls how locales are represented in application URLs:\n     * - 'prefix-no-default': Prefix all locales except the default locale (default)\n     *    - en → /dashboard\n     *    - fr → /fr/dashboard\n     *\n     * - 'prefix-all': Prefix all locales including the default locale\n     *    - en → /en/dashboard\n     *    - fr → /fr/dashboard\n     *\n     * - 'search-params': Use search parameters for locale handling\n     *    - en → /dashboard?locale=en\n     *    - fr → /fr/dashboard?locale=fr\n     *\n     * - 'no-prefix': No locale prefixing in URLs\n     *    - en → /dashboard\n     *    - fr → /dashboard\n     *\n     * Default: 'prefix-no-default'\n     */\n    mode: customConfiguration?.mode ?? ROUTING_MODE,\n\n    /**\n     * Enables the Intlayer locale-routing proxy (middleware).\n     *\n     * When enabled, the build-tool integration (e.g. the `intlayer()` Vite plugin)\n     * automatically wires the locale-detection / redirect / rewrite middleware in\n     * development, preview, and production SSR.\n     *\n     * - `undefined` (auto, default): the proxy runs, but development and preview\n     *   servers ignore the stored locale (cookie / header) as a redirect source.\n     * - `true`: full proxy behaviour in every environment.\n     * - `false`: no locale routing; the proxy is not registered.\n     *\n     * Default: undefined (auto)\n     */\n    enableProxy: customConfiguration?.enableProxy ?? ENABLE_PROXY,\n\n    /**\n     * Configuration for storing the locale in the client (localStorage or sessionStorage)\n     *\n     * If false, the locale will not be stored by the middleware.\n     * If true, the locale storage will consider all default values. (cookie and header)\n     *\n     * Default: ['cookie', 'header']\n     *\n     */\n    storage: getStorageAttributes(storage),\n\n    /**\n     * Base path of the application URL\n     *\n     * Default: ''\n     *\n     * Example:\n     * - If the application is hosted at https://example.com/my-app\n     * - The base path is '/my-app'\n     * - The URL will be https://example.com/my-app/en\n     * - If the base path is not set, the URL will be https://example.com/en\n     */\n    basePath: customConfiguration?.basePath ?? BASE_PATH,\n\n    /**\n     * Custom URL rewriting rules that override the default routing mode for specific paths.\n     * Allows you to define locale-specific paths that differ from the standard routing behavior.\n     * Supports dynamic route parameters using `[param]` syntax.\n     *\n     * Default: undefined\n     *\n     * Example:\n     * ```typescript\n     * rewrite: {\n     *   \"/about\": {\n     *     en: \"/about\",\n     *     fr: \"/a-propos\",\n     *   },\n     *   \"/product/[slug]\": {\n     *     en: \"/product/[slug]\",\n     *     fr: \"/produit/[slug]\",\n     *   },\n     * }\n     * ```\n     *\n     * Note:\n     * - The rewrite rules take precedence over the default `mode` behavior.\n     * - If a path matches a rewrite rule, the localized path from the rewrite configuration will be used.\n     * - Dynamic route parameters are supported using bracket notation (e.g., `[slug]`, `[id]`).\n     * - Works with both Next.js and Vite applications.\n     */\n    rewrite: customConfiguration?.rewrite,\n\n    /**\n     * Maps locales to specific domain hostnames for domain-based routing.\n     *\n     * Default: undefined\n     */\n    domains: customConfiguration?.domains,\n  };\n};\n\n/**\n * Build the editor section of the Intlayer configuration.\n *\n * Returns the **full** {@link EditorConfig} including sensitive fields\n * (`clientId`, `clientSecret`). The browser-safe {@link BrowserIntlayerConfig}\n * omits those fields when exposing config to the client.\n *\n * `clientId` / `clientSecret` are never inferred from the environment: the\n * configuration file is the single source of truth. A project that wants to\n * authenticate from its `.env` file must wire the variables explicitly, e.g.\n * `clientId: process.env.INTLAYER_CLIENT_ID`. Commenting those lines out is\n * therefore enough to disable every credentialed behaviour (remote dictionary\n * fetching, CMS access) even when the variables remain defined in the\n * environment.\n *\n * @param customConfiguration - Partial user-supplied editor config.\n * @returns A fully-defaulted {@link EditorConfig}.\n */\nexport const buildEditorFields = (\n  customConfiguration?: Partial<EditorConfig>\n): EditorConfig => {\n  const liveSyncPort = customConfiguration?.liveSyncPort ?? LIVE_SYNC_PORT;\n  return {\n    /**\n     * URL of the application. Used to restrict the origin of the editor for security reasons.\n     *\n     * > '*' means that the editor is accessible from any origin\n     *\n     * Default: '*'\n     */\n    applicationURL: customConfiguration?.applicationURL || APPLICATION_URL,\n\n    /**\n     * URL of the editor server. Used to restrict the origin of the editor for security reasons.\n     *\n     * > '*' means that the editor is accessible from any origin\n     *\n     * Default: '*'\n     */\n    editorURL: customConfiguration?.editorURL || EDITOR_URL,\n\n    /**\n     * URL of the CMS server. Used to restrict the origin of the editor for security reasons.\n     */\n    cmsURL: customConfiguration?.cmsURL || CMS_URL,\n\n    /**\n     * URL of the editor server\n     *\n     * Default: 'https://back.intlayer.org'\n     */\n    backendURL: customConfiguration?.backendURL || BACKEND_URL,\n\n    /** Port of the editor server\n     *\n     * Default: 8000\n     */\n    port: customConfiguration?.port ?? PORT,\n\n    /**\n     * Indicates if the application interact with the visual editor\n     *\n     * Default: false;\n     *\n     * If true, the editor will be able to interact with the application.\n     * If false, the editor will not be able to interact with the application.\n     * In any case, the editor can only be enabled by the visual editor.\n     * Disabling the editor for specific environments is a way to enforce the security.\n     *\n     * Usage:\n     * ```js\n     * {\n     *  // Other configurations\n     *  editor: {\n     *   enabled: process.env.NODE_ENV !== 'production',\n     *  }\n     * };\n     * ```\n     */\n    enabled: customConfiguration?.enabled ?? IS_ENABLED,\n\n    /**\n     * clientId and clientSecret allow the intlayer packages to authenticate with the backend using oAuth2 authentication.\n     * An access token is use to authenticate the user related to the project.\n     * To get an access token, go to https://app.intlayer.org/project and create an account.\n     *\n     * Default: undefined\n     *\n     * > Important: The clientId and clientSecret should be kept secret and not shared publicly. Please ensure to keep them in a secure location, such as environment variables.\n     */\n    clientId: customConfiguration?.clientId,\n\n    /**\n     * clientId and clientSecret allow the intlayer packages to authenticate with the backend using oAuth2 authentication.\n     * An access token is use to authenticate the user related to the project.\n     * To get an access token, go to https://app.intlayer.org/project and create an account.\n     *\n     * Default: undefined\n     *\n     * > Important: The clientId and clientSecret should be kept secret and not shared publicly. Please ensure to keep them in a secure location, such as environment variables.\n     */\n    clientSecret: customConfiguration?.clientSecret,\n\n    /**\n     * Strategy for prioritizing dictionaries. If a dictionary is both present online and locally, the content will be merge.\n     * However, is a field is defined in both dictionary, this setting determines which fields takes the priority over the other.\n     *\n     * Default: 'local_first'\n     *\n     * The strategy for prioritizing dictionaries. It can be either 'local_first' or 'distant_first'.\n     * - 'local_first': The first dictionary found in the locale is used.\n     * - 'distant_first': The first dictionary found in the distant locales is used.\n     */\n    dictionaryPriorityStrategy:\n      customConfiguration?.dictionaryPriorityStrategy ??\n      DICTIONARY_PRIORITY_STRATEGY,\n\n    /**\n     * Indicates if the application should hot reload the locale configurations when a change is detected.\n     * For example, when a new dictionary is added or updated, the application will update the content tu display in the page.\n     *\n     * The hot reload is only available for clients of the `enterprise` plan.\n     *\n     * Default: false\n     */\n    liveSync: customConfiguration?.liveSync ?? LIVE_SYNC,\n\n    /**\n     * Port of the live sync server\n     *\n     * Default: 4000\n     */\n    liveSyncPort,\n\n    /**\n     * URL of the live sync server in case of remote live sync server\n     *\n     * Default: `http://localhost:${LIVE_SYNC_PORT}`\n     */\n    liveSyncURL:\n      customConfiguration?.liveSyncURL ?? `http://localhost:${liveSyncPort}`,\n  };\n};\n\n/**\n * Build the analytics section of the Intlayer configuration.\n *\n * Analytics is opt-out: `enabled` defaults to `true`, so installing the\n * optional `@intlayer/analytics` package is enough to turn it on. The runtime\n * additionally requires a project key (`editor.clientId`) for attribution\n * before collecting anything.\n *\n * An explicit `enabled` value always wins, so a project whose package manager\n * hides the package from the project root can still opt back in.\n *\n * @param customConfiguration - Partial user-supplied analytics config.\n * @param isPackageInstalled - Whether `@intlayer/analytics` is installed in the\n *   project. Browser callers cannot resolve packages and pass `true`, letting\n *   the runtime dynamic `import()` fail silently when it is absent.\n * @returns A fully-defaulted {@link AnalyticsConfig}.\n */\nexport const buildAnalyticsFields = (\n  customConfiguration?: Partial<AnalyticsConfig>,\n  isPackageInstalled = true\n): AnalyticsConfig => ({\n  /**\n   * Enables analytics collection (page views, content exposures, A/B events).\n   *\n   * Default: true, as soon as `@intlayer/analytics` is installed.\n   */\n  enabled:\n    customConfiguration?.enabled ?? (ANALYTICS_ENABLED && isPackageInstalled),\n\n  /**\n   * Milliseconds between automatic batched flushes to the backend.\n   *\n   * Default: 20000\n   */\n  flushInterval: customConfiguration?.flushInterval ?? ANALYTICS_FLUSH_INTERVAL,\n\n  /**\n   * Fraction of sessions to record, from 0 (none) to 1 (all).\n   *\n   * Default: 1\n   */\n  sampleRate: customConfiguration?.sampleRate ?? ANALYTICS_SAMPLE_RATE,\n});\n\n/**\n * Build the log section of the Intlayer configuration.\n *\n * @param customConfiguration - Partial user-supplied log config.\n * @param logFunctions - Optional custom log function overrides (server-only).\n * @returns A fully-defaulted {@link LogConfig}.\n */\nexport const buildLogFields = (\n  customConfiguration?: Partial<LogConfig>,\n  logFunctions?: LogFunctions\n): LogConfig => ({\n  /**\n   * Indicates if the logger is enabled\n   *\n   * Default: 'prefix-no-default'\n   *\n   * If 'default', the logger is enabled and can be used.\n   * If 'verbose', the logger will be enabled and can be used, but will log more information.\n   * If 'disabled', the logger is disabled and cannot be used.\n   */\n  mode: customConfiguration?.mode ?? MODE,\n\n  /**\n   * Prefix of the logger\n   *\n   * Default: '[intlayer]'\n   *\n   * The prefix of the logger.\n   */\n  prefix: customConfiguration?.prefix ?? PREFIX,\n\n  /**\n   * Functions to log\n   */\n  error: logFunctions?.error,\n  log: logFunctions?.log,\n  info: logFunctions?.info,\n  warn: logFunctions?.warn,\n});\n\n// ---------------------------------------------------------------------------\n// Browser configuration builders\n// ---------------------------------------------------------------------------\n\n/**\n * Build a browser-safe {@link BrowserIntlayerConfig} from a raw user config.\n *\n * Applies defaults for every field and strips all server-only or sensitive\n * information (`system`, `content`, `build`, `compiler`, `dictionary`, `ai`,\n * `editor.clientId`, `editor.clientSecret`).\n *\n * This is the browser counterpart of `buildConfigurationFields`. It is safe\n * to call in browser environments because it has no Node.js dependencies.\n *\n * @param customConfig - Optional partial user-supplied Intlayer config.\n * @returns A browser-safe configuration object ready for `window.INTLAYER_CONFIG`.\n *\n * @example\n * ```ts\n * import { buildBrowserConfiguration } from '@intlayer/config/client';\n *\n * window.INTLAYER_CONFIG = buildBrowserConfiguration({\n *   internationalization: { locales: ['en', 'fr'], defaultLocale: 'en' },\n * });\n * ```\n */\nexport const buildBrowserConfiguration = (\n  customConfig?: CustomIntlayerConfig\n): BrowserIntlayerConfig => {\n  const { locales, defaultLocale } = buildInternationalizationFields(\n    customConfig?.internationalization\n  );\n  const routing = buildRoutingFields(customConfig?.routing);\n  const {\n    clientId: _clientId,\n    clientSecret: _clientSecret,\n    ...editorPublic\n  } = buildEditorFields(customConfig?.editor);\n  const analytics = buildAnalyticsFields(customConfig?.analytics);\n  const { mode, prefix } = buildLogFields(customConfig?.log);\n\n  return {\n    internationalization: { locales, defaultLocale },\n    routing,\n    editor: editorPublic,\n    analytics,\n    log: { mode, prefix },\n  };\n};\n\n/**\n * Extract a {@link BrowserIntlayerConfig} from an already-built full\n * {@link IntlayerConfig}.\n *\n * Used by build plugins (`vite-intlayer`, `withIntlayer`) which already hold\n * the full server-side config and need to inject the browser-safe subset at\n * compile time via a bundler `define`.\n *\n * @param config - A fully-built server-side Intlayer configuration.\n * @returns The browser-safe subset of that configuration.\n */\nexport const extractBrowserConfiguration = (\n  config: IntlayerConfig\n): BrowserIntlayerConfig => ({\n  internationalization: {\n    locales: config.internationalization.locales,\n    defaultLocale: config.internationalization.defaultLocale,\n  },\n  routing: {\n    mode: config.routing.mode,\n    enableProxy: config.routing.enableProxy,\n    storage: config.routing.storage,\n    basePath: config.routing.basePath,\n    rewrite: config.routing.rewrite,\n  },\n  editor: {\n    applicationURL: config.editor.applicationURL,\n    editorURL: config.editor.editorURL,\n    cmsURL: config.editor.cmsURL,\n    backendURL: config.editor.backendURL,\n    port: config.editor.port,\n    enabled: config.editor.enabled,\n    dictionaryPriorityStrategy: config.editor.dictionaryPriorityStrategy,\n    liveSync: config.editor.liveSync,\n    liveSyncPort: config.editor.liveSyncPort,\n    liveSyncURL: config.editor.liveSyncURL,\n  },\n  analytics: buildAnalyticsFields(config.analytics),\n  log: {\n    mode: config.log.mode,\n    prefix: config.log.prefix,\n  },\n});\n"],"mappings":";;;;;;;;;;;;;;;AAoFA,MAAa,mCACX,yBACgC;;;;;;;CAOhC,SAAS,qBAAqB,WAAWA;;;;;;;;;;CAWzC,iBACE,qBAAqB,mBACrB,qBAAqB,WACrBC;;;;;;;;;CAUF,YAAY,qBAAqB;;;;;;CAOjC,eAAe,qBAAqB;AACtC;;;;;;;AAQA,MAAa,sBACX,wBACkB;CAClB,MAAM,UAAU,qBAAqB,WAAWC;CAEhD,OAAO;;;;;;;;;;;;;;;;;;;;;;;EAuBL,MAAM,qBAAqB;;;;;;;;;;;;;;;EAgB3B,aAAa,qBAAqB;;;;;;;;;;EAWlC,SAASC,wDAAqB,OAAO;;;;;;;;;;;;EAarC,UAAU,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA6B/B,SAAS,qBAAqB;;;;;;EAO9B,SAAS,qBAAqB;CAChC;AACF;;;;;;;;;;;;;;;;;;;AAoBA,MAAa,qBACX,wBACiB;CACjB,MAAM,eAAe,qBAAqB;CAC1C,OAAO;;;;;;;;EAQL,gBAAgB,qBAAqB;;;;;;;;EASrC,WAAW,qBAAqB;;;;EAKhC,QAAQ,qBAAqB;;;;;;EAO7B,YAAY,qBAAqB;;;;;EAMjC,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;EAsB3B,SAAS,qBAAqB;;;;;;;;;;EAW9B,UAAU,qBAAqB;;;;;;;;;;EAW/B,cAAc,qBAAqB;;;;;;;;;;;EAYnC,4BACE,qBAAqB;;;;;;;;;EAWvB,UAAU,qBAAqB;;;;;;EAO/B;;;;;;EAOA,aACE,qBAAqB,eAAe,oBAAoB;CAC5D;AACF;;;;;;;;;;;;;;;;;;AAmBA,MAAa,wBACX,qBACA,qBAAqB,UACA;;;;;;CAMrB,SACE,qBAAqB,oBAAiC;;;;;;CAOxD,eAAe,qBAAqB;;;;;;CAOpC,YAAY,qBAAqB;AACnC;;;;;;;;AASA,MAAa,kBACX,qBACA,kBACe;;;;;;;;;;CAUf,MAAM,qBAAqB;;;;;;;;CAS3B,QAAQ,qBAAqB,UAAUC;;;;CAKvC,OAAO,cAAc;CACrB,KAAK,cAAc;CACnB,MAAM,cAAc;CACpB,MAAM,cAAc;AACtB;;;;;;;;;;;;;;;;;;;;;;;AA4BA,MAAa,6BACX,iBAC0B;CAC1B,MAAM,EAAE,SAAS,kBAAkB,gCACjC,cAAc,oBAChB;CACA,MAAM,UAAU,mBAAmB,cAAc,OAAO;CACxD,MAAM,EACJ,UAAU,WACV,cAAc,eACd,GAAG,iBACD,kBAAkB,cAAc,MAAM;CAC1C,MAAM,YAAY,qBAAqB,cAAc,SAAS;CAC9D,MAAM,EAAE,MAAM,WAAW,eAAe,cAAc,GAAG;CAEzD,OAAO;EACL,sBAAsB;GAAE;GAAS;EAAc;EAC/C;EACA,QAAQ;EACR;EACA,KAAK;GAAE;GAAM;EAAO;CACtB;AACF;;;;;;;;;;;;AAaA,MAAa,+BACX,YAC2B;CAC3B,sBAAsB;EACpB,SAAS,OAAO,qBAAqB;EACrC,eAAe,OAAO,qBAAqB;CAC7C;CACA,SAAS;EACP,MAAM,OAAO,QAAQ;EACrB,aAAa,OAAO,QAAQ;EAC5B,SAAS,OAAO,QAAQ;EACxB,UAAU,OAAO,QAAQ;EACzB,SAAS,OAAO,QAAQ;CAC1B;CACA,QAAQ;EACN,gBAAgB,OAAO,OAAO;EAC9B,WAAW,OAAO,OAAO;EACzB,QAAQ,OAAO,OAAO;EACtB,YAAY,OAAO,OAAO;EAC1B,MAAM,OAAO,OAAO;EACpB,SAAS,OAAO,OAAO;EACvB,4BAA4B,OAAO,OAAO;EAC1C,UAAU,OAAO,OAAO;EACxB,cAAc,OAAO,OAAO;EAC5B,aAAa,OAAO,OAAO;CAC7B;CACA,WAAW,qBAAqB,OAAO,SAAS;CAChD,KAAK;EACH,MAAM,OAAO,IAAI;EACjB,QAAQ,OAAO,IAAI;CACrB;AACF"}
