snapshare 0.2.2__tar.gz

snapshare-0.2.2/.dockerignore

@@ -0,0 +1,16 @@
+.git/
+.github/
+.venv/
+.pytest_cache/
+.ruff_cache/
+__pycache__/
+tests/
+uploads/
+*.pyc
+*.pyo
+.env
+.gitignore
+.pre-commit-config.yaml
+README.md
+Dockerfile
+.dockerignore

snapshare-0.2.2/.github/dependabot.yml

@@ -0,0 +1,16 @@
+version: 2
+updates:
+  - package-ecosystem: pip
+    directory: /
+    schedule:
+      interval: weekly
+
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+
+  - package-ecosystem: pre-commit
+    directory: /
+    schedule:
+      interval: weekly

snapshare-0.2.2/.github/workflows/ci.yml

@@ -0,0 +1,28 @@
+name: CI
+
+on:
+  push:
+    branches: [master]
+  pull_request:
+
+jobs:
+  lint-and-test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+
+      - uses: actions/setup-python@v7
+        with:
+          python-version: "3.13"
+
+      - name: Install dependencies
+        run: pip install '.[dev]'
+
+      - name: Lint
+        run: ruff check .
+
+      - name: Format check
+        run: ruff format --check .
+
+      - name: Test
+        run: pytest

snapshare-0.2.2/.github/workflows/deploy.yml

@@ -0,0 +1,44 @@
+name: Deploy
+
+on:
+  push:
+    tags:
+      - "v*"
+
+jobs:
+  lint-and-test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+
+      - uses: actions/setup-python@v7
+        with:
+          python-version: "3.13"
+
+      - name: Install dependencies
+        run: pip install '.[dev]'
+
+      - name: Lint
+        run: ruff check .
+
+      - name: Format check
+        run: ruff format --check .
+
+      - name: Test
+        run: pytest
+
+  deploy:
+    needs: lint-and-test
+    runs-on: ubuntu-latest
+    concurrency:
+      group: deploy-fly
+      cancel-in-progress: false
+    steps:
+      - uses: actions/checkout@v7
+
+      - uses: superfly/flyctl-actions/setup-flyctl@master
+
+      - name: Deploy to Fly.io
+        run: flyctl deploy --remote-only
+        env:
+          FLY_API_TOKEN: ${{ secrets.FLY_API_TOKEN }}

snapshare-0.2.2/.gitignore

@@ -0,0 +1,8 @@
+.venv/
+uploads/
+__pycache__/
+*.pyc
+*.egg-info/
+build/
+dist/
+.env

snapshare-0.2.2/.pre-commit-config.yaml

@@ -0,0 +1,7 @@
+repos:
+  - repo: https://github.com/astral-sh/ruff-pre-commit
+    rev: v0.16.6
+    hooks:
+      - id: ruff
+        args: [--fix]
+      - id: ruff-format

snapshare-0.2.2/Dockerfile

@@ -0,0 +1,14 @@
+FROM python:3.13-slim
+
+WORKDIR /app
+
+COPY pyproject.toml .
+COPY src/ src/
+# .git isn't in the build context, so setuptools-scm can't derive the version.
+# The container doesn't need a real version, so pin it to a sentinel.
+ENV SETUPTOOLS_SCM_PRETEND_VERSION_FOR_SNAPSHARE=0.0.0
+RUN pip install --no-cache-dir .
+
+EXPOSE 8080
+
+CMD ["gunicorn", "--workers", "2", "--timeout", "60", "--bind", "0.0.0.0:8080", "--access-logfile", "-", "snapshare.app:app"]

