cc-cream 0.1.0 → 0.1.2

package/CHANGELOG.md

@@ -4,6 +4,28 @@ All notable changes to cc-cream are documented here. Format follows
 [Keep a Changelog](https://keepachangelog.com/en/1.1.0/); versions follow
 [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.1.2] — 2026-05-29
+
+### Changed
+- **No install-time lifecycle scripts in the published package.** The git-hook
+  registration moved off the `prepare` lifecycle to an opt-in `npm run hooks`,
+  so `npm install`/`npx cc-cream` runs nothing automatically. Improves the
+  supply-chain posture (and Socket score) with no change to the runtime.
+
+## [0.1.1] — 2026-05-29
+
+### Added
+- **Uninstall** — `node src/install.js --uninstall` (and the `/cc-cream:uninstall`
+  plugin command) removes cc-cream's `statusLine` block, but only when it is
+  cc-cream's; a foreign statusLine is left untouched. Offers to delete the copied
+  runtime and session-state files, and keeps `~/.claude/cc-cream.json` unless
+  `--purge` is passed.
+
+### Fixed
+- **Never overwrite a malformed `settings.json`** — the installer now refuses to
+  write when `settings.json` exists but fails to parse (or is not a JSON object),
+  instead of silently starting fresh and erasing the user's other settings.
+
 ## [0.1.0] — 2026-05-29
 
 Initial public release. cc-cream reads the JSON Claude Code pipes to its status
@@ -37,4 +59,6 @@ line and prints a colored ≤3-row bar — zero tokens, the model never sees it.
 - Supports **macOS and Linux**; Windows is a planned fast-follow.
 - Requires Claude Code **2.1.132+** (`effort` / `thinking` need 2.1.145+).
 
+[0.1.2]: https://github.com/bart-turczynski/cc-cream/compare/v0.1.1...v0.1.2
+[0.1.1]: https://github.com/bart-turczynski/cc-cream/compare/v0.1.0...v0.1.1
 [0.1.0]: https://github.com/bart-turczynski/cc-cream/releases/tag/v0.1.0

package/README.md

@@ -109,6 +109,26 @@ The installer:
 After install, Claude Code must be **trusted** for the directory (if prompted),
 and you may need to **restart** it for the bar to appear.
 
+### Uninstall
+
+Plugin users:
+```
+/cc-cream:uninstall
+/plugin uninstall cc-cream
+```
+
+npm / manual users:
+```bash
+node $(npm root -g)/cc-cream/src/install.js --uninstall   # npm
+node cc-cream/src/install.js --uninstall                  # manual clone
+```
+
+Uninstall removes the `statusLine` block **only if it is cc-cream's** — a
+statusLine you wired for something else is left untouched. It then offers to
+delete the copied runtime and session-state files, and **keeps your
+`~/.claude/cc-cream.json` config** unless you add `--purge`. Restart Claude Code
+to clear the bar.
+
 ## Configuration
 
 Every display decision is read from `~/.claude/cc-cream.json`. Edit it by hand

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cc-cream",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "Claude Code cache/context/cost status-line tool",
   "directories": {
     "doc": "docs"
@@ -14,7 +14,7 @@
     "test:manual": "cucumber-js --profile manual",
     "coverage": "c8 cucumber-js",
     "watch": "cucumber-js --watch",
-    "prepare": "simple-git-hooks",
+    "hooks": "simple-git-hooks",
     "prepublishOnly": "npm test"
   },
   "simple-git-hooks": {

package/src/install.js

@@ -42,6 +42,44 @@ function isInstalled(existing, command) {
   );
 }
 
+// True if an existing statusLine belongs to cc-cream under ANY install strategy
+// (dev repo, copied home runtime, or the plugin cache-glob) — every command
+// references the cc-cream entrypoint. Used by uninstall so we never touch a
+// statusLine the user wired for something else.
+function isCcCreamStatusLine(existing) {
+  return (
+    !!existing &&
+    typeof existing === 'object' &&
+    existing.type === 'command' &&
+    typeof existing.command === 'string' &&
+    existing.command.includes('cc-cream')
+  );
+}
+
+// Decide what an uninstall should do. Pure: returns { settings, changed, messages }.
+// Removes ONLY a cc-cream statusLine; a foreign statusLine is left verbatim.
+export function planUninstall(settings) {
+  const s = settings && typeof settings === 'object' ? settings : {};
+  const existing = s.statusLine;
+  const messages = [];
+
+  if (!isCcCreamStatusLine(existing)) {
+    if (existing && typeof existing === 'object') {
+      messages.push(
+        `Your statusLine is not cc-cream's — leaving it untouched:\n  ${JSON.stringify(existing)}`,
+      );
+    } else {
+      messages.push('No cc-cream statusLine found in settings.json — nothing to remove.');
+    }
+    return { settings: s, changed: false, messages };
+  }
+
+  messages.push(`Removing cc-cream statusLine:\n  ${JSON.stringify(existing)}`);
+  const next = { ...s };
+  delete next.statusLine;
+  return { settings: next, changed: true, messages };
+}
+
 // Decide what to do. Returns { settings, changed, messages, needsConsent }.
 // `consent` is the user's yes/no when an existing statusLine must be replaced.
 //
@@ -96,6 +134,32 @@ function destinationPath() {
   return path.join(os.homedir(), '.claude', 'cc-cream', 'cc-cream.js');
 }
 