+{"version":3,"file":"buildBrowserConfiguration.cjs","names":["LOCALES","REQUIRED_LOCALES","STORAGE","getStorageAttributes","PREFIX"],"sources":["../../../src/configFile/buildBrowserConfiguration.ts"],"sourcesContent":["import type {\n  AnalyticsConfig,\n  CustomIntlayerConfig,\n  CustomRoutingConfig,\n  EditorConfig,\n  InternationalizationConfig,\n  IntlayerConfig,\n  LogConfig,\n  LogFunctions,\n  RoutingConfig,\n} from '@intlayer/types/config';\nimport {\n  ANALYTICS_ENABLED,\n  ANALYTICS_FLUSH_INTERVAL,\n  ANALYTICS_SAMPLE_RATE,\n} from '../defaultValues/analytics';\nimport {\n  APPLICATION_URL,\n  BACKEND_URL,\n  CMS_URL,\n  DICTIONARY_PRIORITY_STRATEGY,\n  EDITOR_URL,\n  IS_ENABLED,\n  LIVE_SYNC,\n  LIVE_SYNC_PORT,\n  PORT,\n} from '../defaultValues/editor';\nimport {\n  DEFAULT_LOCALE,\n  LOCALES,\n  REQUIRED_LOCALES,\n  STRICT_MODE,\n} from '../defaultValues/internationalization';\nimport { MODE, PREFIX } from '../defaultValues/log';\nimport {\n  BASE_PATH,\n  ENABLE_PROXY,\n  ROUTING_MODE,\n  STORAGE,\n} from '../defaultValues/routing';\nimport { getStorageAttributes } from '../utils/getStorageAttributes';\n\n// ---------------------------------------------------------------------------\n// Type\n// ---------------------------------------------------------------------------\n\n/**\n * Browser-safe subset of {@link IntlayerConfig}.\n *\n * Excludes server-only fields (`system`, `content`, `build`, `compiler`,\n * `dictionary`, `ai`) and the `editor.clientSecret`, which must never be\n * shipped to the browser.\n *\n * `editor.clientId` is kept: it is the **public** project key, used by\n * `@intlayer/analytics` to identify the project when exchanging it for a\n * short-lived ingest token. It grants nothing on its own — every credentialed\n * backend call needs the secret, which only ever exists server-side.\n */\nexport type BrowserIntlayerConfig = {\n  internationalization: Pick<\n    InternationalizationConfig,\n    'locales' | 'defaultLocale'\n  >;\n  routing: RoutingConfig;\n  editor: Omit<EditorConfig, 'clientSecret'>;\n  analytics: AnalyticsConfig;\n  log: Pick<LogConfig, 'mode' | 'prefix'>;\n};\n\ndeclare global {\n  interface Window {\n    /** Browser-safe Intlayer configuration injected by a build plugin or `installIntlayer`. */\n    INTLAYER_CONFIG?: BrowserIntlayerConfig;\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Shared field builders (browser-safe — no Node.js APIs)\n//\n// These functions are re-used by both `buildBrowserConfiguration` (browser)\n// and `buildConfigurationFields` (server) to avoid duplication.\n// ---------------------------------------------------------------------------\n\n/**\n * Build the internationalization section of the Intlayer configuration.\n *\n * @param customConfiguration - Partial user-supplied internationalization config.\n * @returns A fully-defaulted {@link InternationalizationConfig}.\n */\nexport const buildInternationalizationFields = (\n  customConfiguration?: Partial<InternationalizationConfig>\n): InternationalizationConfig => ({\n  /**\n   * Locales available in the application\n   *\n   * Default: ['en']\n   *\n   */\n  locales: customConfiguration?.locales ?? LOCALES,\n\n  /**\n   * Locales required by TypeScript to ensure strong implementations of internationalized content using typescript.\n   *\n   * Default: []\n   *\n   * If empty, all locales are required in `strict` mode.\n   *\n   * Ensure required locales are also defined in the `locales` field.\n   */\n  requiredLocales:\n    customConfiguration?.requiredLocales ??\n    customConfiguration?.locales ??\n    REQUIRED_LOCALES,\n\n  /**\n   * Ensure strong implementations of internationalized content using typescript.\n   * - If set to \"strict\", the translation `t` function will require each declared locales to be defined. If one locale is missing, or if a locale is not declared in your config, it will throw an error.\n   * - If set to \"inclusive\", the translation `t` function will require each declared locales to be defined. If one locale is missing, it will throw a warning. But will accept if a locale is not declared in your config, but exist.\n   * - If set to \"loose\", the translation `t` function will accept any existing locale.\n   *\n   * Default: \"inclusive\"\n   */\n  strictMode: customConfiguration?.strictMode ?? STRICT_MODE,\n\n  /**\n   * Default locale of the application for fallback\n   *\n   * Default: 'en'\n   */\n  defaultLocale: customConfiguration?.defaultLocale ?? DEFAULT_LOCALE,\n});\n\n/**\n * Build the routing section of the Intlayer configuration.\n *\n * @param customConfiguration - Partial user-supplied routing config.\n * @returns A fully-defaulted {@link RoutingConfig}.\n */\nexport const buildRoutingFields = (\n  customConfiguration?: Partial<CustomRoutingConfig>\n): RoutingConfig => {\n  const storage = customConfiguration?.storage ?? STORAGE;\n\n  return {\n    /**\n     * URL routing mode for locale handling\n     *\n     * Controls how locales are represented in application URLs:\n     * - 'prefix-no-default': Prefix all locales except the default locale (default)\n     *    - en → /dashboard\n     *    - fr → /fr/dashboard\n     *\n     * - 'prefix-all': Prefix all locales including the default locale\n     *    - en → /en/dashboard\n     *    - fr → /fr/dashboard\n     *\n     * - 'search-params': Use search parameters for locale handling\n     *    - en → /dashboard?locale=en\n     *    - fr → /fr/dashboard?locale=fr\n     *\n     * - 'no-prefix': No locale prefixing in URLs\n     *    - en → /dashboard\n     *    - fr → /dashboard\n     *\n     * Default: 'prefix-no-default'\n     */\n    mode: customConfiguration?.mode ?? ROUTING_MODE,\n\n    /**\n     * Enables the Intlayer locale-routing proxy (middleware).\n     *\n     * When enabled, the build-tool integration (e.g. the `intlayer()` Vite plugin)\n     * automatically wires the locale-detection / redirect / rewrite middleware in\n     * development, preview, and production SSR.\n     *\n     * - `undefined` (auto, default): the proxy runs, but development and preview\n     *   servers ignore the stored locale (cookie / header) as a redirect source.\n     * - `true`: full proxy behaviour in every environment.\n     * - `false`: no locale routing; the proxy is not registered.\n     *\n     * Default: undefined (auto)\n     */\n    enableProxy: customConfiguration?.enableProxy ?? ENABLE_PROXY,\n\n    /**\n     * Configuration for storing the locale in the client (localStorage or sessionStorage)\n     *\n     * If false, the locale will not be stored by the middleware.\n     * If true, the locale storage will consider all default values. (cookie and header)\n     *\n     * Default: ['cookie', 'header']\n     *\n     */\n    storage: getStorageAttributes(storage),\n\n    /**\n     * Base path of the application URL\n     *\n     * Default: ''\n     *\n     * Example:\n     * - If the application is hosted at https://example.com/my-app\n     * - The base path is '/my-app'\n     * - The URL will be https://example.com/my-app/en\n     * - If the base path is not set, the URL will be https://example.com/en\n     */\n    basePath: customConfiguration?.basePath ?? BASE_PATH,\n\n    /**\n     * Custom URL rewriting rules that override the default routing mode for specific paths.\n     * Allows you to define locale-specific paths that differ from the standard routing behavior.\n     * Supports dynamic route parameters using `[param]` syntax.\n     *\n     * Default: undefined\n     *\n     * Example:\n     * ```typescript\n     * rewrite: {\n     *   \"/about\": {\n     *     en: \"/about\",\n     *     fr: \"/a-propos\",\n     *   },\n     *   \"/product/[slug]\": {\n     *     en: \"/product/[slug]\",\n     *     fr: \"/produit/[slug]\",\n     *   },\n     * }\n     * ```\n     *\n     * Note:\n     * - The rewrite rules take precedence over the default `mode` behavior.\n     * - If a path matches a rewrite rule, the localized path from the rewrite configuration will be used.\n     * - Dynamic route parameters are supported using bracket notation (e.g., `[slug]`, `[id]`).\n     * - Works with both Next.js and Vite applications.\n     */\n    rewrite: customConfiguration?.rewrite,\n\n    /**\n     * Maps locales to specific domain hostnames for domain-based routing.\n     *\n     * Default: undefined\n     */\n    domains: customConfiguration?.domains,\n  };\n};\n\n/**\n * Build the editor section of the Intlayer configuration.\n *\n * Returns the **full** {@link EditorConfig} including sensitive fields\n * (`clientId`, `clientSecret`). The browser-safe {@link BrowserIntlayerConfig}\n * omits those fields when exposing config to the client.\n *\n * `clientId` / `clientSecret` are never inferred from the environment: the\n * configuration file is the single source of truth. A project that wants to\n * authenticate from its `.env` file must wire the variables explicitly, e.g.\n * `clientId: process.env.INTLAYER_CLIENT_ID`. Commenting those lines out is\n * therefore enough to disable every credentialed behaviour (remote dictionary\n * fetching, CMS access) even when the variables remain defined in the\n * environment.\n *\n * @param customConfiguration - Partial user-supplied editor config.\n * @returns A fully-defaulted {@link EditorConfig}.\n */\nexport const buildEditorFields = (\n  customConfiguration?: Partial<EditorConfig>\n): EditorConfig => {\n  const liveSyncPort = customConfiguration?.liveSyncPort ?? LIVE_SYNC_PORT;\n  return {\n    /**\n     * URL of the application. Used to restrict the origin of the editor for security reasons.\n     *\n     * > '*' means that the editor is accessible from any origin\n     *\n     * Default: '*'\n     */\n    applicationURL: customConfiguration?.applicationURL || APPLICATION_URL,\n\n    /**\n     * URL of the editor server. Used to restrict the origin of the editor for security reasons.\n     *\n     * > '*' means that the editor is accessible from any origin\n     *\n     * Default: '*'\n     */\n    editorURL: customConfiguration?.editorURL || EDITOR_URL,\n\n    /**\n     * URL of the CMS server. Used to restrict the origin of the editor for security reasons.\n     */\n    cmsURL: customConfiguration?.cmsURL || CMS_URL,\n\n    /**\n     * URL of the editor server\n     *\n     * Default: 'https://back.intlayer.org'\n     */\n    backendURL: customConfiguration?.backendURL || BACKEND_URL,\n\n    /** Port of the editor server\n     *\n     * Default: 8000\n     */\n    port: customConfiguration?.port ?? PORT,\n\n    /**\n     * Indicates if the application interact with the visual editor\n     *\n     * Default: false;\n     *\n     * If true, the editor will be able to interact with the application.\n     * If false, the editor will not be able to interact with the application.\n     * In any case, the editor can only be enabled by the visual editor.\n     * Disabling the editor for specific environments is a way to enforce the security.\n     *\n     * Usage:\n     * ```js\n     * {\n     *  // Other configurations\n     *  editor: {\n     *   enabled: process.env.NODE_ENV !== 'production',\n     *  }\n     * };\n     * ```\n     */\n    enabled: customConfiguration?.enabled ?? IS_ENABLED,\n\n    /**\n     * clientId and clientSecret allow the intlayer packages to authenticate with the backend using oAuth2 authentication.\n     * An access token is use to authenticate the user related to the project.\n     * To get an access token, go to https://app.intlayer.org/project and create an account.\n     *\n     * Default: undefined\n     *\n     * > Important: The clientId and clientSecret should be kept secret and not shared publicly. Please ensure to keep them in a secure location, such as environment variables.\n     */\n    clientId: customConfiguration?.clientId,\n\n    /**\n     * clientId and clientSecret allow the intlayer packages to authenticate with the backend using oAuth2 authentication.\n     * An access token is use to authenticate the user related to the project.\n     * To get an access token, go to https://app.intlayer.org/project and create an account.\n     *\n     * Default: undefined\n     *\n     * > Important: The clientId and clientSecret should be kept secret and not shared publicly. Please ensure to keep them in a secure location, such as environment variables.\n     */\n    clientSecret: customConfiguration?.clientSecret,\n\n    /**\n     * Strategy for prioritizing dictionaries. If a dictionary is both present online and locally, the content will be merge.\n     * However, is a field is defined in both dictionary, this setting determines which fields takes the priority over the other.\n     *\n     * Default: 'local_first'\n     *\n     * The strategy for prioritizing dictionaries. It can be either 'local_first' or 'distant_first'.\n     * - 'local_first': The first dictionary found in the locale is used.\n     * - 'distant_first': The first dictionary found in the distant locales is used.\n     */\n    dictionaryPriorityStrategy:\n      customConfiguration?.dictionaryPriorityStrategy ??\n      DICTIONARY_PRIORITY_STRATEGY,\n\n    /**\n     * Indicates if the application should hot reload the locale configurations when a change is detected.\n     * For example, when a new dictionary is added or updated, the application will update the content tu display in the page.\n     *\n     * The hot reload is only available for clients of the `enterprise` plan.\n     *\n     * Default: false\n     */\n    liveSync: customConfiguration?.liveSync ?? LIVE_SYNC,\n\n    /**\n     * Port of the live sync server\n     *\n     * Default: 4000\n     */\n    liveSyncPort,\n\n    /**\n     * URL of the live sync server in case of remote live sync server\n     *\n     * Default: `http://localhost:${LIVE_SYNC_PORT}`\n     */\n    liveSyncURL:\n      customConfiguration?.liveSyncURL ?? `http://localhost:${liveSyncPort}`,\n  };\n};\n\n/**\n * Build the analytics section of the Intlayer configuration.\n *\n * Analytics is opt-out: `enabled` defaults to `true`, so installing the\n * optional `@intlayer/analytics` package is enough to turn it on. The runtime\n * additionally requires a project key (`editor.clientId`) for attribution\n * before collecting anything.\n *\n * An explicit `enabled` value always wins, so a project whose package manager\n * hides the package from the project root can still opt back in.\n *\n * @param customConfiguration - Partial user-supplied analytics config.\n * @param isPackageInstalled - Whether `@intlayer/analytics` is installed in the\n *   project. Browser callers cannot resolve packages and pass `true`, letting\n *   the runtime dynamic `import()` fail silently when it is absent.\n * @returns A fully-defaulted {@link AnalyticsConfig}.\n */\nexport const buildAnalyticsFields = (\n  customConfiguration?: Partial<AnalyticsConfig>,\n  isPackageInstalled = true\n): AnalyticsConfig => ({\n  /**\n   * Enables analytics collection (page views, content exposures, A/B events).\n   *\n   * Default: true, as soon as `@intlayer/analytics` is installed.\n   */\n  enabled:\n    customConfiguration?.enabled ?? (ANALYTICS_ENABLED && isPackageInstalled),\n\n  /**\n   * Milliseconds between automatic batched flushes to the backend.\n   *\n   * Default: 20000\n   */\n  flushInterval: customConfiguration?.flushInterval ?? ANALYTICS_FLUSH_INTERVAL,\n\n  /**\n   * Fraction of sessions to record, from 0 (none) to 1 (all).\n   *\n   * Default: 1\n   */\n  sampleRate: customConfiguration?.sampleRate ?? ANALYTICS_SAMPLE_RATE,\n});\n\n/**\n * Build the log section of the Intlayer configuration.\n *\n * @param customConfiguration - Partial user-supplied log config.\n * @param logFunctions - Optional custom log function overrides (server-only).\n * @returns A fully-defaulted {@link LogConfig}.\n */\nexport const buildLogFields = (\n  customConfiguration?: Partial<LogConfig>,\n  logFunctions?: LogFunctions\n): LogConfig => ({\n  /**\n   * Indicates if the logger is enabled\n   *\n   * Default: 'prefix-no-default'\n   *\n   * If 'default', the logger is enabled and can be used.\n   * If 'verbose', the logger will be enabled and can be used, but will log more information.\n   * If 'disabled', the logger is disabled and cannot be used.\n   */\n  mode: customConfiguration?.mode ?? MODE,\n\n  /**\n   * Prefix of the logger\n   *\n   * Default: '[intlayer]'\n   *\n   * The prefix of the logger.\n   */\n  prefix: customConfiguration?.prefix ?? PREFIX,\n\n  /**\n   * Functions to log\n   */\n  error: logFunctions?.error,\n  log: logFunctions?.log,\n  info: logFunctions?.info,\n  warn: logFunctions?.warn,\n});\n\n// ---------------------------------------------------------------------------\n// Browser configuration builders\n// ---------------------------------------------------------------------------\n\n/**\n * Build a browser-safe {@link BrowserIntlayerConfig} from a raw user config.\n *\n * Applies defaults for every field and strips all server-only or sensitive\n * information (`system`, `content`, `build`, `compiler`, `dictionary`, `ai`,\n * `editor.clientSecret`). The public `editor.clientId` is kept — see\n * {@link BrowserIntlayerConfig}.\n *\n * This is the browser counterpart of `buildConfigurationFields`. It is safe\n * to call in browser environments because it has no Node.js dependencies.\n *\n * @param customConfig - Optional partial user-supplied Intlayer config.\n * @returns A browser-safe configuration object ready for `window.INTLAYER_CONFIG`.\n *\n * @example\n * ```ts\n * import { buildBrowserConfiguration } from '@intlayer/config/client';\n *\n * window.INTLAYER_CONFIG = buildBrowserConfiguration({\n *   internationalization: { locales: ['en', 'fr'], defaultLocale: 'en' },\n * });\n * ```\n */\nexport const buildBrowserConfiguration = (\n  customConfig?: CustomIntlayerConfig\n): BrowserIntlayerConfig => {\n  const { locales, defaultLocale } = buildInternationalizationFields(\n    customConfig?.internationalization\n  );\n  const routing = buildRoutingFields(customConfig?.routing);\n  const { clientSecret: _clientSecret, ...editorPublic } = buildEditorFields(\n    customConfig?.editor\n  );\n  const analytics = buildAnalyticsFields(customConfig?.analytics);\n  const { mode, prefix } = buildLogFields(customConfig?.log);\n\n  return {\n    internationalization: { locales, defaultLocale },\n    routing,\n    editor: editorPublic,\n    analytics,\n    log: { mode, prefix },\n  };\n};\n\n/**\n * Extract a {@link BrowserIntlayerConfig} from an already-built full\n * {@link IntlayerConfig}.\n *\n * Used by build plugins (`vite-intlayer`, `withIntlayer`) which already hold\n * the full server-side config and need to inject the browser-safe subset at\n * compile time via a bundler `define`.\n *\n * @param config - A fully-built server-side Intlayer configuration.\n * @returns The browser-safe subset of that configuration.\n */\nexport const extractBrowserConfiguration = (\n  config: IntlayerConfig\n): BrowserIntlayerConfig => {\n  // Destructured rather than picked field by field so that any future addition\n  // to `EditorConfig` is carried over automatically, while `clientSecret` stays\n  // excluded by construction.\n  const { clientSecret: _clientSecret, ...editorPublic } = config.editor;\n\n  return {\n    internationalization: {\n      locales: config.internationalization.locales,\n      defaultLocale: config.internationalization.defaultLocale,\n    },\n    routing: {\n      mode: config.routing.mode,\n      enableProxy: config.routing.enableProxy,\n      storage: config.routing.storage,\n      basePath: config.routing.basePath,\n      rewrite: config.routing.rewrite,\n    },\n    editor: editorPublic,\n    analytics: buildAnalyticsFields(config.analytics),\n    log: {\n      mode: config.log.mode,\n      prefix: config.log.prefix,\n    },\n  };\n};\n"],"mappings":";;;;;;;;;;;;;;;AAyFA,MAAa,mCACX,yBACgC;;;;;;;CAOhC,SAAS,qBAAqB,WAAWA;;;;;;;;;;CAWzC,iBACE,qBAAqB,mBACrB,qBAAqB,WACrBC;;;;;;;;;CAUF,YAAY,qBAAqB;;;;;;CAOjC,eAAe,qBAAqB;AACtC;;;;;;;AAQA,MAAa,sBACX,wBACkB;CAClB,MAAM,UAAU,qBAAqB,WAAWC;CAEhD,OAAO;;;;;;;;;;;;;;;;;;;;;;;EAuBL,MAAM,qBAAqB;;;;;;;;;;;;;;;EAgB3B,aAAa,qBAAqB;;;;;;;;;;EAWlC,SAASC,wDAAqB,OAAO;;;;;;;;;;;;EAarC,UAAU,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA6B/B,SAAS,qBAAqB;;;;;;EAO9B,SAAS,qBAAqB;CAChC;AACF;;;;;;;;;;;;;;;;;;;AAoBA,MAAa,qBACX,wBACiB;CACjB,MAAM,eAAe,qBAAqB;CAC1C,OAAO;;;;;;;;EAQL,gBAAgB,qBAAqB;;;;;;;;EASrC,WAAW,qBAAqB;;;;EAKhC,QAAQ,qBAAqB;;;;;;EAO7B,YAAY,qBAAqB;;;;;EAMjC,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;EAsB3B,SAAS,qBAAqB;;;;;;;;;;EAW9B,UAAU,qBAAqB;;;;;;;;;;EAW/B,cAAc,qBAAqB;;;;;;;;;;;EAYnC,4BACE,qBAAqB;;;;;;;;;EAWvB,UAAU,qBAAqB;;;;;;EAO/B;;;;;;EAOA,aACE,qBAAqB,eAAe,oBAAoB;CAC5D;AACF;;;;;;;;;;;;;;;;;;AAmBA,MAAa,wBACX,qBACA,qBAAqB,UACA;;;;;;CAMrB,SACE,qBAAqB,oBAAiC;;;;;;CAOxD,eAAe,qBAAqB;;;;;;CAOpC,YAAY,qBAAqB;AACnC;;;;;;;;AASA,MAAa,kBACX,qBACA,kBACe;;;;;;;;;;CAUf,MAAM,qBAAqB;;;;;;;;CAS3B,QAAQ,qBAAqB,UAAUC;;;;CAKvC,OAAO,cAAc;CACrB,KAAK,cAAc;CACnB,MAAM,cAAc;CACpB,MAAM,cAAc;AACtB;;;;;;;;;;;;;;;;;;;;;;;;AA6BA,MAAa,6BACX,iBAC0B;CAC1B,MAAM,EAAE,SAAS,kBAAkB,gCACjC,cAAc,oBAChB;CACA,MAAM,UAAU,mBAAmB,cAAc,OAAO;CACxD,MAAM,EAAE,cAAc,eAAe,GAAG,iBAAiB,kBACvD,cAAc,MAChB;CACA,MAAM,YAAY,qBAAqB,cAAc,SAAS;CAC9D,MAAM,EAAE,MAAM,WAAW,eAAe,cAAc,GAAG;CAEzD,OAAO;EACL,sBAAsB;GAAE;GAAS;EAAc;EAC/C;EACA,QAAQ;EACR;EACA,KAAK;GAAE;GAAM;EAAO;CACtB;AACF;;;;;;;;;;;;AAaA,MAAa,+BACX,WAC0B;CAI1B,MAAM,EAAE,cAAc,eAAe,GAAG,iBAAiB,OAAO;CAEhE,OAAO;EACL,sBAAsB;GACpB,SAAS,OAAO,qBAAqB;GACrC,eAAe,OAAO,qBAAqB;EAC7C;EACA,SAAS;GACP,MAAM,OAAO,QAAQ;GACrB,aAAa,OAAO,QAAQ;GAC5B,SAAS,OAAO,QAAQ;GACxB,UAAU,OAAO,QAAQ;GACzB,SAAS,OAAO,QAAQ;EAC1B;EACA,QAAQ;EACR,WAAW,qBAAqB,OAAO,SAAS;EAChD,KAAK;GACH,MAAM,OAAO,IAAI;GACjB,QAAQ,OAAO,IAAI;EACrB;CACF;AACF"}