snapshare-0.2.2/PKG-INFO

@@ -0,0 +1,99 @@
+Metadata-Version: 2.4
+Name: snapshare
+Version: 0.2.2
+Summary: Lightweight photo-sharing web app for group events
+Requires-Python: >=3.13
+Description-Content-Type: text/markdown
+Requires-Dist: boto3==1.43.89
+Requires-Dist: flask==3.1.3
+Requires-Dist: gunicorn==26.2.0
+Requires-Dist: pillow==12.3.0
+Provides-Extra: dev
+Requires-Dist: build==1.6.0; extra == "dev"
+Requires-Dist: moto[s3]==5.2.3; extra == "dev"
+Requires-Dist: pre-commit==4.6.2; extra == "dev"
+Requires-Dist: pytest==9.1.1; extra == "dev"
+Requires-Dist: ruff==0.16.6; extra == "dev"
+Requires-Dist: twine==7.0.0; extra == "dev"
+
+# SnapShare
+
+A lightweight photo-sharing web app for group events. Guests scan a link (or QR code), upload photos from their phone, and instantly see everyone else's shots in a shared gallery.
+
+## Prerequisites
+
+- Python 3.13+
+
+## Setup
+
+```bash
+python3 -m venv .venv
+source .venv/bin/activate
+pip install '.[dev]'                  # installs app + dev deps from pyproject.toml
+pre-commit install                    # wire up git hooks
+```
+
+## Running locally
+
+```bash
+python -m snapshare.app
+```
+
+Open [http://localhost:5000](http://localhost:5000).
+
+Uploaded photos are saved to an `uploads/` directory next to the module (created automatically, git-ignored).
+
+## Project structure
+
+```
+snapshare/
+├── pyproject.toml              # Project metadata, dependencies, tool config
+├── src/
+│   └── snapshare/
+│       ├── __init__.py
+│       ├── app.py              # Flask app — routes and upload logic
+│       └── templates/
+│           ├── index.html      # Upload form
+│           └── gallery.html    # Shared photo gallery
+└── tests/                      # Pytest suite
+```
+
+## Linting & formatting
+
+```bash
+ruff check .          # lint
+ruff check --fix .    # lint + auto-fix
+ruff format .         # format
+```
+
+## Testing
+
+```bash
+pytest
+```
+
+## Publishing to PyPI
+
+Version is derived from the nearest `v*` git tag via `setuptools-scm`. Building
+from an untagged commit produces a dev version (e.g. `0.2.2.dev1+g1234abc`).
+To cut a real release from a tagged commit:
+
+```bash
+git checkout v0.2.1              # or whichever tag
+rm -rf dist/ build/              # clean any previous build output
+python -m build                  # creates dist/snapshare-0.2.1-*.whl and .tar.gz
+twine check dist/*               # validate metadata + long description
+twine upload dist/*              # uploads to PyPI (needs API token, see below)
+```
+
+**PyPI credentials:** create an API token at
+[pypi.org/manage/account/token/](https://pypi.org/manage/account/token/)
+scoped to the `snapshare` project. `twine` reads it from `~/.pypirc` or the
+`TWINE_USERNAME=__token__` + `TWINE_PASSWORD=pypi-...` env vars.
+
+## Roadmap
+
+- [ ] Event/album scoping with shareable links
+- [ ] QR code generation for events
+- [ ] Cloud storage backend (S3 / GCS)
+- [ ] Mobile-optimised gallery

snapshare-0.2.2/README.md

@@ -0,0 +1,81 @@
+# SnapShare
+
+A lightweight photo-sharing web app for group events. Guests scan a link (or QR code), upload photos from their phone, and instantly see everyone else's shots in a shared gallery.
+
+## Prerequisites
+
+- Python 3.13+
+
+## Setup
+
+```bash
+python3 -m venv .venv
+source .venv/bin/activate
+pip install '.[dev]'                  # installs app + dev deps from pyproject.toml
+pre-commit install                    # wire up git hooks
+```
+
+## Running locally
+
+```bash
+python -m snapshare.app
+```
+
+Open [http://localhost:5000](http://localhost:5000).
+
+Uploaded photos are saved to an `uploads/` directory next to the module (created automatically, git-ignored).
+
+## Project structure
+
+```
+snapshare/
+├── pyproject.toml              # Project metadata, dependencies, tool config
+├── src/
+│   └── snapshare/
+│       ├── __init__.py
+│       ├── app.py              # Flask app — routes and upload logic
+│       └── templates/
+│           ├── index.html      # Upload form
+│           └── gallery.html    # Shared photo gallery
+└── tests/                      # Pytest suite
+```
+
+## Linting & formatting
+
+```bash
+ruff check .          # lint
+ruff check --fix .    # lint + auto-fix
+ruff format .         # format
+```
+
+## Testing
+
+```bash
+pytest
+```
+
+## Publishing to PyPI
+
+Version is derived from the nearest `v*` git tag via `setuptools-scm`. Building
+from an untagged commit produces a dev version (e.g. `0.2.2.dev1+g1234abc`).
+To cut a real release from a tagged commit:
+
+```bash
+git checkout v0.2.1              # or whichever tag
+rm -rf dist/ build/              # clean any previous build output
+python -m build                  # creates dist/snapshare-0.2.1-*.whl and .tar.gz
+twine check dist/*               # validate metadata + long description
+twine upload dist/*              # uploads to PyPI (needs API token, see below)
+```
+
+**PyPI credentials:** create an API token at
+[pypi.org/manage/account/token/](https://pypi.org/manage/account/token/)
+scoped to the `snapshare` project. `twine` reads it from `~/.pypirc` or the
+`TWINE_USERNAME=__token__` + `TWINE_PASSWORD=pypi-...` env vars.
+
+## Roadmap
+
+- [ ] Event/album scoping with shareable links
+- [ ] QR code generation for events
+- [ ] Cloud storage backend (S3 / GCS)
+- [ ] Mobile-optimised gallery

snapshare-0.2.2/fly.toml

@@ -0,0 +1,21 @@
+# fly.toml app configuration file generated for snapshare on 2026-09-06T21:35:18-05:00
+#
+# See https://fly.io/docs/reference/configuration/ for information about how to use this file.
+#
+
+app = 'snapshare'
+primary_region = 'iad'
+
+[build]
+  dockerfile = 'Dockerfile'
+
+[http_service]
+  internal_port = 8080
+  force_https = true
+  auto_stop_machines = 'stop'
+  auto_start_machines = true
+  min_machines_running = 0
+  processes = ['app']
+
+[[vm]]
+  size = 'shared-cpu-1x'

