Capture Image Sync

Push captures from anywhere, pull them from anywhere else.

An Express + Supabase gateway with one auth token for accounts and a per-device API key for everything else.

One account, many devices

Sign up once with email + password. Mint a separate API key per device (phone, extension, desktop). Lose a phone, revoke just that key.

Two key types, one purpose each

Short-lived access tokens unlock account management. Long-lived device keys (cik_…) unlock the captures pipeline. Never mix them.

Image + text in one call

POST /captures takes a multipart body with the JPEG and the extracted text in one request. Idempotent on your clientId, so retries are safe.

Server-side LLM extraction

POST /extract runs OCR via an OpenAI vision model so clients don't need to ship tesseract or platform OCR. Prompt, format, model, detail, and language are all customizable per call.

Pull with cursor pagination

GET /captures returns newest-first pages with a since filter and an opaque nextCursor — ideal for incremental sync from an extension or web app.