package/dist/cjs/secrets.browser.cjs

@@ -0,0 +1,21 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+//#region src/secrets.browser.ts
+/**
+* Browser stub for {@link file://./secrets.ts}.
+*
+* Selected through the `browser` export condition of
+* `@intlayer/config/secrets`, so a client bundle resolves the credential
+* accessor to an inert function instead of pulling the configuration loader —
+* and the secret itself — into a public asset.
+*/
+/**
+* Always `undefined` in the browser: the CMS client secret grants project-wide
+* API access and must never leave the server.
+*
+* @returns `undefined`.
+*/
+const getEditorClientSecret = () => void 0;
+
+//#endregion
+exports.getEditorClientSecret = getEditorClientSecret;
+//# sourceMappingURL=secrets.browser.cjs.map

package/dist/cjs/secrets.browser.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.browser.cjs","names":[],"sources":["../../src/secrets.browser.ts"],"sourcesContent":["/**\n * Browser stub for {@link file://./secrets.ts}.\n *\n * Selected through the `browser` export condition of\n * `@intlayer/config/secrets`, so a client bundle resolves the credential\n * accessor to an inert function instead of pulling the configuration loader —\n * and the secret itself — into a public asset.\n */\n\n/**\n * Always `undefined` in the browser: the CMS client secret grants project-wide\n * API access and must never leave the server.\n *\n * @returns `undefined`.\n */\nexport const getEditorClientSecret = (): string | undefined => undefined;\n"],"mappings":";;;;;;;;;;;;;;;;AAeA,MAAa,8BAAkD"}