snapshare-0.2.2/pyproject.toml

@@ -0,0 +1,51 @@
+[build-system]
+requires = ["setuptools>=61.0", "setuptools-scm>=8"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "snapshare"
+dynamic = ["version"]
+description = "Lightweight photo-sharing web app for group events"
+readme = "README.md"
+requires-python = ">=3.13"
+dependencies = [
+    "boto3==1.43.89",
+    "flask==3.1.3",
+    "gunicorn==26.2.0",
+    "pillow==12.3.0",
+]
+
+[project.optional-dependencies]
+dev = [
+    "build==1.6.0",
+    "moto[s3]==5.2.3",
+    "pre-commit==4.6.2",
+    "pytest==9.1.1",
+    "ruff==0.16.6",
+    "twine==7.0.0",
+]
+
+[tool.setuptools.packages.find]
+where = ["src"]
+
+[tool.setuptools.package-data]
+snapshare = ["templates/*.html"]
+
+[tool.setuptools_scm]
+# Version derived from the nearest `v*` git tag.
+
+[tool.ruff]
+target-version = "py313"
+line-length = 100
+
+[tool.ruff.lint]
+select = [
+    "E",   # pycodestyle errors
+    "W",   # pycodestyle warnings
+    "F",   # pyflakes
+    "I",   # isort
+    "UP",  # pyupgrade
+]
+
+[tool.pytest.ini_options]
+testpaths = ["tests"]

snapshare-0.2.2/setup.cfg

@@ -0,0 +1,4 @@
+[egg_info]
+tag_build = 
+tag_date = 0
+

snapshare-0.2.2/src/snapshare/app.py

@@ -0,0 +1,78 @@
+import io
+import os
+import uuid
+from pathlib import Path
+
+from flask import Flask, abort, redirect, render_template, request, url_for
+from PIL import Image
+
+from snapshare import storage
+
+ALLOWED_EXTENSIONS = {".jpg", ".jpeg", ".png", ".gif", ".webp", ".heic"}
+MAX_CONTENT_LENGTH = 20 * 1024 * 1024  # 20 MB
+ALLOWED_IPS = {ip.strip() for ip in os.environ.get("ALLOWED_IPS", "").split(",") if ip.strip()}
+
+app = Flask(__name__)
+app.config["MAX_CONTENT_LENGTH"] = MAX_CONTENT_LENGTH
+
+
+@app.before_request
+def restrict_ip():
+    if not ALLOWED_IPS:
+        return
+    client_ip = request.headers.get("Fly-Client-IP", request.remote_addr)
+    if client_ip not in ALLOWED_IPS:
+        abort(403)
+
+
+def allowed_file(filename: str) -> bool:
+    return Path(filename).suffix.lower() in ALLOWED_EXTENSIONS
+
+
+@app.route("/")
+def index():
+    return render_template("index.html")
+
+
+@app.route("/upload", methods=["POST"])
+def upload():
+    file = request.files.get("photo")
+    if not file or file.filename == "":
+        return render_template("index.html", error="No file selected.")
+
+    if not allowed_file(file.filename):
+        return render_template("index.html", error="Only image files are allowed.")
+
+    suffix = Path(file.filename).suffix.lower()
+    key = f"{uuid.uuid4().hex}{suffix}"
+    raw = io.BytesIO(file.read())
+
+    # Normalise orientation from EXIF so browsers display it correctly
+    try:
+        with Image.open(raw) as img:
+            img = img.convert("RGB")
+            exif = img.getexif()
+            orientation = exif.get(274)  # 274 = Orientation tag
+            rotations = {3: 180, 6: 270, 8: 90}
+            if orientation in rotations:
+                img = img.rotate(rotations[orientation], expand=True)
+            out = io.BytesIO()
+            img.save(out, "JPEG", quality=90)
+            out.seek(0)
+            key = f"{uuid.uuid4().hex}.jpg"
+            storage.save(key, out, content_type="image/jpeg")
+    except Exception:
+        raw.seek(0)
+        storage.save(key, raw)
+
+    return redirect(url_for("gallery"))
+
+
+@app.route("/gallery")
+def gallery():
+    photos = [storage.photo_url(key) for key in storage.list_keys()]
+    return render_template("gallery.html", photos=photos)
+
+
+if __name__ == "__main__":
+    app.run(debug=True, port=5000)

