hop2 0.11.15 → 0.11.16

package/README.md

@@ -320,6 +320,44 @@ hop client ./credentials.json
 
 First run prompts for password setup and TOTP enrollment, then the user logs in at their assigned URL such as `https://alice.hop.yourdomain.com`.
 
+### Self-service signup (optional)
+
+Instead of adding every user by hand, the landing host can serve a public
+signup page. Visitors ask for a subdomain, confirm an email address on a
+domain you nominate, and wait for you to approve — approval runs the same
+`hop user add` + `hop user export` provisioning as the manual flow, then
+emails them a one-time link to collect their credentials.
+
+```bash
+hop mail setup                      # SMTP (a Gmail App Password works)
+hop registration admin jianzhou     # reserve your own subdomain
+hop registration domain uchicago.edu
+hop registration enable
+```
+
+Then review requests as they arrive:
+
+```bash
+hop user pending
+hop user approve alice
+hop user reject bob "please use your own name"
+```
+
+Notes:
+
+- Off by default. Enabling it makes the bare hostname public; your own
+  browser keeps working while its session cookie is valid, and
+  `https://<landing-host>/signin` always reaches the login page.
+- Nothing runs on your machine for them. A registrant gets a Cloudflare
+  tunnel and a DNS record; hop itself runs on *their* computer, with their
+  own password and TOTP.
+- The tunnel lives in **your** Cloudflare account and the subdomain is under
+  **your** domain, so an approved user can serve anything they like at
+  `their-name.your-domain`. Approve people you would vouch for, and use
+  `hop user remove <name>` to revoke (delete the DNS record by hand).
+- Registrations live in `~/.hop2/.registrations.json` (0600). Verification
+  and claim links are stored only as hashes.
+
 ### Security
 
 - Password + TOTP is supported; password is required for custom domains

package/hay/apps/web/src/utils/voiceHold.ts

@@ -116,6 +116,17 @@ export const createVoiceHold = (opts: VoiceHoldOptions) => {
    *  undefined — not a voice-relevant event; continue with other branches.
    */
   const handleKey = (ev: { type: string; code: string; key: string; repeat?: boolean; metaKey?: boolean; ctrlKey?: boolean; altKey?: boolean; shiftKey?: boolean }): boolean | undefined => {
+    // Return, mid-dictation, ENDS it and keeps the words (Jian). Without
+    // this the Enter fell through to the terminal while the recogniser was
+    // still running: a bare newline hit the composer, and the transcript
+    // landed after it — the one key you would reach for to finish a thought
+    // was the one that split it in half. Swallowed rather than passed on, so
+    // this inserts and does not also submit; a second Return sends it.
+    if (active && ev.type === "keydown" && (ev.key === "Enter" || ev.code === "Enter"
+                                            || ev.code === "NumpadEnter")) {
+      stop();
+      return false;
+    }
     if (ev.code === "Space" && !ev.metaKey && !ev.ctrlKey && !ev.altKey && !ev.shiftKey
         && !!speechRecognitionCtor() && (active || opts.eligible())) {
       if (ev.type === "keydown") {