package/dist/cjs/secrets.cjs

@@ -0,0 +1,47 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+//#region src/secrets.ts
+/**
+* Server-only access to the sensitive parts of the Intlayer configuration.
+*
+* `@intlayer/config/built` is aliased by every framework integration to a
+* generated file that the bundle **inlines**, and the same alias is installed
+* for the client and the server build. Anything it carries that browser code
+* imports therefore ends up in a public asset, which is why the generated file
+* never contains `editor.clientSecret`.
+*
+* This module is the server-side counterpart. It is deliberately *not* aliased:
+* it resolves through the package's export map, whose `browser` condition
+* points at {@link file://./secrets.browser.ts} — an inert stub. Every
+* major bundler (webpack, Rspack, Turbopack, Vite, Rollup, esbuild, Metro)
+* honours that condition, so a browser build resolves to the stub without any
+* integration-specific configuration.
+*
+* It intentionally imports nothing: pulling the configuration loader in here
+* would drag the whole resolved configuration — and the machinery that builds
+* it — into every server bundle that touches a credentialed API.
+*
+* @example
+* ```ts
+* import { getEditorClientSecret } from '@intlayer/config/secrets';
+*
+* const clientSecret = config.editor.clientSecret ?? getEditorClientSecret();
+* ```
+*/
+/**
+* Returns the CMS client secret from the environment, or `undefined` when it is
+* not set.
+*
+* The configuration file stays the source of truth for *whether* credentials
+* are active — a project opts in by wiring `clientId` (conventionally
+* `clientId: process.env.INTLAYER_CLIENT_ID`), and callers gate on the public
+* `editor.clientId` from `@intlayer/config/built` before asking for the secret.
+* This function only supplies the confidential half, which the generated
+* configuration deliberately does not carry.
+*
+* @returns The OAuth2 client secret, or `undefined`.
+*/
+const getEditorClientSecret = () => typeof process === "undefined" ? void 0 : process.env?.INTLAYER_CLIENT_SECRET;
+
+//#endregion
+exports.getEditorClientSecret = getEditorClientSecret;
+//# sourceMappingURL=secrets.cjs.map

package/dist/cjs/secrets.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.cjs","names":[],"sources":["../../src/secrets.ts"],"sourcesContent":["/**\n * Server-only access to the sensitive parts of the Intlayer configuration.\n *\n * `@intlayer/config/built` is aliased by every framework integration to a\n * generated file that the bundle **inlines**, and the same alias is installed\n * for the client and the server build. Anything it carries that browser code\n * imports therefore ends up in a public asset, which is why the generated file\n * never contains `editor.clientSecret`.\n *\n * This module is the server-side counterpart. It is deliberately *not* aliased:\n * it resolves through the package's export map, whose `browser` condition\n * points at {@link file://./secrets.browser.ts} — an inert stub. Every\n * major bundler (webpack, Rspack, Turbopack, Vite, Rollup, esbuild, Metro)\n * honours that condition, so a browser build resolves to the stub without any\n * integration-specific configuration.\n *\n * It intentionally imports nothing: pulling the configuration loader in here\n * would drag the whole resolved configuration — and the machinery that builds\n * it — into every server bundle that touches a credentialed API.\n *\n * @example\n * ```ts\n * import { getEditorClientSecret } from '@intlayer/config/secrets';\n *\n * const clientSecret = config.editor.clientSecret ?? getEditorClientSecret();\n * ```\n */\n\n/**\n * Returns the CMS client secret from the environment, or `undefined` when it is\n * not set.\n *\n * The configuration file stays the source of truth for *whether* credentials\n * are active — a project opts in by wiring `clientId` (conventionally\n * `clientId: process.env.INTLAYER_CLIENT_ID`), and callers gate on the public\n * `editor.clientId` from `@intlayer/config/built` before asking for the secret.\n * This function only supplies the confidential half, which the generated\n * configuration deliberately does not carry.\n *\n * @returns The OAuth2 client secret, or `undefined`.\n */\nexport const getEditorClientSecret = (): string | undefined =>\n  typeof process === 'undefined'\n    ? undefined\n    : process.env?.INTLAYER_CLIENT_SECRET;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAyCA,MAAa,8BACX,OAAO,YAAY,cACf,SACA,QAAQ,KAAK"}

package/dist/esm/bundle/index.mjs

@@ -1,7 +1,7 @@
 import { getAlias } from "../utils/alias.mjs";
 import { getConfiguration } from "../configFile/getConfiguration.mjs";
-import { BundleLogger } from "./logBundle.mjs";
 import { getConfigEnvVars } from "../envVars/envVars.mjs";
+import { BundleLogger } from "./logBundle.mjs";
 import { isAbsolute, join, resolve } from "node:path";
 import { mkdir, rm, writeFile } from "node:fs/promises";
 import configPackageJson from "@intlayer/types/package.json" with { type: "json" };

package/dist/esm/callers/base.mjs

@@ -6,34 +6,47 @@
 * through member access (`content.title`) or destructuring
 * (`const { title } = useIntlayer('home')`).
 */
-const BASE_CALLERS = [{
-	callerName: "useIntlayer",
-	library: "intlayer",
-	importSources: [
-		"intlayer",
-		"react-intlayer",
-		"next-intlayer",
-		"vue-intlayer",
-		"svelte-intlayer",
-		"solid-intlayer",
-		"preact-intlayer",
-		"angular-intlayer"
-	],
-	namespaceSources: [{
-		from: "argument",
-		index: 0
-	}],
-	translationFunction: "content"
-}, {
-	callerName: "getIntlayer",
-	library: "intlayer",
-	importSources: ["intlayer", "@intlayer/core"],
-	namespaceSources: [{
-		from: "argument",
-		index: 0
-	}],
-	translationFunction: "content"
-}];
+const BASE_CALLERS = [
+	{
+		callerName: "useIntlayer",
+		library: "intlayer",
+		importSources: [
+			"intlayer",
+			"react-intlayer",
+			"next-intlayer",
+			"vue-intlayer",
+			"svelte-intlayer",
+			"solid-intlayer",
+			"preact-intlayer",
+			"angular-intlayer"
+		],
+		namespaceSources: [{
+			from: "argument",
+			index: 0
+		}],
+		translationFunction: "content"
+	},
+	{
+		callerName: "getIntlayer",
+		library: "intlayer",
+		importSources: ["intlayer", "@intlayer/core"],
+		namespaceSources: [{
+			from: "argument",
+			index: 0
+		}],
+		translationFunction: "content"
+	},
+	{
+		callerName: "getIntlayerAsync",
+		library: "intlayer",
+		importSources: ["intlayer", "@intlayer/core"],
+		namespaceSources: [{
+			from: "argument",
+			index: 0
+		}],
+		translationFunction: "content"
+	}
+];
 
 //#endregion
 export { BASE_CALLERS };

package/dist/esm/callers/base.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"base.mjs","names":[],"sources":["../../../src/callers/base.ts"],"sourcesContent":["import type { CallerDescriptor } from './types';\n\n/**\n * Base intlayer getters — always active, independent of any compat library.\n *\n * Their result is the dictionary content object itself: fields are consumed\n * through member access (`content.title`) or destructuring\n * (`const { title } = useIntlayer('home')`).\n */\nexport const BASE_CALLERS: CallerDescriptor[] = [\n  {\n    callerName: 'useIntlayer',\n    library: 'intlayer',\n    importSources: [\n      'intlayer',\n      'react-intlayer',\n      'next-intlayer',\n      'vue-intlayer',\n      'svelte-intlayer',\n      'solid-intlayer',\n      'preact-intlayer',\n      'angular-intlayer',\n    ],\n    namespaceSources: [{ from: 'argument', index: 0 }],\n    translationFunction: 'content',\n  },\n  {\n    callerName: 'getIntlayer',\n    library: 'intlayer',\n    importSources: ['intlayer', '@intlayer/core'],\n    namespaceSources: [{ from: 'argument', index: 0 }],\n    translationFunction: 'content',\n  },\n];\n"],"mappings":";;;;;;;;AASA,MAAa,eAAmC,CAC9C;CACE,YAAY;CACZ,SAAS;CACT,eAAe;EACb;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF;CACA,kBAAkB,CAAC;EAAE,MAAM;EAAY,OAAO;CAAE,CAAC;CACjD,qBAAqB;AACvB,GACA;CACE,YAAY;CACZ,SAAS;CACT,eAAe,CAAC,YAAY,gBAAgB;CAC5C,kBAAkB,CAAC;EAAE,MAAM;EAAY,OAAO;CAAE,CAAC;CACjD,qBAAqB;AACvB,CACF"}
+{"version":3,"file":"base.mjs","names":[],"sources":["../../../src/callers/base.ts"],"sourcesContent":["import type { CallerDescriptor } from './types';\n\n/**\n * Base intlayer getters — always active, independent of any compat library.\n *\n * Their result is the dictionary content object itself: fields are consumed\n * through member access (`content.title`) or destructuring\n * (`const { title } = useIntlayer('home')`).\n */\nexport const BASE_CALLERS: CallerDescriptor[] = [\n  {\n    callerName: 'useIntlayer',\n    library: 'intlayer',\n    importSources: [\n      'intlayer',\n      'react-intlayer',\n      'next-intlayer',\n      'vue-intlayer',\n      'svelte-intlayer',\n      'solid-intlayer',\n      'preact-intlayer',\n      'angular-intlayer',\n    ],\n    namespaceSources: [{ from: 'argument', index: 0 }],\n    translationFunction: 'content',\n  },\n  {\n    callerName: 'getIntlayer',\n    library: 'intlayer',\n    importSources: ['intlayer', '@intlayer/core'],\n    namespaceSources: [{ from: 'argument', index: 0 }],\n    translationFunction: 'content',\n  },\n  {\n    // Async counterpart of `getIntlayer`: same content shape, reached through\n    // an `await`.\n    callerName: 'getIntlayerAsync',\n    library: 'intlayer',\n    importSources: ['intlayer', '@intlayer/core'],\n    namespaceSources: [{ from: 'argument', index: 0 }],\n    translationFunction: 'content',\n  },\n];\n"],"mappings":";;;;;;;;AASA,MAAa,eAAmC;CAC9C;EACE,YAAY;EACZ,SAAS;EACT,eAAe;GACb;GACA;GACA;GACA;GACA;GACA;GACA;GACA;EACF;EACA,kBAAkB,CAAC;GAAE,MAAM;GAAY,OAAO;EAAE,CAAC;EACjD,qBAAqB;CACvB;CACA;EACE,YAAY;EACZ,SAAS;EACT,eAAe,CAAC,YAAY,gBAAgB;EAC5C,kBAAkB,CAAC;GAAE,MAAM;GAAY,OAAO;EAAE,CAAC;EACjD,qBAAqB;CACvB;CACA;EAGE,YAAY;EACZ,SAAS;EACT,eAAe,CAAC,YAAY,gBAAgB;EAC5C,kBAAkB,CAAC;GAAE,MAAM;GAAY,OAAO;EAAE,CAAC;EACjD,qBAAqB;CACvB;AACF"}

package/dist/esm/configFile/buildBrowserConfiguration.mjs

@@ -354,7 +354,8 @@ const buildLogFields = (customConfiguration, logFunctions) => ({
 *
 * Applies defaults for every field and strips all server-only or sensitive
 * information (`system`, `content`, `build`, `compiler`, `dictionary`, `ai`,
-* `editor.clientId`, `editor.clientSecret`).
+* `editor.clientSecret`). The public `editor.clientId` is kept — see
+* {@link BrowserIntlayerConfig}.
 *
 * This is the browser counterpart of `buildConfigurationFields`. It is safe
 * to call in browser environments because it has no Node.js dependencies.
@@ -374,7 +375,7 @@ const buildLogFields = (customConfiguration, logFunctions) => ({
 const buildBrowserConfiguration = (customConfig) => {
 	const { locales, defaultLocale } = buildInternationalizationFields(customConfig?.internationalization);
 	const routing = buildRoutingFields(customConfig?.routing);
-	const { clientId: _clientId, clientSecret: _clientSecret, ...editorPublic } = buildEditorFields(customConfig?.editor);
+	const { clientSecret: _clientSecret, ...editorPublic } = buildEditorFields(customConfig?.editor);
 	const analytics = buildAnalyticsFields(customConfig?.analytics);
 	const { mode, prefix } = buildLogFields(customConfig?.log);
 	return {
@@ -402,36 +403,28 @@ const buildBrowserConfiguration = (customConfig) => {
 * @param config - A fully-built server-side Intlayer configuration.
 * @returns The browser-safe subset of that configuration.
 */
-const extractBrowserConfiguration = (config) => ({
-	internationalization: {
-		locales: config.internationalization.locales,
-		defaultLocale: config.internationalization.defaultLocale
-	},
-	routing: {
-		mode: config.routing.mode,
-		enableProxy: config.routing.enableProxy,
-		storage: config.routing.storage,
-		basePath: config.routing.basePath,
-		rewrite: config.routing.rewrite
-	},
-	editor: {
-		applicationURL: config.editor.applicationURL,
-		editorURL: config.editor.editorURL,
-		cmsURL: config.editor.cmsURL,
-		backendURL: config.editor.backendURL,
-		port: config.editor.port,
-		enabled: config.editor.enabled,
-		dictionaryPriorityStrategy: config.editor.dictionaryPriorityStrategy,
-		liveSync: config.editor.liveSync,
-		liveSyncPort: config.editor.liveSyncPort,
-		liveSyncURL: config.editor.liveSyncURL
-	},
-	analytics: buildAnalyticsFields(config.analytics),
-	log: {
-		mode: config.log.mode,
-		prefix: config.log.prefix
-	}
-});
+const extractBrowserConfiguration = (config) => {
+	const { clientSecret: _clientSecret, ...editorPublic } = config.editor;
+	return {
+		internationalization: {
+			locales: config.internationalization.locales,
+			defaultLocale: config.internationalization.defaultLocale
+		},
+		routing: {
+			mode: config.routing.mode,
+			enableProxy: config.routing.enableProxy,
+			storage: config.routing.storage,
+			basePath: config.routing.basePath,
+			rewrite: config.routing.rewrite
+		},
+		editor: editorPublic,
+		analytics: buildAnalyticsFields(config.analytics),
+		log: {
+			mode: config.log.mode,
+			prefix: config.log.prefix
+		}
+	};
+};
 