snapshare-0.2.2/src/snapshare/storage.py

@@ -0,0 +1,45 @@
+"""S3-compatible object storage for photos.
+
+Backed by Tigris in production. Fly.io's `fly storage create` injects
+AWS_ENDPOINT_URL_S3, BUCKET_NAME, and credentials as app secrets, so no
+explicit configuration is needed. Tests use moto.
+
+The bucket is private (Tigris' default), so gallery photos are served via
+short-lived presigned GET URLs generated per gallery view. See
+`photo_url()`.
+"""
+
+import os
+from typing import BinaryIO
+
+import boto3
+
+PRESIGNED_URL_TTL_SECONDS = 3600  # 1 hour
+
+
+def _client():
+    # Fresh client per call so moto's mock_aws intercepts in tests.
+    return boto3.client("s3")
+
+
+def _bucket() -> str:
+    return os.environ.get("BUCKET_NAME", "")
+
+
+def save(key: str, body: BinaryIO, content_type: str = "application/octet-stream") -> None:
+    _client().put_object(Bucket=_bucket(), Key=key, Body=body, ContentType=content_type)
+
+
+def list_keys() -> list[str]:
+    resp = _client().list_objects_v2(Bucket=_bucket())
+    objects = resp.get("Contents", [])
+    objects.sort(key=lambda o: o["LastModified"], reverse=True)
+    return [o["Key"] for o in objects]
+
+
+def photo_url(key: str) -> str:
+    return _client().generate_presigned_url(
+        "get_object",
+        Params={"Bucket": _bucket(), "Key": key},
+        ExpiresIn=PRESIGNED_URL_TTL_SECONDS,
+    )

snapshare-0.2.2/src/snapshare/templates/gallery.html

@@ -0,0 +1,145 @@
+<!doctype html>
+<html lang="en">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>SnapShare — Gallery</title>
+  <style>
+    *, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }
+
+    body {
+      font-family: system-ui, sans-serif;
+      background: #f5f5f5;
+      min-height: 100vh;
+      padding: 1.5rem;
+    }
+
+    header {
+      display: flex;
+      align-items: baseline;
+      gap: 1rem;
+      margin-bottom: 1.5rem;
+      max-width: 960px;
+      margin-left: auto;
+      margin-right: auto;
+    }
+
+    header h1 { font-size: 1.6rem; }
+
+    .upload-link {
+      margin-left: auto;
+      color: #6366f1;
+      text-decoration: none;
+      font-size: .9rem;
+      font-weight: 600;
+    }
+    .upload-link:hover { text-decoration: underline; }
+
+    .count { color: #888; font-size: .9rem; }
+
+    .grid {
+      display: grid;
+      grid-template-columns: repeat(auto-fill, minmax(180px, 1fr));
+      gap: .75rem;
+      max-width: 960px;
+      margin: 0 auto;
+    }
+
+    .grid a {
+      display: block;
+      border-radius: .6rem;
+      overflow: hidden;
+      background: #ddd;
+      aspect-ratio: 1;
+    }
+
+    .grid img {
+      width: 100%;
+      height: 100%;
+      object-fit: cover;
+      display: block;
+      transition: transform .2s;
+    }
+    .grid a:hover img { transform: scale(1.04); }
+
+    .empty {
+      text-align: center;
+      color: #aaa;
+      margin-top: 4rem;
+      font-size: 1.1rem;
+    }
+
+    /* Lightbox */
+    #lightbox {
+      display: none;
+      position: fixed;
+      inset: 0;
+      background: rgba(0,0,0,.85);
+      align-items: center;
+      justify-content: center;
+      z-index: 100;
+      padding: 1rem;
+    }
+    #lightbox.open { display: flex; }
+    #lightbox img {
+      max-width: 100%;
+      max-height: 90vh;
+      border-radius: .5rem;
+      box-shadow: 0 8px 40px rgba(0,0,0,.5);
+    }
+    #lightbox .close {
+      position: absolute;
+      top: 1rem; right: 1.25rem;
+      color: #fff;
+      font-size: 2rem;
+      cursor: pointer;
+      line-height: 1;
+    }
+  </style>
+</head>
+<body>
+  <header>
+    <h1>SnapShare</h1>
+    {% if photos %}
+      <span class="count">{{ photos|length }} photo{{ 's' if photos|length != 1 }}</span>
+    {% endif %}
+    <a href="/" class="upload-link">+ Add a photo</a>
+  </header>
+
+  {% if photos %}
+    <div class="grid">
+      {% for photo in photos %}
+        <a href="#" data-src="{{ photo }}" class="thumb">
+          <img src="{{ photo }}" alt="shared photo" loading="lazy">
+        </a>
+      {% endfor %}
+    </div>
+  {% else %}
+    <p class="empty">No photos yet — be the first to share one!</p>
+  {% endif %}
+
+  <div id="lightbox">
+    <span class="close" id="lbClose">&times;</span>
+    <img id="lbImg" src="" alt="full size photo">
+  </div>
+
+  <script>
+    const lightbox = document.getElementById('lightbox');
+    const lbImg = document.getElementById('lbImg');
+
+    document.querySelectorAll('.thumb').forEach(a => {
+      a.addEventListener('click', e => {
+        e.preventDefault();
+        lbImg.src = a.dataset.src;
+        lightbox.classList.add('open');
+      });
+    });
+
+    document.getElementById('lbClose').addEventListener('click', close);
+    lightbox.addEventListener('click', e => { if (e.target === lightbox) close(); });
+    document.addEventListener('keydown', e => { if (e.key === 'Escape') close(); });
+
+    function close() { lightbox.classList.remove('open'); lbImg.src = ''; }
+  </script>
+</body>
+</html>

