@videlic/connect 0.1.1 → 0.1.2

package/install.mjs

@@ -90,10 +90,38 @@ ok("Hook installed");
 const settingsPath = join(claudeDir, "settings.json");
 let settings = {};
 if (existsSync(settingsPath)) {
-  try {
-    settings = JSON.parse(readFileSync(settingsPath, "utf8") || "{}");
-  } catch {
-    settings = {};
+  const raw = readFileSync(settingsPath, "utf8");
+  if (raw.trim()) {
+    try {
+      settings = JSON.parse(raw);
+    } catch (e) {
+      // NEVER fall back to `{}` here.
+      //
+      // This object is written straight back over settings.json thirteen
+      // lines down. Treating a file we could not parse as an empty one
+      // therefore deletes everything it held — model, permissions, env,
+      // statusLine, and every other tool's hooks — with no backup, and
+      // then prints "All set." A single trailing comma is enough to
+      // trigger it, which makes the victims precisely the people who
+      // edit the file by hand. Their configuration is worth more than
+      // our hook: refuse, say where the problem is, and change nothing.
+      fail(
+        "Your agent settings file has a syntax error, so Videlic left it untouched:\n" +
+          `  ${settingsPath}\n` +
+          `  ${e?.message ?? e}\n\n` +
+          "  Your key is already saved. Fix that file and run this command again.",
+      );
+    }
+  }
+  if (settings === null || typeof settings !== "object" || Array.isArray(settings)) {
+    // Valid JSON, wrong shape ("null", "[]", a bare string). `settings.hooks ??= {}`
+    // would throw on null and silently discard the rest on an array, so stop here
+    // for the same reason as above.
+    fail(
+      "Your agent settings file does not contain a JSON object, so Videlic left it untouched:\n" +
+        `  ${settingsPath}\n\n` +
+        "  Your key is already saved. Fix that file and run this command again.",
+    );
   }
 }
 settings.hooks ??= {};

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@videlic/connect",
-  "version": "0.1.1",
-  "description": "Connect your coding agent to Videlic — installs a Stop hook that sends each finished session for review. Works on macOS, Windows, and Linux.",
+  "version": "0.1.2",
+  "description": "Connect your coding agent to Videlic \u2014 installs a Stop hook that sends each finished session for review. Works on macOS, Windows, and Linux.",
   "type": "module",
   "bin": {
     "connect": "install.mjs"