@meistrari/tela-build 1.50.1 → 1.50.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@meistrari/tela-build",
-  "version": "1.50.1",
+  "version": "1.50.2",
   "type": "module",
   "files": [
     "app.config.ts",

package/plugins/avatar-runtime-config.client.ts

@@ -0,0 +1,27 @@
+import { defineNuxtPlugin, useRuntimeConfig } from 'nuxt/app'
+
+/**
+ * tela-build's avatar sanitizer (`sanitizeAvatarImageUrl`) reads its host
+ * allowlist from the legacy `window.__NUXT__.config.public` global, which Nuxt 4
+ * no longer populates. Without it the sanitizer only ever sees its hardcoded
+ * hosts (Google/MS/GitHub/Gravatar), so avatars served from `avatarAllowedOrigins`
+ * (e.g. vault asset hosts) fall back to initials.
+ *
+ * This is a fallback/polyfill, not a replacement: when the global is already
+ * populated (Nuxt 3) we leave it untouched, otherwise we mirror the public
+ * runtime config onto it so the sanitizer can resolve the configured hosts.
+ */
+export default defineNuxtPlugin(() => {
+    const globalWithNuxt = window as typeof window & {
+        __NUXT__?: { config?: { public?: Record<string, unknown> } }
+    }
+
+    if (globalWithNuxt.__NUXT__?.config?.public)
+        return
+
+    const { public: publicConfig } = useRuntimeConfig()
+
+    globalWithNuxt.__NUXT__ ??= {}
+    globalWithNuxt.__NUXT__.config ??= {}
+    globalWithNuxt.__NUXT__.config.public = publicConfig
+})