CardCap

Phone-first business card capture for turning card photos into a searchable mini-CRM.

What Works Now

• Open the app on desktop or phone-size browser.
• Sign in with a one-time email link (magic link); each user has a private contact list.
• Tap Add Cards to take a photo or upload card images.
• Store uploaded images in the local Cloudflare R2 binding.
• Store contacts in the local Cloudflare D1 database.
• Review the source card beside or above editable contact fields.
• Save searchable contacts with email, phone, website, map, notes, tags, status, and next step.
• Export CSV, vCard, JSON, standalone HTML, or an iContact-ready CSV for email-marketing imports.
• Run AI extraction in mock mode locally, or switch to OpenAI with an API key.
• Abuse guards: Turnstile on sign-in, per-minute rate limits, and a 25-cards/day extraction quota per user.

Local Development

npm install
npm run dev -- --host 127.0.0.1

Then open:

http://127.0.0.1:5173/

Health check:

Invoke-WebRequest -UseBasicParsing http://127.0.0.1:5173/api/health

Verification

npm run lint
npm test
npm run build
npx wrangler deploy --dry-run

Turn On OpenAI Extraction Locally

Copy .dev.vars.example to .dev.vars, then set:

OPENAI_API_KEY=your_key_here
OPENAI_MODEL=gpt-5-mini
AI_EXTRACTOR=openai

Restart the dev server after changing .dev.vars.

Auth in Local Dev

• Leave SESSION_SECRET unset in .dev.vars to auto-sign-in as the local user (no email needed).
• Set SESSION_SECRET to any 32+ character string to exercise the real magic-link flow; with no RESEND_API_KEY, the sign-in link is printed to the dev-server console instead of emailed.
• TURNSTILE_SECRET_KEY unset means the Turnstile check is skipped locally.

Cloudflare Setup Later

Cloudflare can host the frontend, Worker API, database, and image storage for this version. No Supabase is needed for the first SaaS cut.

When you are ready to deploy:

npx wrangler login
npx wrangler d1 create cardcap-local
npx wrangler r2 bucket create cardcap-card-images
npx wrangler d1 migrations apply cardcap-local --remote
npx wrangler secret put OPENAI_API_KEY

After d1 create, replace the placeholder database_id in wrangler.jsonc. For production AI extraction, change AI_EXTRACTOR from mock to openai in wrangler.jsonc, then deploy:

npm run build
npx wrangler deploy

Current Production Gaps

• Magic-link auth is implemented but not yet deployed: production still needs SESSION_SECRET, RESEND_API_KEY, and Turnstile keys (see DEPLOYMENT.md).
• The deployed database still holds pre-auth beta data; the deploy sequence snapshots then wipes it (fresh start).