 //#endregion
 export { buildAnalyticsFields, buildBrowserConfiguration, buildEditorFields, buildInternationalizationFields, buildLogFields, buildRoutingFields, extractBrowserConfiguration };

package/dist/esm/configFile/buildBrowserConfiguration.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"buildBrowserConfiguration.mjs","names":[],"sources":["../../../src/configFile/buildBrowserConfiguration.ts"],"sourcesContent":["import type {\n  AnalyticsConfig,\n  CustomIntlayerConfig,\n  CustomRoutingConfig,\n  EditorConfig,\n  InternationalizationConfig,\n  IntlayerConfig,\n  LogConfig,\n  LogFunctions,\n  RoutingConfig,\n} from '@intlayer/types/config';\nimport {\n  ANALYTICS_ENABLED,\n  ANALYTICS_FLUSH_INTERVAL,\n  ANALYTICS_SAMPLE_RATE,\n} from '../defaultValues/analytics';\nimport {\n  APPLICATION_URL,\n  BACKEND_URL,\n  CMS_URL,\n  DICTIONARY_PRIORITY_STRATEGY,\n  EDITOR_URL,\n  IS_ENABLED,\n  LIVE_SYNC,\n  LIVE_SYNC_PORT,\n  PORT,\n} from '../defaultValues/editor';\nimport {\n  DEFAULT_LOCALE,\n  LOCALES,\n  REQUIRED_LOCALES,\n  STRICT_MODE,\n} from '../defaultValues/internationalization';\nimport { MODE, PREFIX } from '../defaultValues/log';\nimport {\n  BASE_PATH,\n  ENABLE_PROXY,\n  ROUTING_MODE,\n  STORAGE,\n} from '../defaultValues/routing';\nimport { getStorageAttributes } from '../utils/getStorageAttributes';\n\n// ---------------------------------------------------------------------------\n// Type\n// ---------------------------------------------------------------------------\n\n/**\n * Browser-safe subset of {@link IntlayerConfig}.\n *\n * Excludes server-only fields (`system`, `content`, `build`, `compiler`,\n * `dictionary`, `ai`) and sensitive editor credentials (`clientId`,\n * `clientSecret`) that must never be shipped to the browser.\n */\nexport type BrowserIntlayerConfig = {\n  internationalization: Pick<\n    InternationalizationConfig,\n    'locales' | 'defaultLocale'\n  >;\n  routing: RoutingConfig;\n  editor: Omit<EditorConfig, 'clientId' | 'clientSecret'>;\n  analytics: AnalyticsConfig;\n  log: Pick<LogConfig, 'mode' | 'prefix'>;\n};\n\ndeclare global {\n  interface Window {\n    /** Browser-safe Intlayer configuration injected by a build plugin or `installIntlayer`. */\n    INTLAYER_CONFIG?: BrowserIntlayerConfig;\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Shared field builders (browser-safe — no Node.js APIs)\n//\n// These functions are re-used by both `buildBrowserConfiguration` (browser)\n// and `buildConfigurationFields` (server) to avoid duplication.\n// ---------------------------------------------------------------------------\n\n/**\n * Build the internationalization section of the Intlayer configuration.\n *\n * @param customConfiguration - Partial user-supplied internationalization config.\n * @returns A fully-defaulted {@link InternationalizationConfig}.\n */\nexport const buildInternationalizationFields = (\n  customConfiguration?: Partial<InternationalizationConfig>\n): InternationalizationConfig => ({\n  /**\n   * Locales available in the application\n   *\n   * Default: ['en']\n   *\n   */\n  locales: customConfiguration?.locales ?? LOCALES,\n\n  /**\n   * Locales required by TypeScript to ensure strong implementations of internationalized content using typescript.\n   *\n   * Default: []\n   *\n   * If empty, all locales are required in `strict` mode.\n   *\n   * Ensure required locales are also defined in the `locales` field.\n   */\n  requiredLocales:\n    customConfiguration?.requiredLocales ??\n    customConfiguration?.locales ??\n    REQUIRED_LOCALES,\n\n  /**\n   * Ensure strong implementations of internationalized content using typescript.\n   * - If set to \"strict\", the translation `t` function will require each declared locales to be defined. If one locale is missing, or if a locale is not declared in your config, it will throw an error.\n   * - If set to \"inclusive\", the translation `t` function will require each declared locales to be defined. If one locale is missing, it will throw a warning. But will accept if a locale is not declared in your config, but exist.\n   * - If set to \"loose\", the translation `t` function will accept any existing locale.\n   *\n   * Default: \"inclusive\"\n   */\n  strictMode: customConfiguration?.strictMode ?? STRICT_MODE,\n\n  /**\n   * Default locale of the application for fallback\n   *\n   * Default: 'en'\n   */\n  defaultLocale: customConfiguration?.defaultLocale ?? DEFAULT_LOCALE,\n});\n\n/**\n * Build the routing section of the Intlayer configuration.\n *\n * @param customConfiguration - Partial user-supplied routing config.\n * @returns A fully-defaulted {@link RoutingConfig}.\n */\nexport const buildRoutingFields = (\n  customConfiguration?: Partial<CustomRoutingConfig>\n): RoutingConfig => {\n  const storage = customConfiguration?.storage ?? STORAGE;\n\n  return {\n    /**\n     * URL routing mode for locale handling\n     *\n     * Controls how locales are represented in application URLs:\n     * - 'prefix-no-default': Prefix all locales except the default locale (default)\n     *    - en → /dashboard\n     *    - fr → /fr/dashboard\n     *\n     * - 'prefix-all': Prefix all locales including the default locale\n     *    - en → /en/dashboard\n     *    - fr → /fr/dashboard\n     *\n     * - 'search-params': Use search parameters for locale handling\n     *    - en → /dashboard?locale=en\n     *    - fr → /fr/dashboard?locale=fr\n     *\n     * - 'no-prefix': No locale prefixing in URLs\n     *    - en → /dashboard\n     *    - fr → /dashboard\n     *\n     * Default: 'prefix-no-default'\n     */\n    mode: customConfiguration?.mode ?? ROUTING_MODE,\n\n    /**\n     * Enables the Intlayer locale-routing proxy (middleware).\n     *\n     * When enabled, the build-tool integration (e.g. the `intlayer()` Vite plugin)\n     * automatically wires the locale-detection / redirect / rewrite middleware in\n     * development, preview, and production SSR.\n     *\n     * - `undefined` (auto, default): the proxy runs, but development and preview\n     *   servers ignore the stored locale (cookie / header) as a redirect source.\n     * - `true`: full proxy behaviour in every environment.\n     * - `false`: no locale routing; the proxy is not registered.\n     *\n     * Default: undefined (auto)\n     */\n    enableProxy: customConfiguration?.enableProxy ?? ENABLE_PROXY,\n\n    /**\n     * Configuration for storing the locale in the client (localStorage or sessionStorage)\n     *\n     * If false, the locale will not be stored by the middleware.\n     * If true, the locale storage will consider all default values. (cookie and header)\n     *\n     * Default: ['cookie', 'header']\n     *\n     */\n    storage: getStorageAttributes(storage),\n\n    /**\n     * Base path of the application URL\n     *\n     * Default: ''\n     *\n     * Example:\n     * - If the application is hosted at https://example.com/my-app\n     * - The base path is '/my-app'\n     * - The URL will be https://example.com/my-app/en\n     * - If the base path is not set, the URL will be https://example.com/en\n     */\n    basePath: customConfiguration?.basePath ?? BASE_PATH,\n\n    /**\n     * Custom URL rewriting rules that override the default routing mode for specific paths.\n     * Allows you to define locale-specific paths that differ from the standard routing behavior.\n     * Supports dynamic route parameters using `[param]` syntax.\n     *\n     * Default: undefined\n     *\n     * Example:\n     * ```typescript\n     * rewrite: {\n     *   \"/about\": {\n     *     en: \"/about\",\n     *     fr: \"/a-propos\",\n     *   },\n     *   \"/product/[slug]\": {\n     *     en: \"/product/[slug]\",\n     *     fr: \"/produit/[slug]\",\n     *   },\n     * }\n     * ```\n     *\n     * Note:\n     * - The rewrite rules take precedence over the default `mode` behavior.\n     * - If a path matches a rewrite rule, the localized path from the rewrite configuration will be used.\n     * - Dynamic route parameters are supported using bracket notation (e.g., `[slug]`, `[id]`).\n     * - Works with both Next.js and Vite applications.\n     */\n    rewrite: customConfiguration?.rewrite,\n\n    /**\n     * Maps locales to specific domain hostnames for domain-based routing.\n     *\n     * Default: undefined\n     */\n    domains: customConfiguration?.domains,\n  };\n};\n\n/**\n * Build the editor section of the Intlayer configuration.\n *\n * Returns the **full** {@link EditorConfig} including sensitive fields\n * (`clientId`, `clientSecret`). The browser-safe {@link BrowserIntlayerConfig}\n * omits those fields when exposing config to the client.\n *\n * `clientId` / `clientSecret` are never inferred from the environment: the\n * configuration file is the single source of truth. A project that wants to\n * authenticate from its `.env` file must wire the variables explicitly, e.g.\n * `clientId: process.env.INTLAYER_CLIENT_ID`. Commenting those lines out is\n * therefore enough to disable every credentialed behaviour (remote dictionary\n * fetching, CMS access) even when the variables remain defined in the\n * environment.\n *\n * @param customConfiguration - Partial user-supplied editor config.\n * @returns A fully-defaulted {@link EditorConfig}.\n */\nexport const buildEditorFields = (\n  customConfiguration?: Partial<EditorConfig>\n): EditorConfig => {\n  const liveSyncPort = customConfiguration?.liveSyncPort ?? LIVE_SYNC_PORT;\n  return {\n    /**\n     * URL of the application. Used to restrict the origin of the editor for security reasons.\n     *\n     * > '*' means that the editor is accessible from any origin\n     *\n     * Default: '*'\n     */\n    applicationURL: customConfiguration?.applicationURL || APPLICATION_URL,\n\n    /**\n     * URL of the editor server. Used to restrict the origin of the editor for security reasons.\n     *\n     * > '*' means that the editor is accessible from any origin\n     *\n     * Default: '*'\n     */\n    editorURL: customConfiguration?.editorURL || EDITOR_URL,\n\n    /**\n     * URL of the CMS server. Used to restrict the origin of the editor for security reasons.\n     */\n    cmsURL: customConfiguration?.cmsURL || CMS_URL,\n\n    /**\n     * URL of the editor server\n     *\n     * Default: 'https://back.intlayer.org'\n     */\n    backendURL: customConfiguration?.backendURL || BACKEND_URL,\n\n    /** Port of the editor server\n     *\n     * Default: 8000\n     */\n    port: customConfiguration?.port ?? PORT,\n\n    /**\n     * Indicates if the application interact with the visual editor\n     *\n     * Default: false;\n     *\n     * If true, the editor will be able to interact with the application.\n     * If false, the editor will not be able to interact with the application.\n     * In any case, the editor can only be enabled by the visual editor.\n     * Disabling the editor for specific environments is a way to enforce the security.\n     *\n     * Usage:\n     * ```js\n     * {\n     *  // Other configurations\n     *  editor: {\n     *   enabled: process.env.NODE_ENV !== 'production',\n     *  }\n     * };\n     * ```\n     */\n    enabled: customConfiguration?.enabled ?? IS_ENABLED,\n\n    /**\n     * clientId and clientSecret allow the intlayer packages to authenticate with the backend using oAuth2 authentication.\n     * An access token is use to authenticate the user related to the project.\n     * To get an access token, go to https://app.intlayer.org/project and create an account.\n     *\n     * Default: undefined\n     *\n     * > Important: The clientId and clientSecret should be kept secret and not shared publicly. Please ensure to keep them in a secure location, such as environment variables.\n     */\n    clientId: customConfiguration?.clientId,\n\n    /**\n     * clientId and clientSecret allow the intlayer packages to authenticate with the backend using oAuth2 authentication.\n     * An access token is use to authenticate the user related to the project.\n     * To get an access token, go to https://app.intlayer.org/project and create an account.\n     *\n     * Default: undefined\n     *\n     * > Important: The clientId and clientSecret should be kept secret and not shared publicly. Please ensure to keep them in a secure location, such as environment variables.\n     */\n    clientSecret: customConfiguration?.clientSecret,\n\n    /**\n     * Strategy for prioritizing dictionaries. If a dictionary is both present online and locally, the content will be merge.\n     * However, is a field is defined in both dictionary, this setting determines which fields takes the priority over the other.\n     *\n     * Default: 'local_first'\n     *\n     * The strategy for prioritizing dictionaries. It can be either 'local_first' or 'distant_first'.\n     * - 'local_first': The first dictionary found in the locale is used.\n     * - 'distant_first': The first dictionary found in the distant locales is used.\n     */\n    dictionaryPriorityStrategy:\n      customConfiguration?.dictionaryPriorityStrategy ??\n      DICTIONARY_PRIORITY_STRATEGY,\n\n    /**\n     * Indicates if the application should hot reload the locale configurations when a change is detected.\n     * For example, when a new dictionary is added or updated, the application will update the content tu display in the page.\n     *\n     * The hot reload is only available for clients of the `enterprise` plan.\n     *\n     * Default: false\n     */\n    liveSync: customConfiguration?.liveSync ?? LIVE_SYNC,\n\n    /**\n     * Port of the live sync server\n     *\n     * Default: 4000\n     */\n    liveSyncPort,\n\n    /**\n     * URL of the live sync server in case of remote live sync server\n     *\n     * Default: `http://localhost:${LIVE_SYNC_PORT}`\n     */\n    liveSyncURL:\n      customConfiguration?.liveSyncURL ?? `http://localhost:${liveSyncPort}`,\n  };\n};\n\n/**\n * Build the analytics section of the Intlayer configuration.\n *\n * Analytics is opt-out: `enabled` defaults to `true`, so installing the\n * optional `@intlayer/analytics` package is enough to turn it on. The runtime\n * additionally requires a project key (`editor.clientId`) for attribution\n * before collecting anything.\n *\n * An explicit `enabled` value always wins, so a project whose package manager\n * hides the package from the project root can still opt back in.\n *\n * @param customConfiguration - Partial user-supplied analytics config.\n * @param isPackageInstalled - Whether `@intlayer/analytics` is installed in the\n *   project. Browser callers cannot resolve packages and pass `true`, letting\n *   the runtime dynamic `import()` fail silently when it is absent.