snapshare-0.2.2/src/snapshare/templates/index.html

@@ -0,0 +1,176 @@
+<!doctype html>
+<html lang="en">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>SnapShare — Share Your Photos</title>
+  <style>
+    *, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }
+
+    body {
+      font-family: system-ui, sans-serif;
+      background: #f5f5f5;
+      min-height: 100vh;
+      display: flex;
+      flex-direction: column;
+      align-items: center;
+      justify-content: center;
+      padding: 1.5rem;
+    }
+
+    .card {
+      background: #fff;
+      border-radius: 1rem;
+      box-shadow: 0 4px 24px rgba(0,0,0,.08);
+      padding: 2.5rem 2rem;
+      width: 100%;
+      max-width: 420px;
+    }
+
+    h1 { font-size: 1.6rem; margin-bottom: .25rem; }
+    .subtitle { color: #666; font-size: .95rem; margin-bottom: 2rem; }
+
+    .drop-zone {
+      border: 2px dashed #ccc;
+      border-radius: .75rem;
+      padding: 2.5rem 1rem;
+      text-align: center;
+      cursor: pointer;
+      transition: border-color .2s, background .2s;
+      position: relative;
+    }
+    .drop-zone:hover, .drop-zone.dragover {
+      border-color: #6366f1;
+      background: #f0f0ff;
+    }
+    .drop-zone input[type="file"] {
+      position: absolute;
+      inset: 0;
+      opacity: 0;
+      cursor: pointer;
+      width: 100%;
+      height: 100%;
+    }
+    .drop-zone .icon { font-size: 2.5rem; display: block; margin-bottom: .5rem; }
+    .drop-zone .hint { color: #888; font-size: .85rem; margin-top: .25rem; }
+
+    #preview {
+      margin-top: 1rem;
+      display: none;
+      border-radius: .5rem;
+      overflow: hidden;
+    }
+    #preview img {
+      width: 100%;
+      max-height: 220px;
+      object-fit: cover;
+      display: block;
+    }
+    #preview .filename {
+      background: #f5f5f5;
+      padding: .4rem .75rem;
+      font-size: .8rem;
+      color: #555;
+      word-break: break-all;
+    }
+
+    .error {
+      margin-top: 1rem;
+      padding: .75rem 1rem;
+      background: #fff0f0;
+      border-left: 3px solid #e55;
+      color: #c00;
+      border-radius: .25rem;
+      font-size: .9rem;
+    }
+
+    button[type="submit"] {
+      margin-top: 1.25rem;
+      width: 100%;
+      padding: .85rem;
+      background: #6366f1;
+      color: #fff;
+      border: none;
+      border-radius: .75rem;
+      font-size: 1rem;
+      font-weight: 600;
+      cursor: pointer;
+      transition: background .2s;
+    }
+    button[type="submit"]:hover { background: #4f51d8; }
+    button[type="submit"]:disabled { background: #a5b4fc; cursor: not-allowed; }
+
+    .gallery-link {
+      display: block;
+      text-align: center;
+      margin-top: 1.25rem;
+      color: #6366f1;
+      text-decoration: none;
+      font-size: .9rem;
+    }
+    .gallery-link:hover { text-decoration: underline; }
+  </style>
+</head>
+<body>
+  <div class="card">
+    <h1>SnapShare</h1>
+    <p class="subtitle">Upload your photos to the shared album.</p>
+
+    <form method="post" action="/upload" enctype="multipart/form-data" id="uploadForm">
+      <div class="drop-zone" id="dropZone">
+        <span class="icon">📷</span>
+        <strong>Tap to choose a photo</strong><br>
+        <span class="hint">or drag &amp; drop here</span>
+        <input type="file" name="photo" accept="image/*" id="fileInput" required>
+      </div>
+
+      <div id="preview">
+        <img id="previewImg" src="" alt="preview">
+        <div class="filename" id="previewName"></div>
+      </div>
+
+      {% if error %}
+        <div class="error">{{ error }}</div>
+      {% endif %}
+
+      <button type="submit" id="submitBtn" disabled>Upload Photo</button>
+    </form>
+
+    <a href="/gallery" class="gallery-link">View shared gallery →</a>
+  </div>
+
+  <script>
+    const input = document.getElementById('fileInput');
+    const preview = document.getElementById('preview');
+    const previewImg = document.getElementById('previewImg');
+    const previewName = document.getElementById('previewName');
+    const submitBtn = document.getElementById('submitBtn');
+    const dropZone = document.getElementById('dropZone');
+
+    input.addEventListener('change', () => handleFile(input.files[0]));
+
+    dropZone.addEventListener('dragover', e => { e.preventDefault(); dropZone.classList.add('dragover'); });
+    dropZone.addEventListener('dragleave', () => dropZone.classList.remove('dragover'));
+    dropZone.addEventListener('drop', e => {
+      e.preventDefault();
+      dropZone.classList.remove('dragover');
+      const file = e.dataTransfer.files[0];
+      if (file) { input.files = e.dataTransfer.files; handleFile(file); }
+    });
+
+    function handleFile(file) {
+      if (!file) return;
+      const url = URL.createObjectURL(file);
+      previewImg.src = url;
+      previewName.textContent = file.name;
+      preview.style.display = 'block';
+      submitBtn.disabled = false;
+    }
+
+    document.getElementById('uploadForm').addEventListener('submit', () => {
+      submitBtn.disabled = true;
+      submitBtn.textContent = 'Uploading…';
+    });
+  </script>
+</body>
+</html>

