handraise 0.2.0

[0.2.0] - 2026-09-01

Everything below shipped after 0.1.0 was published. 0.1.0 is broken and
deprecated: its bundle used a namespace import for qrcode-terminal, which
resolves to { default: … } under Node's ESM/CJS interop, so generate was
undefined and the QR code — the whole onboarding path — silently failed to
render. Bun-driven tests never saw it because bun's interop differs. CI now
runs the shipped artifact under node after every build.

Added

• npx handraise — a one-command demo. With only a SOLARI_API_KEY, it
  deploys its own TOTP-walled portal into a sandbox, opens a cloud browser
  against it, raises a hand and prints the QR.
• handoffQr(url) export — render the handoff QR yourself.
• Focus feedback on the phone — a ring around the focused field and a
  "Typing into: Password" label, so the human can see where typing lands.
  Only the field's label is read, never its value.
• A key bar on the phone — backspace, clear, tab, enter as explicit
  buttons. Deletion previously rode on a keydown that virtual keyboards
  often do not send (Android reports keyCode 229), so text already in a
  remote field could not be removed from a phone at all.

Fixed

• The QR code renders in the published bundle (see above).
• The QR is no longer printed when it would not fit the terminal — a wrapped
  QR looks like a QR and does not scan.

Changed

• Quiet by default: the library writes nothing to stdout unless you pass
  logger: consoleLogger or an onEvent handler.