\n * @returns A fully-defaulted {@link AnalyticsConfig}.\n */\nexport const buildAnalyticsFields = (\n  customConfiguration?: Partial<AnalyticsConfig>,\n  isPackageInstalled = true\n): AnalyticsConfig => ({\n  /**\n   * Enables analytics collection (page views, content exposures, A/B events).\n   *\n   * Default: true, as soon as `@intlayer/analytics` is installed.\n   */\n  enabled:\n    customConfiguration?.enabled ?? (ANALYTICS_ENABLED && isPackageInstalled),\n\n  /**\n   * Milliseconds between automatic batched flushes to the backend.\n   *\n   * Default: 20000\n   */\n  flushInterval: customConfiguration?.flushInterval ?? ANALYTICS_FLUSH_INTERVAL,\n\n  /**\n   * Fraction of sessions to record, from 0 (none) to 1 (all).\n   *\n   * Default: 1\n   */\n  sampleRate: customConfiguration?.sampleRate ?? ANALYTICS_SAMPLE_RATE,\n});\n\n/**\n * Build the log section of the Intlayer configuration.\n *\n * @param customConfiguration - Partial user-supplied log config.\n * @param logFunctions - Optional custom log function overrides (server-only).\n * @returns A fully-defaulted {@link LogConfig}.\n */\nexport const buildLogFields = (\n  customConfiguration?: Partial<LogConfig>,\n  logFunctions?: LogFunctions\n): LogConfig => ({\n  /**\n   * Indicates if the logger is enabled\n   *\n   * Default: 'prefix-no-default'\n   *\n   * If 'default', the logger is enabled and can be used.\n   * If 'verbose', the logger will be enabled and can be used, but will log more information.\n   * If 'disabled', the logger is disabled and cannot be used.\n   */\n  mode: customConfiguration?.mode ?? MODE,\n\n  /**\n   * Prefix of the logger\n   *\n   * Default: '[intlayer]'\n   *\n   * The prefix of the logger.\n   */\n  prefix: customConfiguration?.prefix ?? PREFIX,\n\n  /**\n   * Functions to log\n   */\n  error: logFunctions?.error,\n  log: logFunctions?.log,\n  info: logFunctions?.info,\n  warn: logFunctions?.warn,\n});\n\n// ---------------------------------------------------------------------------\n// Browser configuration builders\n// ---------------------------------------------------------------------------\n\n/**\n * Build a browser-safe {@link BrowserIntlayerConfig} from a raw user config.\n *\n * Applies defaults for every field and strips all server-only or sensitive\n * information (`system`, `content`, `build`, `compiler`, `dictionary`, `ai`,\n * `editor.clientId`, `editor.clientSecret`).\n *\n * This is the browser counterpart of `buildConfigurationFields`. It is safe\n * to call in browser environments because it has no Node.js dependencies.\n *\n * @param customConfig - Optional partial user-supplied Intlayer config.\n * @returns A browser-safe configuration object ready for `window.INTLAYER_CONFIG`.\n *\n * @example\n * ```ts\n * import { buildBrowserConfiguration } from '@intlayer/config/client';\n *\n * window.INTLAYER_CONFIG = buildBrowserConfiguration({\n *   internationalization: { locales: ['en', 'fr'], defaultLocale: 'en' },\n * });\n * ```\n */\nexport const buildBrowserConfiguration = (\n  customConfig?: CustomIntlayerConfig\n): BrowserIntlayerConfig => {\n  const { locales, defaultLocale } = buildInternationalizationFields(\n    customConfig?.internationalization\n  );\n  const routing = buildRoutingFields(customConfig?.routing);\n  const {\n    clientId: _clientId,\n    clientSecret: _clientSecret,\n    ...editorPublic\n  } = buildEditorFields(customConfig?.editor);\n  const analytics = buildAnalyticsFields(customConfig?.analytics);\n  const { mode, prefix } = buildLogFields(customConfig?.log);\n\n  return {\n    internationalization: { locales, defaultLocale },\n    routing,\n    editor: editorPublic,\n    analytics,\n    log: { mode, prefix },\n  };\n};\n\n/**\n * Extract a {@link BrowserIntlayerConfig} from an already-built full\n * {@link IntlayerConfig}.\n *\n * Used by build plugins (`vite-intlayer`, `withIntlayer`) which already hold\n * the full server-side config and need to inject the browser-safe subset at\n * compile time via a bundler `define`.\n *\n * @param config - A fully-built server-side Intlayer configuration.\n * @returns The browser-safe subset of that configuration.\n */\nexport const extractBrowserConfiguration = (\n  config: IntlayerConfig\n): BrowserIntlayerConfig => ({\n  internationalization: {\n    locales: config.internationalization.locales,\n    defaultLocale: config.internationalization.defaultLocale,\n  },\n  routing: {\n    mode: config.routing.mode,\n    enableProxy: config.routing.enableProxy,\n    storage: config.routing.storage,\n    basePath: config.routing.basePath,\n    rewrite: config.routing.rewrite,\n  },\n  editor: {\n    applicationURL: config.editor.applicationURL,\n    editorURL: config.editor.editorURL,\n    cmsURL: config.editor.cmsURL,\n    backendURL: config.editor.backendURL,\n    port: config.editor.port,\n    enabled: config.editor.enabled,\n    dictionaryPriorityStrategy: config.editor.dictionaryPriorityStrategy,\n    liveSync: config.editor.liveSync,\n    liveSyncPort: config.editor.liveSyncPort,\n    liveSyncURL: config.editor.liveSyncURL,\n  },\n  analytics: buildAnalyticsFields(config.analytics),\n  log: {\n    mode: config.log.mode,\n    prefix: config.log.prefix,\n  },\n});\n"],"mappings":";;;;;;;;;;;;;;AAoFA,MAAa,mCACX,yBACgC;;;;;;;CAOhC,SAAS,qBAAqB,WAAW;;;;;;;;;;CAWzC,iBACE,qBAAqB,mBACrB,qBAAqB,WACrB;;;;;;;;;CAUF,YAAY,qBAAqB;;;;;;CAOjC,eAAe,qBAAqB;AACtC;;;;;;;AAQA,MAAa,sBACX,wBACkB;CAClB,MAAM,UAAU,qBAAqB,WAAW;CAEhD,OAAO;;;;;;;;;;;;;;;;;;;;;;;EAuBL,MAAM,qBAAqB;;;;;;;;;;;;;;;EAgB3B,aAAa,qBAAqB;;;;;;;;;;EAWlC,SAAS,qBAAqB,OAAO;;;;;;;;;;;;EAarC,UAAU,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA6B/B,SAAS,qBAAqB;;;;;;EAO9B,SAAS,qBAAqB;CAChC;AACF;;;;;;;;;;;;;;;;;;;AAoBA,MAAa,qBACX,wBACiB;CACjB,MAAM,eAAe,qBAAqB;CAC1C,OAAO;;;;;;;;EAQL,gBAAgB,qBAAqB;;;;;;;;EASrC,WAAW,qBAAqB;;;;EAKhC,QAAQ,qBAAqB;;;;;;EAO7B,YAAY,qBAAqB;;;;;EAMjC,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;EAsB3B,SAAS,qBAAqB;;;;;;;;;;EAW9B,UAAU,qBAAqB;;;;;;;;;;EAW/B,cAAc,qBAAqB;;;;;;;;;;;EAYnC,4BACE,qBAAqB;;;;;;;;;EAWvB,UAAU,qBAAqB;;;;;;EAO/B;;;;;;EAOA,aACE,qBAAqB,eAAe,oBAAoB;CAC5D;AACF;;;;;;;;;;;;;;;;;;AAmBA,MAAa,wBACX,qBACA,qBAAqB,UACA;;;;;;CAMrB,SACE,qBAAqB,oBAAiC;;;;;;CAOxD,eAAe,qBAAqB;;;;;;CAOpC,YAAY,qBAAqB;AACnC;;;;;;;;AASA,MAAa,kBACX,qBACA,kBACe;;;;;;;;;;CAUf,MAAM,qBAAqB;;;;;;;;CAS3B,QAAQ,qBAAqB,UAAU;;;;CAKvC,OAAO,cAAc;CACrB,KAAK,cAAc;CACnB,MAAM,cAAc;CACpB,MAAM,cAAc;AACtB;;;;;;;;;;;;;;;;;;;;;;;AA4BA,MAAa,6BACX,iBAC0B;CAC1B,MAAM,EAAE,SAAS,kBAAkB,gCACjC,cAAc,oBAChB;CACA,MAAM,UAAU,mBAAmB,cAAc,OAAO;CACxD,MAAM,EACJ,UAAU,WACV,cAAc,eACd,GAAG,iBACD,kBAAkB,cAAc,MAAM;CAC1C,MAAM,YAAY,qBAAqB,cAAc,SAAS;CAC9D,MAAM,EAAE,MAAM,WAAW,eAAe,cAAc,GAAG;CAEzD,OAAO;EACL,sBAAsB;GAAE;GAAS;EAAc;EAC/C;EACA,QAAQ;EACR;EACA,KAAK;GAAE;GAAM;EAAO;CACtB;AACF;;;;;;;;;;;;AAaA,MAAa,+BACX,YAC2B;CAC3B,sBAAsB;EACpB,SAAS,OAAO,qBAAqB;EACrC,eAAe,OAAO,qBAAqB;CAC7C;CACA,SAAS;EACP,MAAM,OAAO,QAAQ;EACrB,aAAa,OAAO,QAAQ;EAC5B,SAAS,OAAO,QAAQ;EACxB,UAAU,OAAO,QAAQ;EACzB,SAAS,OAAO,QAAQ;CAC1B;CACA,QAAQ;EACN,gBAAgB,OAAO,OAAO;EAC9B,WAAW,OAAO,OAAO;EACzB,QAAQ,OAAO,OAAO;EACtB,YAAY,OAAO,OAAO;EAC1B,MAAM,OAAO,OAAO;EACpB,SAAS,OAAO,OAAO;EACvB,4BAA4B,OAAO,OAAO;EAC1C,UAAU,OAAO,OAAO;EACxB,cAAc,OAAO,OAAO;EAC5B,aAAa,OAAO,OAAO;CAC7B;CACA,WAAW,qBAAqB,OAAO,SAAS;CAChD,KAAK;EACH,MAAM,OAAO,IAAI;EACjB,QAAQ,OAAO,IAAI;CACrB;AACF"}
+{"version":3,"file":"buildBrowserConfiguration.mjs","names":[],"sources":["../../../src/configFile/buildBrowserConfiguration.ts"],"sourcesContent":["import type {\n  AnalyticsConfig,\n  CustomIntlayerConfig,\n  CustomRoutingConfig,\n  EditorConfig,\n  InternationalizationConfig,\n  IntlayerConfig,\n  LogConfig,\n  LogFunctions,\n  RoutingConfig,\n} from '@intlayer/types/config';\nimport {\n  ANALYTICS_ENABLED,\n  ANALYTICS_FLUSH_INTERVAL,\n  ANALYTICS_SAMPLE_RATE,\n} from '../defaultValues/analytics';\nimport {\n  APPLICATION_URL,\n  BACKEND_URL,\n  CMS_URL,\n  DICTIONARY_PRIORITY_STRATEGY,\n  EDITOR_URL,\n  IS_ENABLED,\n  LIVE_SYNC,\n  LIVE_SYNC_PORT,\n  PORT,\n} from '../defaultValues/editor';\nimport {\n  DEFAULT_LOCALE,\n  LOCALES,\n  REQUIRED_LOCALES,\n  STRICT_MODE,\n} from '../defaultValues/internationalization';\nimport { MODE, PREFIX } from '../defaultValues/log';\nimport {\n  BASE_PATH,\n  ENABLE_PROXY,\n  ROUTING_MODE,\n  STORAGE,\n} from '../defaultValues/routing';\nimport { getStorageAttributes } from '../utils/getStorageAttributes';\n\n// ---------------------------------------------------------------------------\n// Type\n// ---------------------------------------------------------------------------\n\n/**\n * Browser-safe subset of {@link IntlayerConfig}.\n *\n * Excludes server-only fields (`system`, `content`, `build`, `compiler`,\n * `dictionary`, `ai`) and the `editor.clientSecret`, which must never be\n * shipped to the browser.\n *\n * `editor.clientId` is kept: it is the **public** project key, used by\n * `@intlayer/analytics` to identify the project when exchanging it for a\n * short-lived ingest token. It grants nothing on its own — every credentialed\n * backend call needs the secret, which only ever exists server-side.\n */\nexport type BrowserIntlayerConfig = {\n  internationalization: Pick<\n    InternationalizationConfig,\n    'locales' | 'defaultLocale'\n  >;\n  routing: RoutingConfig;\n  editor: Omit<EditorConfig, 'clientSecret'>;\n  analytics: AnalyticsConfig;\n  log: Pick<LogConfig, 'mode' | 'prefix'>;\n};\n\ndeclare global {\n  interface Window {\n    /** Browser-safe Intlayer configuration injected by a build plugin or `installIntlayer`. */\n    INTLAYER_CONFIG?: BrowserIntlayerConfig;\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Shared field builders (browser-safe — no Node.js APIs)\n//\n// These functions are re-used by both `buildBrowserConfiguration` (browser)\n// and `buildConfigurationFields` (server) to avoid duplication.\n// ---------------------------------------------------------------------------\n\n/**\n * Build the internationalization section of the Intlayer configuration.\n *\n * @param customConfiguration - Partial user-supplied internationalization config.\n * @returns A fully-defaulted {@link InternationalizationConfig}.\n */\nexport const buildInternationalizationFields = (\n  customConfiguration?: Partial<InternationalizationConfig>\n): InternationalizationConfig => ({\n  /**\n   * Locales available in the application\n   *\n   * Default: ['en']\n   *\n   */\n  locales: customConfiguration?.locales ?? LOCALES,\n\n  /**\n   * Locales required by TypeScript to ensure strong implementations of internationalized content using typescript.\n   *\n   * Default: []\n   *\n   * If empty, all locales are required in `strict` mode.\n   *\n   * Ensure required locales are also defined in the `locales` field.\n   */\n  requiredLocales:\n    customConfiguration?.requiredLocales ??\n    customConfiguration?.locales ??\n    REQUIRED_LOCALES,\n\n  /**\n   * Ensure strong implementations of internationalized content using typescript.\n   * - If set to \"strict\", the translation `t` function will require each declared locales to be defined. If one locale is missing, or if a locale is not declared in your config, it will throw an error.\n   * - If set to \"inclusive\", the translation `t` function will require each declared locales to be defined. If one locale is missing, it will throw a warning. But will accept if a locale is not declared in your config, but exist.\n   * - If set to \"loose\", the translation `t` function will accept any existing locale.\n   *\n   * Default: \"inclusive\"\n   */\n  strictMode: customConfiguration?.strictMode ?? STRICT_MODE,\n\n  /**\n   * Default locale of the application for fallback\n   *\n   * Default: 'en'\n   */\n  defaultLocale: customConfiguration?.defaultLocale ?? DEFAULT_LOCALE,\n});\n\n/**\n * Build the routing section of the Intlayer configuration.\n *\n * @param customConfiguration - Partial user-supplied routing config.\n * @returns A fully-defaulted {@link RoutingConfig}.\n */\nexport const buildRoutingFields = (\n  customConfiguration?: Partial<CustomRoutingConfig>\n): RoutingConfig => {\n  const storage = customConfiguration?.storage ?? STORAGE;\n\n  return {\n    /**\n     * URL routing mode for locale handling\n     *\n     * Controls how locales are represented in application URLs:\n     * - 'prefix-no-default': Prefix all locales except the default locale (default)\n     *    - en → /dashboard\n     *    - fr → /fr/dashboard\n     *\n     * - 'prefix-all': Prefix all locales including the default locale\n     *    - en → /en/dashboard\n     *    - fr → /fr/dashboard\n     *\n     * - 'search-params': Use search parameters for locale handling\n     *    - en → /dashboard?locale=en\n     *    - fr → /fr/dashboard?locale=fr\n     *\n     * - 'no-prefix': No locale prefixing in URLs\n     *    - en → /dashboard\n     *    - fr → /dashboard\n     *\n     * Default: 'prefix-no-default'\n     */\n    mode: customConfiguration?.mode ?? ROUTING_MODE,\n\n    /**\n     * Enables the Intlayer locale-routing proxy (middleware).\n     *\n     * When enabled, the build-tool integration (e.g. the `intlayer()` Vite plugin)\n     * automatically wires the locale-detection / redirect / rewrite middleware in\n     * development, preview, and production SSR.\n     *\n     * - `undefined` (auto, default): the proxy runs, but development and preview\n     *   servers ignore the stored locale (cookie / header) as a redirect source.\n     * - `true`: full proxy behaviour in every environment.\n     * - `false`: no locale routing; the proxy is not registered.\n     *\n     * Default: undefined (auto)\n     */\n    enableProxy: customConfiguration?.enableProxy ?? ENABLE_PROXY,\n\n    /**\n     * Configuration for storing the locale in the client (localStorage or sessionStorage)\n     *\n     * If false, the locale will not be stored by the middleware.\n     * If true, the locale storage will consider all default values. (cookie and header)\n     *\n     * Default: ['cookie', 'header']\n     *\n     */\n    storage: getStorageAttributes(storage),\n\n    /**\n     * Base path of the application URL\n     *\n     * Default: ''\n     *\n     * Example:\n     * - If the application is hosted at https://example.com/my-app\n     * - The base path is '/my-app'\n     * - The URL will be https://example.com/my-app/en\n     * - If the base path is not set, the URL will be https://example.com/en\n     */\n    basePath: customConfiguration?.basePath ?? BASE_PATH,\n\n    /**\n     * Custom URL rewriting rules that override the default routing mode for specific paths.