snapshare-0.2.2/src/snapshare.egg-info/PKG-INFO

@@ -0,0 +1,99 @@
+Metadata-Version: 2.4
+Name: snapshare
+Version: 0.2.2
+Summary: Lightweight photo-sharing web app for group events
+Requires-Python: >=3.13
+Description-Content-Type: text/markdown
+Requires-Dist: boto3==1.43.89
+Requires-Dist: flask==3.1.3
+Requires-Dist: gunicorn==26.2.0
+Requires-Dist: pillow==12.3.0
+Provides-Extra: dev
+Requires-Dist: build==1.6.0; extra == "dev"
+Requires-Dist: moto[s3]==5.2.3; extra == "dev"
+Requires-Dist: pre-commit==4.6.2; extra == "dev"
+Requires-Dist: pytest==9.1.1; extra == "dev"
+Requires-Dist: ruff==0.16.6; extra == "dev"
+Requires-Dist: twine==7.0.0; extra == "dev"
+
+# SnapShare
+
+A lightweight photo-sharing web app for group events. Guests scan a link (or QR code), upload photos from their phone, and instantly see everyone else's shots in a shared gallery.
+
+## Prerequisites
+
+- Python 3.13+
+
+## Setup
+
+```bash
+python3 -m venv .venv
+source .venv/bin/activate
+pip install '.[dev]'                  # installs app + dev deps from pyproject.toml
+pre-commit install                    # wire up git hooks
+```
+
+## Running locally
+
+```bash
+python -m snapshare.app
+```
+
+Open [http://localhost:5000](http://localhost:5000).
+
+Uploaded photos are saved to an `uploads/` directory next to the module (created automatically, git-ignored).
+
+## Project structure
+
+```
+snapshare/
+├── pyproject.toml              # Project metadata, dependencies, tool config
+├── src/
+│   └── snapshare/
+│       ├── __init__.py
+│       ├── app.py              # Flask app — routes and upload logic
+│       └── templates/
+│           ├── index.html      # Upload form
+│           └── gallery.html    # Shared photo gallery
+└── tests/                      # Pytest suite
+```
+
+## Linting & formatting
+
+```bash
+ruff check .          # lint
+ruff check --fix .    # lint + auto-fix
+ruff format .         # format
+```
+
+## Testing
+
+```bash
+pytest
+```
+
+## Publishing to PyPI
+
+Version is derived from the nearest `v*` git tag via `setuptools-scm`. Building
+from an untagged commit produces a dev version (e.g. `0.2.2.dev1+g1234abc`).
+To cut a real release from a tagged commit:
+
+```bash
+git checkout v0.2.1              # or whichever tag
+rm -rf dist/ build/              # clean any previous build output
+python -m build                  # creates dist/snapshare-0.2.1-*.whl and .tar.gz
+twine check dist/*               # validate metadata + long description
+twine upload dist/*              # uploads to PyPI (needs API token, see below)
+```
+
+**PyPI credentials:** create an API token at
+[pypi.org/manage/account/token/](https://pypi.org/manage/account/token/)
+scoped to the `snapshare` project. `twine` reads it from `~/.pypirc` or the
+`TWINE_USERNAME=__token__` + `TWINE_PASSWORD=pypi-...` env vars.
+
+## Roadmap
+
+- [ ] Event/album scoping with shareable links
+- [ ] QR code generation for events
+- [ ] Cloud storage backend (S3 / GCS)
+- [ ] Mobile-optimised gallery

snapshare-0.2.2/src/snapshare.egg-info/SOURCES.txt

@@ -0,0 +1,26 @@
+.dockerignore
+.gitignore
+.pre-commit-config.yaml
+Dockerfile
+README.md
+fly.toml
+pyproject.toml
+.github/dependabot.yml
+.github/workflows/ci.yml
+.github/workflows/deploy.yml
+src/snapshare/__init__.py
+src/snapshare/app.py
+src/snapshare/storage.py
+src/snapshare.egg-info/PKG-INFO
+src/snapshare.egg-info/SOURCES.txt
+src/snapshare.egg-info/dependency_links.txt
+src/snapshare.egg-info/requires.txt
+src/snapshare.egg-info/scm_file_list.json
+src/snapshare.egg-info/scm_version.json
+src/snapshare.egg-info/top_level.txt
+src/snapshare/templates/gallery.html
+src/snapshare/templates/index.html
+tests/conftest.py
+tests/test_gallery.py
+tests/test_ip_restriction.py
+tests/test_upload.py

