feat: public lobby, custom connection IDs, and a friendlier session page

README.md

@@ -4,7 +4,7 @@
 
 # Clippy
 
-<img src="https://img.shields.io/badge/Version-v2.0.1-green">
+<img src="https://img.shields.io/badge/Version-v2.1.0-green">
 
 A web-based application that allows users to share text and files in real-time through secure, encrypted sessions.
 
@@ -33,21 +33,23 @@ A web-based application that allows users to share text and files in real-time t
 
 Tired of sharing text / files across different computers? Try this clippy!
 
-- **Session-based sharing**: Create or join sessions using short, custom-length IDs
+- **Session-based sharing**: Create or join sessions using short, custom-length IDs. Server-minted IDs leave out `i`, `o`, `e`, `0` and `1`, so an ID survives being read aloud or copied by eye; name your own and any of `a-z0-9` is fair game. The ID field is a password input so the OS drops out of a Chinese IME on focus — the value stays visible
+- **Public Clippys**: Hosts can unlock a session with the padlock beside the QR code to list it on the entry page. The five newest published sessions appear there with name, ID, creation time and last update, and they appear and disappear live over a WebSocket. Everything is private until someone deliberately unlocks it
 - **Encrypted payloads**: Each session uses a 256-bit AES-GCM key derived client-side from the connection ID (SHA-256 KDF). All block content is encrypted before it leaves the browser, so the backend only ever sees ciphertext. The server issues the ID and could derive the key too — this is encrypted-at-rest and on-the-wire, not strict end-to-end against a malicious server
 - **Real-time collaboration**: See blocks appear instantly when other users create them
-- **File uploads**: Support for small file uploads
+- **File uploads**: Support for small file uploads. Drop one or several files anywhere on the session page and they upload straight away — no need to open the composer first
+- **Image previews**: Uploaded images are decrypted in the browser and shown as thumbnails
 - **Curl upload**: Upload text or files from the terminal — host can enable/disable per session
   ```bash
   curl -d 'hello' https://your-host/u/SESSION_ID
   curl -F f=@file.txt https://your-host/u/SESSION_ID
   ```
 - **Raw links**: Generate public short links to share decrypted text or files with anyone (e.g. `https://your-host/r/SESSION_ID/CODE`)
 - **User management**:
-    - Custom or random user names
+    - Custom or random user names, remembered in local storage between visits
     - Host can transfer host rights to other users
     - Host can control whether new users can join
-- **Session persistence**: Sessions remain active until destroyed by host or after 1 hour of inactivity
+- **Session persistence**: Sessions remain active until destroyed by host or after 1 hour of inactivity. When one expires or is destroyed, the tab returns to the dashboard on its own instead of stopping at a warning
 - **Block system**: Add and delete text or file blocks, similar to Jupyter notebooks
 
 ---
@@ -129,7 +131,7 @@ docker run -p 8080:80 --env-file backend/.env clippy
 
 ### Known Bugs 🐛
 
-- Destroying the session might not directly take you back to homepage.
+- None right now.
 
 ---
 

README.zh-TW.md

@@ -4,7 +4,7 @@
 
 # Clippy
 
-<img src="https://img.shields.io/badge/Version-v2.0.1-green">
+<img src="https://img.shields.io/badge/Version-v2.1.0-green">
 
 一個讓使用者能透過安全、加密的的方式，即時分享文字與檔案的網頁應用程式。
 
@@ -33,21 +33,23 @@
 
 厭倦了在不同電腦間傳輸文字或檔案嗎？試試這個剪貼工具！
 
-- **基於連線階段 (Session) 的分享**：使用克制化長度的 ID 建立/加入連線。
+- **基於連線階段 (Session) 的分享**：使用克制化長度的 ID 建立/加入連線，可自行指定 ID 或交由伺服器產生。伺服器自動產生的 ID 不會出現 `i`、`o`、`e`、`0`、`1`，避免唸出來或用眼睛抄寫時認錯；自行指定則 `a-z0-9` 皆可使用。ID 欄位為密碼輸入框，讓作業系統在聚焦時自動切離中文輸入法，但輸入內容仍然可見。
+- **公開 Clippy**：主持人可按下 QR Code 旁的鎖頭，把連線列在首頁上。首頁會顯示最新的 5 個公開連線，包含名稱、ID、建立時間與最後更新時間，並透過 WebSocket 即時顯示與隱藏。未經主持人解鎖前一律為私人連線。
 - **加密傳輸**：每個連線階段使用一把由連線 ID 透過 SHA-256 衍生的 256 位元 AES-GCM 金鑰，所有文字與檔案在離開瀏覽器前皆會在用戶端加密；伺服器僅儲存密文（伺服器同時持有 ID，因此並非嚴格的端對端加密）。
 - **即時協作**：當其他使用者建立區塊時，您能立即看到它們出現。
-- **檔案上傳**：支援小檔案上傳。
+- **檔案上傳**：支援小檔案上傳。也可以直接把一個或多個檔案拖曳到連線頁面的任一處，不必先開啟新增區塊就會自動上傳。
+- **圖片預覽**：上傳的圖片會在瀏覽器中解密並顯示縮圖。
 - **Curl 上傳**：透過終端機上傳文字或檔案，主持人可針對每個連線啟用/停用此功能。
   ```bash
   curl -d 'hello' https://your-host/u/SESSION_ID
   curl -F f=@file.txt https://your-host/u/SESSION_ID
   ```
 - **Raw 連結**：產生公開短連結，與任何人分享解密後的文字或檔案（例如 `https://your-host/r/SESSION_ID/CODE`）
 - **使用者管理**：
-    - 自訂或隨機使用者名稱
+    - 自訂或隨機使用者名稱，名稱會記錄在 local storage 中並於下次沿用
     - 主持人 (Host) 可轉移權限給其他使用者
     - 主持人可控制是否允許新使用者加入
-- **連線持久性**：連線將保持啟用，直到主持人銷毀或閒置 1 小時後自動結束。
+- **連線持久性**：連線將保持啟用，直到主持人銷毀或閒置 1 小時後自動結束。連線過期或被銷毀時，頁面會直接返回首頁，不再停在警告視窗上。
 - **區塊系統**：新增與刪除文字或檔案區塊，操作方式類似 Jupyter notebooks。
 
 ---
@@ -129,7 +131,7 @@ docker run -p 8080:80 --env-file backend/.env clippy
 
 ### 已知的bug 🐛
 
-- 銷毀連線階段後，可能無法直接導回首頁。
+- 目前沒有。
 
 ---