+// Read settings.json safely. A MISSING or empty file -> {} (fresh start, nothing
+// to lose). A file that exists with content but fails to parse, or parses to a
+// non-object, is REFUSED: we exit rather than overwrite and erase the user's
+// other settings (permissions, hooks, plugins...). This guards the one path
+// where a blind write would be destructive.
+function readSettings(file) {
+  if (!fs.existsSync(file)) return {};
+  const raw = fs.readFileSync(file, 'utf8');
+  if (raw.trim() === '') return {};
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch {
+    console.error(`Error: ${file} is not valid JSON.`);
+    console.error('Refusing to write it — that would erase your other settings.');
+    console.error('Fix the JSON (or move the file aside) and re-run.');
+    process.exit(1);
+  }
+  if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) {
+    console.error(`Error: ${file} does not contain a JSON object.`);
+    console.error('Refusing to overwrite it. Move it aside and re-run if intended.');
+    process.exit(1);
+  }
+  return parsed;
+}
+
 function runtimeFiles(sourceFile) {
   const sourceDir = path.dirname(sourceFile);
   return fs.readdirSync(sourceDir)
@@ -143,19 +207,55 @@ function ask(question) {
   }));
 }
 
+// Remove the cc-cream wiring (and, with consent, its install artifacts). Keeps
+// the user's config (~/.claude/cc-cream.json) unless `--purge` is passed.
+async function uninstall({ purge }) {
+  const file = settingsPath();
+  const settings = readSettings(file);
+  const result = planUninstall(settings);
+  for (const m of result.messages) console.log(m);
+  if (result.changed) {
+    fs.writeFileSync(file, `${JSON.stringify(result.settings, null, 2)}\n`);
+    console.log(`\nUpdated ${file}.`);
+  }
+
+  const home = path.join(os.homedir(), '.claude');
+  const runtimeDir = path.join(home, 'cc-cream');
+  const stateFile = path.join(home, 'cc-cream-state.json');
+  const configFile = path.join(home, 'cc-cream.json');
+
+  const artifacts = [runtimeDir, stateFile].filter((p) => fs.existsSync(p));
+  if (artifacts.length) {
+    const remove = purge || (await ask(`Also delete the copied runtime and session state?\n  ${artifacts.join('\n  ')}`));
+    if (remove) {
+      for (const p of artifacts) fs.rmSync(p, { recursive: true, force: true });
+      console.log('Removed runtime and state files.');
+    } else {
+      console.log('Left runtime and state files in place.');
+    }
+  }
+  if (purge && fs.existsSync(configFile)) {
+    fs.rmSync(configFile, { force: true });
+    console.log(`Removed config ${configFile}.`);
+  } else if (fs.existsSync(configFile)) {
+    console.log(`Kept your config ${configFile} (pass --purge to remove it too).`);
+  }
+
+  console.log('\nRestart Claude Code to drop the bar.');
+}
+
 async function main() {
   const args = process.argv.slice(2);
+  if (args.includes('--uninstall')) {
+    await uninstall({ purge: args.includes('--purge') });
+    return;
+  }
   const plugin = args.includes('--plugin');
   // First non-flag arg is an optional local source path (manual mode only).
   const positional = args.filter((a) => !a.startsWith('--'));
 
   const file = settingsPath();
-  let settings = {};
-  try {
-    settings = JSON.parse(fs.readFileSync(file, 'utf8')) || {};
-  } catch {
-    settings = {}; // missing or malformed -> start fresh, don't clobber blindly below
-  }
+  const settings = readSettings(file);
 
   // planOpts holds whatever the chosen strategy needs to build its command.
   let planOpts;