# dropship

> dropship is a client-side web wrapper around the here.now static hosting API. Drag and drop a folder, ZIP, individual files, or paste a GitHub repository URL, and get a live URL in seconds — no account required. The UI is bilingual (English/German). Not affiliated with here.now.

Uploads work anonymously by default (sites expire after 24 hours unless claimed), or with an optional here.now API key for permanent sites. All application state — deployment history, notes, pinned sites, and the opt-in remembered API key — lives in the browser. There is no backend, database, or account system; the only server-side code consists of two stateless, transparent proxy routes that work around browser CORS restrictions, plus a GitHub repository fetcher.

## Key pages

- [Homepage](/): the drag-and-drop deploy flow, how it works, FAQ
- [Deployments](/deployments): local deployment history (search, filter, sort, pin, notes, export/import, redeploy, duplicate)
- [Privacy Policy](/privacy): GDPR privacy policy (DE/EN)
- [Terms of Service](/terms): terms of service (DE/EN)
- [Imprint](/imprint): legal notice (DE/EN)

## How publishing works

1. `POST /api/v1/publish` with a file manifest (path, size, contentType, SHA-256 hash) returns presigned upload URLs, a finalize URL, and — for anonymous publishes — a one-time claim link.
2. Each file is uploaded (directly from the browser when CORS allows, otherwise through the transparent `/api/upload` fallback).
3. `POST /api/v1/publish/:slug/finalize` activates the site.

Anonymous sites expire after 24 hours; the claim link transfers ownership and removes the expiry. API-key publishes follow the account's retention. Single-page apps (React/Vue/Svelte/Vite) enable here.now `spaMode` automatically so client-side routes do not 404.

## Source map

- `src/lib/herenow/` — the single here.now API client
- `src/lib/files.ts` — file/ZIP/GitHub collection and path normalization
- `src/lib/deployments.ts` — localStorage deployment history store
- `src/app/api/herenow/[...path]/` — transparent CORS proxy to https://here.now (publish/artifact routes only)
- `src/app/api/upload/` — SSRF-guarded presigned-upload fallback
- `src/app/api/github/` — public GitHub zipball fetcher for the "Deploy from GitHub" flow

## Reference

- here.now API documentation: https://here.now/docs
- Source: https://github.com/ArturLauche/dropship