@videlic/connect 0.1.1 → 0.1.7

package/install.mjs

@@ -71,6 +71,12 @@ ok("Key valid");
 const here = dirname(fileURLToPath(import.meta.url));
 const hookDest = join(claudeDir, "videlic-hook.mjs");
 copyFileSync(join(here, "hook.mjs"), hookDest);
+// The hook imports this one at the moment it collects evidence, by a RELATIVE
+// path, so the two must land in the same directory or the import throws — in a
+// detached process, where the only sign would be a line in the log. Copied
+// second and unconditionally: a machine left with a new hook beside an old
+// collector is the one shape neither file can detect.
+copyFileSync(join(here, "evidence.mjs"), join(claudeDir, "evidence.mjs"));
 
 const configPath = join(claudeDir, "videlic.json");
 writeFileSync(
@@ -90,10 +96,38 @@ ok("Hook installed");
 const settingsPath = join(claudeDir, "settings.json");
 let settings = {};
 if (existsSync(settingsPath)) {
-  try {
-    settings = JSON.parse(readFileSync(settingsPath, "utf8") || "{}");
-  } catch {
-    settings = {};
+  const raw = readFileSync(settingsPath, "utf8");
+  if (raw.trim()) {
+    try {
+      settings = JSON.parse(raw);
+    } catch (e) {
+      // NEVER fall back to `{}` here.
+      //
+      // This object is written straight back over settings.json thirteen
+      // lines down. Treating a file we could not parse as an empty one
+      // therefore deletes everything it held — model, permissions, env,
+      // statusLine, and every other tool's hooks — with no backup, and
+      // then prints "All set." A single trailing comma is enough to
+      // trigger it, which makes the victims precisely the people who
+      // edit the file by hand. Their configuration is worth more than
+      // our hook: refuse, say where the problem is, and change nothing.
+      fail(
+        "Your agent settings file has a syntax error, so Videlic left it untouched:\n" +
+          `  ${settingsPath}\n` +
+          `  ${e?.message ?? e}\n\n` +
+          "  Your key is already saved. Fix that file and run this command again.",
+      );
+    }
+  }
+  if (settings === null || typeof settings !== "object" || Array.isArray(settings)) {
+    // Valid JSON, wrong shape ("null", "[]", a bare string). `settings.hooks ??= {}`
+    // would throw on null and silently discard the rest on an array, so stop here
+    // for the same reason as above.
+    fail(
+      "Your agent settings file does not contain a JSON object, so Videlic left it untouched:\n" +
+        `  ${settingsPath}\n\n` +
+        "  Your key is already saved. Fix that file and run this command again.",
+    );
   }
 }
 settings.hooks ??= {};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@videlic/connect",
-  "version": "0.1.1",
+  "version": "0.1.7",
   "description": "Connect your coding agent to Videlic — installs a Stop hook that sends each finished session for review. Works on macOS, Windows, and Linux.",
   "type": "module",
   "bin": {
@@ -9,8 +9,13 @@
   "files": [
     "install.mjs",
     "hook.mjs",
+    "evidence.mjs",
+    "evidence.d.mts",
     "README.md"
   ],
+  "scripts": {
+    "test": "vitest"
+  },
   "engines": {
     "node": ">=18"
   },
@@ -18,5 +23,8 @@
   "homepage": "https://videlic.dev",
   "publishConfig": {
     "access": "public"
+  },
+  "devDependencies": {
+    "vitest": "^3.2.4"
   }
 }