snapshare-0.2.2/src/snapshare.egg-info/dependency_links.txt

@@ -0,0 +1 @@
+

snapshare-0.2.2/src/snapshare.egg-info/requires.txt

@@ -0,0 +1,12 @@
+boto3==1.43.89
+flask==3.1.3
+gunicorn==26.2.0
+pillow==12.3.0
+
+[dev]
+build==1.6.0
+moto[s3]==5.2.3
+pre-commit==4.6.2
+pytest==9.1.1
+ruff==0.16.6
+twine==7.0.0

snapshare-0.2.2/src/snapshare.egg-info/scm_file_list.json

@@ -0,0 +1,23 @@
+{
+  "files": [
+    ".dockerignore",
+    ".github/dependabot.yml",
+    ".github/workflows/ci.yml",
+    ".github/workflows/deploy.yml",
+    ".gitignore",
+    ".pre-commit-config.yaml",
+    "Dockerfile",
+    "README.md",
+    "fly.toml",
+    "pyproject.toml",
+    "src/snapshare/__init__.py",
+    "src/snapshare/app.py",
+    "src/snapshare/storage.py",
+    "src/snapshare/templates/gallery.html",
+    "src/snapshare/templates/index.html",
+    "tests/conftest.py",
+    "tests/test_gallery.py",
+    "tests/test_ip_restriction.py",
+    "tests/test_upload.py"
+  ]
+}

snapshare-0.2.2/src/snapshare.egg-info/scm_version.json

@@ -0,0 +1,8 @@
+{
+  "tag": "0.2.2",
+  "distance": 0,
+  "node": "ga2b6f52c45e4f6ac377d50927e5af95996fc9ab1",
+  "dirty": false,
+  "branch": "master",
+  "node_date": "2026-09-07"
+}

snapshare-0.2.2/src/snapshare.egg-info/top_level.txt

@@ -0,0 +1 @@
+snapshare

snapshare-0.2.2/tests/conftest.py

@@ -0,0 +1,39 @@
+import io
+
+import boto3
+import pytest
+from moto import mock_aws
+from PIL import Image
+
+from snapshare.app import app as flask_app
+
+TEST_BUCKET = "test-bucket"
+
+
+@pytest.fixture()
+def app(monkeypatch):
+    """App fixture with moto-backed S3 in place of real Tigris."""
+    monkeypatch.setenv("AWS_ACCESS_KEY_ID", "testing")
+    monkeypatch.setenv("AWS_SECRET_ACCESS_KEY", "testing")
+    monkeypatch.setenv("AWS_DEFAULT_REGION", "us-east-1")
+    monkeypatch.setenv("BUCKET_NAME", TEST_BUCKET)
+    monkeypatch.delenv("AWS_ENDPOINT_URL_S3", raising=False)
+    monkeypatch.delenv("TIGRIS_PUBLIC_URL", raising=False)
+
+    with mock_aws():
+        boto3.client("s3", region_name="us-east-1").create_bucket(Bucket=TEST_BUCKET)
+        flask_app.config["TESTING"] = True
+        yield flask_app
+
+
+@pytest.fixture()
+def client(app):
+    return app.test_client()
+
+
+def make_image_bytes(fmt="JPEG", size=(100, 100), color=(255, 0, 0)) -> bytes:
+    """Return raw bytes of a minimal valid image."""
+    buf = io.BytesIO()
+    Image.new("RGB", size, color).save(buf, format=fmt)
+    buf.seek(0)
+    return buf.read()

snapshare-0.2.2/tests/test_gallery.py

@@ -0,0 +1,42 @@
+import io
+from http import HTTPStatus
+
+import boto3
+from conftest import TEST_BUCKET, make_image_bytes
+
+
+class TestGalleryRoute:
+    def test_empty_gallery_renders(self, client):
+        resp = client.get("/gallery")
+        assert resp.status_code == HTTPStatus.OK
+        assert b"No photos yet" in resp.data
+
+    def test_gallery_shows_uploaded_photo(self, client):
+        data = {"photo": (io.BytesIO(make_image_bytes("JPEG")), "shot.jpg")}
+        client.post("/upload", data=data, content_type="multipart/form-data")
+
+        resp = client.get("/gallery")
+        assert resp.status_code == HTTPStatus.OK
+        assert b"No photos yet" not in resp.data
+        assert TEST_BUCKET.encode() in resp.data
+
+    def test_gallery_photo_count(self, client):
+        for i in range(3):
+            data = {"photo": (io.BytesIO(make_image_bytes("JPEG")), f"photo{i}.jpg")}
+            client.post("/upload", data=data, content_type="multipart/form-data")
+
+        resp = client.get("/gallery")
+        assert resp.data.count(b'class="thumb"') == 3
+
+    def test_gallery_links_are_presigned(self, client):
+        data = {"photo": (io.BytesIO(make_image_bytes("JPEG")), "test.jpg")}
+        client.post("/upload", data=data, content_type="multipart/form-data")
+
+        gallery_resp = client.get("/gallery")
+        # Presigned URLs carry a Signature= query param (SigV4: X-Amz-Signature=,
+        # SigV2 as emitted by moto: Signature=). Substring match works for both.
+        assert b"Signature=" in gallery_resp.data
+
+        s3 = boto3.client("s3", region_name="us-east-1")
+        objects = s3.list_objects_v2(Bucket=TEST_BUCKET).get("Contents", [])
+        assert len(objects) == 1