\n     * Allows you to define locale-specific paths that differ from the standard routing behavior.\n     * Supports dynamic route parameters using `[param]` syntax.\n     *\n     * Default: undefined\n     *\n     * Example:\n     * ```typescript\n     * rewrite: {\n     *   \"/about\": {\n     *     en: \"/about\",\n     *     fr: \"/a-propos\",\n     *   },\n     *   \"/product/[slug]\": {\n     *     en: \"/product/[slug]\",\n     *     fr: \"/produit/[slug]\",\n     *   },\n     * }\n     * ```\n     *\n     * Note:\n     * - The rewrite rules take precedence over the default `mode` behavior.\n     * - If a path matches a rewrite rule, the localized path from the rewrite configuration will be used.\n     * - Dynamic route parameters are supported using bracket notation (e.g., `[slug]`, `[id]`).\n     * - Works with both Next.js and Vite applications.\n     */\n    rewrite: customConfiguration?.rewrite,\n\n    /**\n     * Maps locales to specific domain hostnames for domain-based routing.\n     *\n     * Default: undefined\n     */\n    domains: customConfiguration?.domains,\n  };\n};\n\n/**\n * Build the editor section of the Intlayer configuration.\n *\n * Returns the **full** {@link EditorConfig} including sensitive fields\n * (`clientId`, `clientSecret`). The browser-safe {@link BrowserIntlayerConfig}\n * omits those fields when exposing config to the client.\n *\n * `clientId` / `clientSecret` are never inferred from the environment: the\n * configuration file is the single source of truth. A project that wants to\n * authenticate from its `.env` file must wire the variables explicitly, e.g.\n * `clientId: process.env.INTLAYER_CLIENT_ID`. Commenting those lines out is\n * therefore enough to disable every credentialed behaviour (remote dictionary\n * fetching, CMS access) even when the variables remain defined in the\n * environment.\n *\n * @param customConfiguration - Partial user-supplied editor config.\n * @returns A fully-defaulted {@link EditorConfig}.\n */\nexport const buildEditorFields = (\n  customConfiguration?: Partial<EditorConfig>\n): EditorConfig => {\n  const liveSyncPort = customConfiguration?.liveSyncPort ?? LIVE_SYNC_PORT;\n  return {\n    /**\n     * URL of the application. Used to restrict the origin of the editor for security reasons.\n     *\n     * > '*' means that the editor is accessible from any origin\n     *\n     * Default: '*'\n     */\n    applicationURL: customConfiguration?.applicationURL || APPLICATION_URL,\n\n    /**\n     * URL of the editor server. Used to restrict the origin of the editor for security reasons.\n     *\n     * > '*' means that the editor is accessible from any origin\n     *\n     * Default: '*'\n     */\n    editorURL: customConfiguration?.editorURL || EDITOR_URL,\n\n    /**\n     * URL of the CMS server. Used to restrict the origin of the editor for security reasons.\n     */\n    cmsURL: customConfiguration?.cmsURL || CMS_URL,\n\n    /**\n     * URL of the editor server\n     *\n     * Default: 'https://back.intlayer.org'\n     */\n    backendURL: customConfiguration?.backendURL || BACKEND_URL,\n\n    /** Port of the editor server\n     *\n     * Default: 8000\n     */\n    port: customConfiguration?.port ?? PORT,\n\n    /**\n     * Indicates if the application interact with the visual editor\n     *\n     * Default: false;\n     *\n     * If true, the editor will be able to interact with the application.\n     * If false, the editor will not be able to interact with the application.\n     * In any case, the editor can only be enabled by the visual editor.\n     * Disabling the editor for specific environments is a way to enforce the security.\n     *\n     * Usage:\n     * ```js\n     * {\n     *  // Other configurations\n     *  editor: {\n     *   enabled: process.env.NODE_ENV !== 'production',\n     *  }\n     * };\n     * ```\n     */\n    enabled: customConfiguration?.enabled ?? IS_ENABLED,\n\n    /**\n     * clientId and clientSecret allow the intlayer packages to authenticate with the backend using oAuth2 authentication.\n     * An access token is use to authenticate the user related to the project.\n     * To get an access token, go to https://app.intlayer.org/project and create an account.\n     *\n     * Default: undefined\n     *\n     * > Important: The clientId and clientSecret should be kept secret and not shared publicly. Please ensure to keep them in a secure location, such as environment variables.\n     */\n    clientId: customConfiguration?.clientId,\n\n    /**\n     * clientId and clientSecret allow the intlayer packages to authenticate with the backend using oAuth2 authentication.\n     * An access token is use to authenticate the user related to the project.\n     * To get an access token, go to https://app.intlayer.org/project and create an account.\n     *\n     * Default: undefined\n     *\n     * > Important: The clientId and clientSecret should be kept secret and not shared publicly. Please ensure to keep them in a secure location, such as environment variables.\n     */\n    clientSecret: customConfiguration?.clientSecret,\n\n    /**\n     * Strategy for prioritizing dictionaries. If a dictionary is both present online and locally, the content will be merge.\n     * However, is a field is defined in both dictionary, this setting determines which fields takes the priority over the other.\n     *\n     * Default: 'local_first'\n     *\n     * The strategy for prioritizing dictionaries. It can be either 'local_first' or 'distant_first'.\n     * - 'local_first': The first dictionary found in the locale is used.\n     * - 'distant_first': The first dictionary found in the distant locales is used.\n     */\n    dictionaryPriorityStrategy:\n      customConfiguration?.dictionaryPriorityStrategy ??\n      DICTIONARY_PRIORITY_STRATEGY,\n\n    /**\n     * Indicates if the application should hot reload the locale configurations when a change is detected.\n     * For example, when a new dictionary is added or updated, the application will update the content tu display in the page.\n     *\n     * The hot reload is only available for clients of the `enterprise` plan.\n     *\n     * Default: false\n     */\n    liveSync: customConfiguration?.liveSync ?? LIVE_SYNC,\n\n    /**\n     * Port of the live sync server\n     *\n     * Default: 4000\n     */\n    liveSyncPort,\n\n    /**\n     * URL of the live sync server in case of remote live sync server\n     *\n     * Default: `http://localhost:${LIVE_SYNC_PORT}`\n     */\n    liveSyncURL:\n      customConfiguration?.liveSyncURL ?? `http://localhost:${liveSyncPort}`,\n  };\n};\n\n/**\n * Build the analytics section of the Intlayer configuration.\n *\n * Analytics is opt-out: `enabled` defaults to `true`, so installing the\n * optional `@intlayer/analytics` package is enough to turn it on. The runtime\n * additionally requires a project key (`editor.clientId`) for attribution\n * before collecting anything.\n *\n * An explicit `enabled` value always wins, so a project whose package manager\n * hides the package from the project root can still opt back in.\n *\n * @param customConfiguration - Partial user-supplied analytics config.\n * @param isPackageInstalled - Whether `@intlayer/analytics` is installed in the\n *   project. Browser callers cannot resolve packages and pass `true`, letting\n *   the runtime dynamic `import()` fail silently when it is absent.\n * @returns A fully-defaulted {@link AnalyticsConfig}.\n */\nexport const buildAnalyticsFields = (\n  customConfiguration?: Partial<AnalyticsConfig>,\n  isPackageInstalled = true\n): AnalyticsConfig => ({\n  /**\n   * Enables analytics collection (page views, content exposures, A/B events).\n   *\n   * Default: true, as soon as `@intlayer/analytics` is installed.\n   */\n  enabled:\n    customConfiguration?.enabled ?? (ANALYTICS_ENABLED && isPackageInstalled),\n\n  /**\n   * Milliseconds between automatic batched flushes to the backend.\n   *\n   * Default: 20000\n   */\n  flushInterval: customConfiguration?.flushInterval ?? ANALYTICS_FLUSH_INTERVAL,\n\n  /**\n   * Fraction of sessions to record, from 0 (none) to 1 (all).\n   *\n   * Default: 1\n   */\n  sampleRate: customConfiguration?.sampleRate ?? ANALYTICS_SAMPLE_RATE,\n});\n\n/**\n * Build the log section of the Intlayer configuration.\n *\n * @param customConfiguration - Partial user-supplied log config.\n * @param logFunctions - Optional custom log function overrides (server-only).\n * @returns A fully-defaulted {@link LogConfig}.\n */\nexport const buildLogFields = (\n  customConfiguration?: Partial<LogConfig>,\n  logFunctions?: LogFunctions\n): LogConfig => ({\n  /**\n   * Indicates if the logger is enabled\n   *\n   * Default: 'prefix-no-default'\n   *\n   * If 'default', the logger is enabled and can be used.\n   * If 'verbose', the logger will be enabled and can be used, but will log more information.\n   * If 'disabled', the logger is disabled and cannot be used.\n   */\n  mode: customConfiguration?.mode ?? MODE,\n\n  /**\n   * Prefix of the logger\n   *\n   * Default: '[intlayer]'\n   *\n   * The prefix of the logger.\n   */\n  prefix: customConfiguration?.prefix ?? PREFIX,\n\n  /**\n   * Functions to log\n   */\n  error: logFunctions?.error,\n  log: logFunctions?.log,\n  info: logFunctions?.info,\n  warn: logFunctions?.warn,\n});\n\n// ---------------------------------------------------------------------------\n// Browser configuration builders\n// ---------------------------------------------------------------------------\n\n/**\n * Build a browser-safe {@link BrowserIntlayerConfig} from a raw user config.\n *\n * Applies defaults for every field and strips all server-only or sensitive\n * information (`system`, `content`, `build`, `compiler`, `dictionary`, `ai`,\n * `editor.clientSecret`). The public `editor.clientId` is kept — see\n * {@link BrowserIntlayerConfig}.\n *\n * This is the browser counterpart of `buildConfigurationFields`. It is safe\n * to call in browser environments because it has no Node.js dependencies.\n *\n * @param customConfig - Optional partial user-supplied Intlayer config.\n * @returns A browser-safe configuration object ready for `window.INTLAYER_CONFIG`.\n *\n * @example\n * ```ts\n * import { buildBrowserConfiguration } from '@intlayer/config/client';\n *\n * window.INTLAYER_CONFIG = buildBrowserConfiguration({\n *   internationalization: { locales: ['en', 'fr'], defaultLocale: 'en' },\n * });\n * ```\n */\nexport const buildBrowserConfiguration = (\n  customConfig?: CustomIntlayerConfig\n): BrowserIntlayerConfig => {\n  const { locales, defaultLocale } = buildInternationalizationFields(\n    customConfig?.internationalization\n  );\n  const routing = buildRoutingFields(customConfig?.routing);\n  const { clientSecret: _clientSecret, ...editorPublic } = buildEditorFields(\n    customConfig?.editor\n  );\n  const analytics = buildAnalyticsFields(customConfig?.analytics);\n  const { mode, prefix } = buildLogFields(customConfig?.log);\n\n  return {\n    internationalization: { locales, defaultLocale },\n    routing,\n    editor: editorPublic,\n    analytics,\n    log: { mode, prefix },\n  };\n};\n\n/**\n * Extract a {@link BrowserIntlayerConfig} from an already-built full\n * {@link IntlayerConfig}.\n *\n * Used by build plugins (`vite-intlayer`, `withIntlayer`) which already hold\n * the full server-side config and need to inject the browser-safe subset at\n * compile time via a bundler `define`.\n *\n * @param config - A fully-built server-side Intlayer configuration.\n * @returns The browser-safe subset of that configuration.\n */\nexport const extractBrowserConfiguration = (\n  config: IntlayerConfig\n): BrowserIntlayerConfig => {\n  // Destructured rather than picked field by field so that any future addition\n  // to `EditorConfig` is carried over automatically, while `clientSecret` stays\n  // excluded by construction.\n  const { clientSecret: _clientSecret, ...editorPublic } = config.editor;\n\n  return {\n    internationalization: {\n      locales: config.internationalization.locales,\n      defaultLocale: config.internationalization.defaultLocale,\n    },\n    routing: {\n      mode: config.routing.mode,\n      enableProxy: config.routing.enableProxy,\n      storage: config.routing.storage,\n      basePath: config.routing.basePath,\n      rewrite: config.routing.rewrite,\n    },\n    editor: editorPublic,\n    analytics: buildAnalyticsFields(config.analytics),\n    log: {\n      mode: config.log.mode,\n      prefix: config.log.prefix,\n    },\n  };\n};\n"],"mappings":";;;;;;;;;;;;;;AAyFA,MAAa,mCACX,yBACgC;;;;;;;CAOhC,SAAS,qBAAqB,WAAW;;;;;;;;;;CAWzC,iBACE,qBAAqB,mBACrB,qBAAqB,WACrB;;;;;;;;;CAUF,YAAY,qBAAqB;;;;;;CAOjC,eAAe,qBAAqB;AACtC;;;;;;;AAQA,MAAa,sBACX,wBACkB;CAClB,MAAM,UAAU,qBAAqB,WAAW;CAEhD,OAAO;;;;;;;;;;;;;;;;;;;;;;;EAuBL,MAAM,qBAAqB;;;;;;;;;;;;;;;EAgB3B,aAAa,qBAAqB;;;;;;;;;;EAWlC,SAAS,qBAAqB,OAAO;;;;;;;;;;;;EAarC,UAAU,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA6B/B,SAAS,qBAAqB;;;;;;EAO9B,SAAS,qBAAqB;CAChC;AACF;;;;;;;;;;;;;;;;;;;AAoBA,MAAa,qBACX,wBACiB;CACjB,MAAM,eAAe,qBAAqB;CAC1C,OAAO;;;;;;;;EAQL,gBAAgB,qBAAqB;;;;;;;;EASrC,WAAW,qBAAqB;;;;EAKhC,QAAQ,qBAAqB;;;;;;EAO7B,YAAY,qBAAqB;;;;;EAMjC,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;EAsB3B,SAAS,qBAAqB;;;;;;;;;;EAW9B,UAAU,qBAAqB;;;;;;;;;;EAW/B,cAAc,qBAAqB;;;;;;;;;;;EAYnC,4BACE,qBAAqB;;;;;;;;;EAWvB,UAAU,qBAAqB;;;;;;EAO/B;;;;;;EAOA,aACE,qBAAqB,eAAe,oBAAoB;CAC5D;AACF;;;;;;;;;;;;;;;;;;AAmBA,MAAa,wBACX,qBACA,qBAAqB,UACA;;;;;;CAMrB,SACE,qBAAqB,oBAAiC;;;;;;CAOxD,eAAe,qBAAqB;;;;;;CAOpC,YAAY,qBAAqB;AACnC;;;;;;;;AASA,MAAa,kBACX,qBACA,kBACe;;;;;;;;;;CAUf,MAAM,qBAAqB;;;;;;;;CAS3B,QAAQ,qBAAqB,UAAU;;;;CAKvC,OAAO,cAAc;CACrB,KAAK,cAAc;CACnB,MAAM,cAAc;CACpB,MAAM,cAAc;AACtB;;;;;;;;;;;;;;;;;;;;;;;;AA6BA,MAAa,6BACX,iBAC0B;CAC1B,MAAM,EAAE,SAAS,kBAAkB,gCACjC,cAAc,oBAChB;CACA,MAAM,UAAU,mBAAmB,cAAc,OAAO;CACxD,MAAM,EAAE,cAAc,eAAe,GAAG,iBAAiB,kBACvD,cAAc,MAChB;CACA,MAAM,YAAY,qBAAqB,cAAc,SAAS;CAC9D,MAAM,EAAE,MAAM,WAAW,eAAe,cAAc,GAAG;CAEzD,OAAO;EACL,sBAAsB;GAAE;GAAS;EAAc;EAC/C;EACA,QAAQ;EACR;EACA,KAAK;GAAE;GAAM;EAAO;CACtB;AACF;;;;;;;;;;;;AAaA,MAAa,+BACX,WAC0B;CAI1B,MAAM,EAAE,cAAc,eAAe,GAAG,iBAAiB,OAAO;CAEhE,OAAO;EACL,sBAAsB;GACpB,SAAS,OAAO,qBAAqB;GACrC,eAAe,OAAO,qBAAqB;EAC7C;EACA,SAAS;GACP,MAAM,OAAO,QAAQ;GACrB,aAAa,OAAO,QAAQ;GAC5B,SAAS,OAAO,QAAQ;GACxB,UAAU,OAAO,QAAQ;GACzB,SAAS,OAAO,QAAQ;EAC1B;EACA,QAAQ;EACR,WAAW,qBAAqB,OAAO,SAAS;EAChD,KAAK;GACH,MAAM,OAAO,IAAI;GACjB,QAAQ,OAAO,IAAI;EACrB;CACF;AACF"}

