Alex Gleason
0d48221476
Encrypted settings synced via NIP-78 were parsed with a bare JSON.parse() and cast with 'as EncryptedSettings', allowing invalid data (e.g. theme as an object instead of a string) to pass through unchecked and crash the UI when applied to classList.add(). Now both useEncryptedSettings and useInitialSync validate decrypted JSON with a shared EncryptedSettingsSchema, gracefully dropping invalid fields instead of propagating them.