snapshare-0.2.2/tests/test_ip_restriction.py

@@ -0,0 +1,44 @@
+from http import HTTPStatus
+
+
+class TestIPRestriction:
+    def test_no_restriction_when_allowlist_empty(self, client):
+        resp = client.get("/")
+        assert resp.status_code == HTTPStatus.OK
+
+    def test_remote_addr_in_allowlist_passes(self, client, monkeypatch):
+        import snapshare.app as app_module
+
+        monkeypatch.setattr(app_module, "ALLOWED_IPS", {"127.0.0.1"})
+        resp = client.get("/")
+        assert resp.status_code == HTTPStatus.OK
+
+    def test_remote_addr_not_in_allowlist_returns_403(self, client, monkeypatch):
+        import snapshare.app as app_module
+
+        monkeypatch.setattr(app_module, "ALLOWED_IPS", {"1.2.3.4"})
+        resp = client.get("/")
+        assert resp.status_code == HTTPStatus.FORBIDDEN
+
+    def test_fly_client_ip_header_allowed(self, client, monkeypatch):
+        import snapshare.app as app_module
+
+        monkeypatch.setattr(app_module, "ALLOWED_IPS", {"5.6.7.8"})
+        resp = client.get("/", headers={"Fly-Client-IP": "5.6.7.8"})
+        assert resp.status_code == HTTPStatus.OK
+
+    def test_fly_client_ip_header_disallowed(self, client, monkeypatch):
+        import snapshare.app as app_module
+
+        monkeypatch.setattr(app_module, "ALLOWED_IPS", {"5.6.7.8"})
+        resp = client.get("/", headers={"Fly-Client-IP": "9.9.9.9"})
+        assert resp.status_code == HTTPStatus.FORBIDDEN
+
+    def test_fly_client_ip_overrides_remote_addr(self, client, monkeypatch):
+        import snapshare.app as app_module
+
+        # remote_addr=127.0.0.1 is in the allowlist, but the Fly-Client-IP
+        # header takes precedence and is not — expect 403.
+        monkeypatch.setattr(app_module, "ALLOWED_IPS", {"127.0.0.1"})
+        resp = client.get("/", headers={"Fly-Client-IP": "9.9.9.9"})
+        assert resp.status_code == HTTPStatus.FORBIDDEN

snapshare-0.2.2/tests/test_upload.py

@@ -0,0 +1,49 @@
+import io
+from http import HTTPStatus
+
+import boto3
+from conftest import TEST_BUCKET, make_image_bytes
+
+
+class TestUploadRoute:
+    def test_no_file_returns_error(self, client):
+        resp = client.post("/upload", data={})
+        assert resp.status_code == HTTPStatus.OK
+        assert b"No file selected" in resp.data
+
+    def test_empty_filename_returns_error(self, client):
+        data = {"photo": (io.BytesIO(b""), "")}
+        resp = client.post("/upload", data=data, content_type="multipart/form-data")
+        assert resp.status_code == HTTPStatus.OK
+        assert b"No file selected" in resp.data
+
+    def test_disallowed_extension_returns_error(self, client):
+        data = {"photo": (io.BytesIO(b"not an image"), "malware.exe")}
+        resp = client.post("/upload", data=data, content_type="multipart/form-data")
+        assert resp.status_code == HTTPStatus.OK
+        assert b"Only image files are allowed" in resp.data
+
+    def test_valid_jpeg_redirects_to_gallery(self, client):
+        data = {"photo": (io.BytesIO(make_image_bytes("JPEG")), "photo.jpg")}
+        resp = client.post("/upload", data=data, content_type="multipart/form-data")
+        assert resp.status_code == HTTPStatus.FOUND
+        assert resp.headers["Location"].endswith("/gallery")
+
+    def test_valid_png_redirects_to_gallery(self, client):
+        data = {"photo": (io.BytesIO(make_image_bytes("PNG")), "photo.png")}
+        resp = client.post("/upload", data=data, content_type="multipart/form-data")
+        assert resp.status_code == HTTPStatus.FOUND
+        assert resp.headers["Location"].endswith("/gallery")
+
+    def test_upload_saves_file_to_s3(self, client):
+        data = {"photo": (io.BytesIO(make_image_bytes("JPEG")), "photo.jpg")}
+        client.post("/upload", data=data, content_type="multipart/form-data")
+
+        s3 = boto3.client("s3", region_name="us-east-1")
+        objects = s3.list_objects_v2(Bucket=TEST_BUCKET).get("Contents", [])
+        assert len(objects) == 1
+
+    def test_case_insensitive_extension(self, client):
+        data = {"photo": (io.BytesIO(make_image_bytes("JPEG")), "photo.JPG")}
+        resp = client.post("/upload", data=data, content_type="multipart/form-data")
+        assert resp.status_code == HTTPStatus.FOUND