package/dist/esm/secrets.browser.mjs

@@ -0,0 +1,20 @@
+//#region src/secrets.browser.ts
+/**
+* Browser stub for {@link file://./secrets.ts}.
+*
+* Selected through the `browser` export condition of
+* `@intlayer/config/secrets`, so a client bundle resolves the credential
+* accessor to an inert function instead of pulling the configuration loader —
+* and the secret itself — into a public asset.
+*/
+/**
+* Always `undefined` in the browser: the CMS client secret grants project-wide
+* API access and must never leave the server.
+*
+* @returns `undefined`.
+*/
+const getEditorClientSecret = () => void 0;
+
+//#endregion
+export { getEditorClientSecret };
+//# sourceMappingURL=secrets.browser.mjs.map

package/dist/esm/secrets.browser.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.browser.mjs","names":[],"sources":["../../src/secrets.browser.ts"],"sourcesContent":["/**\n * Browser stub for {@link file://./secrets.ts}.\n *\n * Selected through the `browser` export condition of\n * `@intlayer/config/secrets`, so a client bundle resolves the credential\n * accessor to an inert function instead of pulling the configuration loader —\n * and the secret itself — into a public asset.\n */\n\n/**\n * Always `undefined` in the browser: the CMS client secret grants project-wide\n * API access and must never leave the server.\n *\n * @returns `undefined`.\n */\nexport const getEditorClientSecret = (): string | undefined => undefined;\n"],"mappings":";;;;;;;;;;;;;;;AAeA,MAAa,8BAAkD"}

package/dist/esm/secrets.mjs

@@ -0,0 +1,46 @@
+//#region src/secrets.ts
+/**
+* Server-only access to the sensitive parts of the Intlayer configuration.
+*
+* `@intlayer/config/built` is aliased by every framework integration to a
+* generated file that the bundle **inlines**, and the same alias is installed
+* for the client and the server build. Anything it carries that browser code
+* imports therefore ends up in a public asset, which is why the generated file
+* never contains `editor.clientSecret`.
+*
+* This module is the server-side counterpart. It is deliberately *not* aliased:
+* it resolves through the package's export map, whose `browser` condition
+* points at {@link file://./secrets.browser.ts} — an inert stub. Every
+* major bundler (webpack, Rspack, Turbopack, Vite, Rollup, esbuild, Metro)
+* honours that condition, so a browser build resolves to the stub without any
+* integration-specific configuration.
+*
+* It intentionally imports nothing: pulling the configuration loader in here
+* would drag the whole resolved configuration — and the machinery that builds
+* it — into every server bundle that touches a credentialed API.
+*
+* @example
+* ```ts
+* import { getEditorClientSecret } from '@intlayer/config/secrets';
+*
+* const clientSecret = config.editor.clientSecret ?? getEditorClientSecret();
+* ```
+*/
+/**
+* Returns the CMS client secret from the environment, or `undefined` when it is
+* not set.
+*
+* The configuration file stays the source of truth for *whether* credentials
+* are active — a project opts in by wiring `clientId` (conventionally
+* `clientId: process.env.INTLAYER_CLIENT_ID`), and callers gate on the public
+* `editor.clientId` from `@intlayer/config/built` before asking for the secret.
+* This function only supplies the confidential half, which the generated
+* configuration deliberately does not carry.
+*
+* @returns The OAuth2 client secret, or `undefined`.
+*/
+const getEditorClientSecret = () => typeof process === "undefined" ? void 0 : process.env?.INTLAYER_CLIENT_SECRET;
+
+//#endregion
+export { getEditorClientSecret };
+//# sourceMappingURL=secrets.mjs.map

package/dist/esm/secrets.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.mjs","names":[],"sources":["../../src/secrets.ts"],"sourcesContent":["/**\n * Server-only access to the sensitive parts of the Intlayer configuration.\n *\n * `@intlayer/config/built` is aliased by every framework integration to a\n * generated file that the bundle **inlines**, and the same alias is installed\n * for the client and the server build. Anything it carries that browser code\n * imports therefore ends up in a public asset, which is why the generated file\n * never contains `editor.clientSecret`.\n *\n * This module is the server-side counterpart. It is deliberately *not* aliased:\n * it resolves through the package's export map, whose `browser` condition\n * points at {@link file://./secrets.browser.ts} — an inert stub. Every\n * major bundler (webpack, Rspack, Turbopack, Vite, Rollup, esbuild, Metro)\n * honours that condition, so a browser build resolves to the stub without any\n * integration-specific configuration.\n *\n * It intentionally imports nothing: pulling the configuration loader in here\n * would drag the whole resolved configuration — and the machinery that builds\n * it — into every server bundle that touches a credentialed API.\n *\n * @example\n * ```ts\n * import { getEditorClientSecret } from '@intlayer/config/secrets';\n *\n * const clientSecret = config.editor.clientSecret ?? getEditorClientSecret();\n * ```\n */\n\n/**\n * Returns the CMS client secret from the environment, or `undefined` when it is\n * not set.\n *\n * The configuration file stays the source of truth for *whether* credentials\n * are active — a project opts in by wiring `clientId` (conventionally\n * `clientId: process.env.INTLAYER_CLIENT_ID`), and callers gate on the public\n * `editor.clientId` from `@intlayer/config/built` before asking for the secret.\n * This function only supplies the confidential half, which the generated\n * configuration deliberately does not carry.\n *\n * @returns The OAuth2 client secret, or `undefined`.\n */\nexport const getEditorClientSecret = (): string | undefined =>\n  typeof process === 'undefined'\n    ? undefined\n    : process.env?.INTLAYER_CLIENT_SECRET;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAyCA,MAAa,8BACX,OAAO,YAAY,cACf,SACA,QAAQ,KAAK"}

package/dist/types/configFile/buildBrowserConfiguration.d.ts

@@ -4,13 +4,18 @@ import { AnalyticsConfig, CustomIntlayerConfig, CustomRoutingConfig, EditorConfi
  * Browser-safe subset of {@link IntlayerConfig}.
  *
  * Excludes server-only fields (`system`, `content`, `build`, `compiler`,
- * `dictionary`, `ai`) and sensitive editor credentials (`clientId`,
- * `clientSecret`) that must never be shipped to the browser.
+ * `dictionary`, `ai`) and the `editor.clientSecret`, which must never be
+ * shipped to the browser.
+ *
+ * `editor.clientId` is kept: it is the **public** project key, used by
+ * `@intlayer/analytics` to identify the project when exchanging it for a
+ * short-lived ingest token. It grants nothing on its own — every credentialed
+ * backend call needs the secret, which only ever exists server-side.
  */
 type BrowserIntlayerConfig = {
   internationalization: Pick<InternationalizationConfig, 'locales' | 'defaultLocale'>;
   routing: RoutingConfig;
-  editor: Omit<EditorConfig, 'clientId' | 'clientSecret'>;
+  editor: Omit<EditorConfig, 'clientSecret'>;
   analytics: AnalyticsConfig;
   log: Pick<LogConfig, 'mode' | 'prefix'>;
 };
@@ -84,7 +89,8 @@ declare const buildLogFields: (customConfiguration?: Partial<LogConfig>, logFunc
  *
  * Applies defaults for every field and strips all server-only or sensitive
  * information (`system`, `content`, `build`, `compiler`, `dictionary`, `ai`,
- * `editor.clientId`, `editor.clientSecret`).
+ * `editor.clientSecret`). The public `editor.clientId` is kept — see
+ * {@link BrowserIntlayerConfig}.
  *
  * This is the browser counterpart of `buildConfigurationFields`. It is safe
  * to call in browser environments because it has no Node.js dependencies.

package/dist/types/configFile/buildBrowserConfiguration.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"buildBrowserConfiguration.d.ts","names":[],"sources":["../../../src/configFile/buildBrowserConfiguration.ts"],"mappings":";;;;;;;;;KAqDY;EACV,sBAAsB,KACpB;EAGF,SAAS;EACT,QAAQ,KAAK;EACb,WAAW;EACX,KAAK,KAAK;;QAGJ;YACI;;IAER,kBAAkB;;;;;;;;;cAiBT,kCAA+B,sBACpB,QAAQ,gCAC7B;;;;;;;cA+CU,qBAAkB,sBACP,QAAQ,yBAC7B;;;;;;;;;;;;;;;;;;;cA4HU,oBAAiB,sBACN,QAAQ,kBAC7B;;;;;;;;;;;;;;;;;;cA6IU,uBAAoB,sBACT,QAAQ,kBAAgB,iCAE7C;;;;;;;;cA+BU,iBAAc,sBACH,QAAQ,YAAU,eACzB,iBACd;;;;;;;;;;;;;;;;;;;;;;;cAwDU,4BAAyB,eACrB,yBACd;;;;;;;;;;;;cAiCU,8BAA2B,QAC9B,mBACP"}
+{"version":3,"file":"buildBrowserConfiguration.d.ts","names":[],"sources":["../../../src/configFile/buildBrowserConfiguration.ts"],"mappings":";;;;;;;;;;;;;;KA0DY;EACV,sBAAsB,KACpB;EAGF,SAAS;EACT,QAAQ,KAAK;EACb,WAAW;EACX,KAAK,KAAK;;QAGJ;YACI;;IAER,kBAAkB;;;;;;;;;cAiBT,kCAA+B,sBACpB,QAAQ,gCAC7B;;;;;;;cA+CU,qBAAkB,sBACP,QAAQ,yBAC7B;;;;;;;;;;;;;;;;;;;cA4HU,oBAAiB,sBACN,QAAQ,kBAC7B;;;;;;;;;;;;;;;;;;cA6IU,uBAAoB,sBACT,QAAQ,kBAAgB,iCAE7C;;;;;;;;cA+BU,iBAAc,sBACH,QAAQ,YAAU,eACzB,iBACd;;;;;;;;;;;;;;;;;;;;;;;;cAyDU,4BAAyB,eACrB,yBACd;;;;;;;;;;;;cA+BU,8BAA2B,QAC9B,mBACP"}

package/dist/types/secrets.browser.d.ts

@@ -0,0 +1,19 @@
+//#region src/secrets.browser.d.ts
+/**
+ * Browser stub for {@link file://./secrets.ts}.
+ *
+ * Selected through the `browser` export condition of
+ * `@intlayer/config/secrets`, so a client bundle resolves the credential
+ * accessor to an inert function instead of pulling the configuration loader —
+ * and the secret itself — into a public asset.
+ */
+/**
+ * Always `undefined` in the browser: the CMS client secret grants project-wide
+ * API access and must never leave the server.
+ *
+ * @returns `undefined`.
+ */
+declare const getEditorClientSecret: () => string | undefined;
+//#endregion
+export { getEditorClientSecret };
+//# sourceMappingURL=secrets.browser.d.ts.map

package/dist/types/secrets.browser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.browser.d.ts","names":[],"sources":["../../src/secrets.browser.ts"],"mappings":";;;;;;;;;;;;;;;cAea"}

package/dist/types/secrets.d.ts

@@ -0,0 +1,45 @@
+//#region src/secrets.d.ts
+/**
+ * Server-only access to the sensitive parts of the Intlayer configuration.
+ *
+ * `@intlayer/config/built` is aliased by every framework integration to a
+ * generated file that the bundle **inlines**, and the same alias is installed
+ * for the client and the server build. Anything it carries that browser code
+ * imports therefore ends up in a public asset, which is why the generated file
+ * never contains `editor.clientSecret`.
+ *
+ * This module is the server-side counterpart. It is deliberately *not* aliased:
+ * it resolves through the package's export map, whose `browser` condition
+ * points at {@link file://./secrets.browser.ts} — an inert stub. Every
+ * major bundler (webpack, Rspack, Turbopack, Vite, Rollup, esbuild, Metro)
+ * honours that condition, so a browser build resolves to the stub without any
+ * integration-specific configuration.
+ *
+ * It intentionally imports nothing: pulling the configuration loader in here
+ * would drag the whole resolved configuration — and the machinery that builds
+ * it — into every server bundle that touches a credentialed API.
+ *
+ * @example
+ * ```ts
+ * import { getEditorClientSecret } from '@intlayer/config/secrets';
+ *
+ * const clientSecret = config.editor.clientSecret ?? getEditorClientSecret();
+ * ```
+ */
+/**
+ * Returns the CMS client secret from the environment, or `undefined` when it is
+ * not set.
+ *
+ * The configuration file stays the source of truth for *whether* credentials
+ * are active — a project opts in by wiring `clientId` (conventionally
+ * `clientId: process.env.INTLAYER_CLIENT_ID`), and callers gate on the public
+ * `editor.clientId` from `@intlayer/config/built` before asking for the secret.
+ * This function only supplies the confidential half, which the generated
+ * configuration deliberately does not carry.
+ *
+ * @returns The OAuth2 client secret, or `undefined`.
+ */
+declare const getEditorClientSecret: () => string | undefined;
+//#endregion
+export { getEditorClientSecret };
+//# sourceMappingURL=secrets.d.ts.map

package/dist/types/secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.d.ts","names":[],"sources":["../../src/secrets.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAyCa"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intlayer/config",
-  "version": "9.4.0-canary.0",
+  "version": "9.4.1",
   "private": false,
   "description": "Retrieve Intlayer configurations and manage environment variables for both server-side and client-side environments.",
   "keywords": [
@@ -52,6 +52,15 @@
       "require": "./dist/cjs/built.cjs",
       "import": "./dist/esm/built.mjs"
     },
+    "./secrets": {
+      "types": "./dist/types/secrets.d.ts",
+      "browser": {
+        "require": "./dist/cjs/secrets.browser.cjs",
+        "import": "./dist/esm/secrets.browser.mjs"
+      },
+      "require": "./dist/cjs/secrets.cjs",
+      "import": "./dist/esm/secrets.mjs"
+    },
     "./callers": {
       "types": "./dist/types/callers/index.d.ts",
       "import": "./dist/esm/callers/index.mjs",
@@ -120,6 +129,9 @@
       "built": [
         "./dist/types/built.d.ts"
       ],
+      "secrets": [
+        "./dist/types/secrets.d.ts"
+      ],
       "node": [
         "./dist/types/node.d.ts"
       ],
@@ -177,7 +189,7 @@
     "typecheck": "tsc --noEmit --project tsconfig.types.json"
   },
   "dependencies": {
-    "@intlayer/types": "9.4.0-canary.0",
+    "@intlayer/types": "9.4.1",
     "defu": "6.1.7",
     "dotenv": "17.4.2",
     "esbuild": "0.28.2",
@@ -185,7 +197,7 @@
     "zod": "4.4.3"
   },
   "devDependencies": {
-    "@types/node": "26.2.0",
+    "@types/node": "26.3.0",
     "@utils/ts-config": "1.0.4",
     "@utils/ts-config-types": "1.0.4",
     "@utils/tsdown-config": "1.0.4",