1

2

3

Step 1: Connect Database

Create a free project at supabase.com, run the SQL script below, then paste your credentials here.

Go to Supabase Dashboard → New project
Open the SQL Editor and run the setup script below to create your tables and policies
Go to Storage → create two public buckets named photos and documents
Copy your Project URL and anon key from Project Settings → API

Supabase Project URL

Anon (Public) Key

SQL Setup Script

Run this in your Supabase SQL Editor to create tables and security policies:

-- ═══ FieldVault Tables ═══
create table if not exists gear (
  id text primary key,
  user_id uuid references auth.users(id) on delete cascade,
  ownership text not null default 'personal',
  created_at bigint,
  data jsonb not null default '{}'
);
create table if not exists kits (
  id text primary key,
  user_id uuid references auth.users(id) on delete cascade,
  created_at bigint,
  data jsonb not null default '{}'
);
create table if not exists settings (
  user_id uuid primary key references auth.users(id) on delete cascade,
  api_key text, cse_id text, search_site text, location_statuses text, categories text
);
create table if not exists admins (
  email text primary key
);
create table if not exists allowed_users (
  email text primary key,
  display_name text,
  can_add_company_gear boolean not null default false,
  added_by uuid
);
create table if not exists gear_sharing (
  id uuid primary key default gen_random_uuid(),
  owner_id uuid references auth.users(id) on delete cascade,
  owner_email text,
  viewer_email text,
  created_at bigint default extract(epoch from now())::bigint * 1000
);

-- ═══ Row Level Security ═══
alter table gear          enable row level security;
alter table kits          enable row level security;
alter table settings      enable row level security;
alter table admins        enable row level security;
alter table allowed_users enable row level security;
alter table gear_sharing  enable row level security;

-- Gear: personal items (own user only)
create policy "gear_personal_select" on gear for select
  using (user_id = auth.uid() and ownership = 'personal');
create policy "gear_personal_insert" on gear for insert
  with check (user_id = auth.uid() and ownership = 'personal');
create policy "gear_personal_update" on gear for update
  using (user_id = auth.uid() and ownership = 'personal')
  with check (user_id = auth.uid() and ownership = 'personal');
create policy "gear_personal_delete" on gear for delete
  using (user_id = auth.uid() and ownership = 'personal');

-- Gear: personal items shared with the current user (read-only)
create policy "gear_shared_select" on gear for select
  using (ownership = 'personal' and exists (
    select 1 from gear_sharing
    where owner_id = gear.user_id and viewer_email = auth.jwt()->>'email'
  ));

-- Gear: company items (all authenticated users can read; admins + contributors can write)
create policy "gear_company_select" on gear for select
  using (ownership = 'company');
create policy "gear_company_insert" on gear for insert
  with check (ownership = 'company' and (
    exists (select 1 from admins where email = auth.jwt()->>'email') or
    exists (select 1 from allowed_users where email = auth.jwt()->>'email' and can_add_company_gear = true)
  ));
create policy "gear_company_update" on gear for update
  using (ownership = 'company' and (
    exists (select 1 from admins where email = auth.jwt()->>'email') or
    exists (select 1 from allowed_users where email = auth.jwt()->>'email' and can_add_company_gear = true)
  ))
  with check (ownership = 'company' and (
    exists (select 1 from admins where email = auth.jwt()->>'email') or
    exists (select 1 from allowed_users where email = auth.jwt()->>'email' and can_add_company_gear = true)
  ));
create policy "gear_company_delete" on gear for delete
  using (ownership = 'company' and exists (select 1 from admins where email = auth.jwt()->>'email'));

-- Kits: own user only
create policy "kits_own" on kits for all using (user_id = auth.uid());

-- Settings: own user only
create policy "settings_own" on settings for all using (user_id = auth.uid());

-- Admins: all authenticated users can read; first user (bootstrap) or existing admins can insert; admins can delete
create policy "admins_select" on admins for select to authenticated using (true);
create policy "admins_insert" on admins for insert to authenticated
  with check (
    not exists (select 1 from admins) or
    exists (select 1 from admins a where a.email = auth.jwt()->>'email')
  );
create policy "admins_delete" on admins for delete to authenticated
  using (exists (select 1 from admins a where a.email = auth.jwt()->>'email'));

-- Allowed users: all authenticated users can read; admins can manage
create policy "allowed_users_select" on allowed_users for select to authenticated using (true);
create policy "allowed_users_insert" on allowed_users for insert to authenticated
  with check (exists (select 1 from admins where email = auth.jwt()->>'email'));
create policy "allowed_users_update" on allowed_users for update to authenticated
  using (exists (select 1 from admins where email = auth.jwt()->>'email'));
create policy "allowed_users_delete" on allowed_users for delete to authenticated
  using (exists (select 1 from admins where email = auth.jwt()->>'email'));

-- Gear sharing: owners manage their grants; viewers can read grants about themselves
create policy "gear_sharing_select" on gear_sharing for select to authenticated
  using (owner_id = auth.uid() or viewer_email = auth.jwt()->>'email');
create policy "gear_sharing_insert" on gear_sharing for insert to authenticated
  with check (owner_id = auth.uid());
create policy "gear_sharing_delete" on gear_sharing for delete to authenticated
  using (owner_id = auth.uid());

-- ═══ Phase 4: Jobs / Crew / Vehicles / Assignments ═══
create table if not exists jobs (
  id uuid primary key default gen_random_uuid(),
  data jsonb not null default '{}',
  created_at bigint default extract(epoch from now())::bigint * 1000
);
create table if not exists crew_members (
  id uuid primary key default gen_random_uuid(),
  data jsonb not null default '{}',
  created_at bigint default extract(epoch from now())::bigint * 1000
);
create table if not exists vehicles (
  id uuid primary key default gen_random_uuid(),
  data jsonb not null default '{}',
  created_at bigint default extract(epoch from now())::bigint * 1000
);
create table if not exists assignments (
  id uuid primary key default gen_random_uuid(),
  gear_id uuid,
  job_id uuid,
  crew_id uuid,
  vehicle_id uuid,
  checked_out_at bigint,
  checked_in_at bigint,
  checked_out_by text,
  notes text,
  quantity integer default 1,
  created_at bigint default extract(epoch from now())::bigint * 1000
);

alter table jobs        enable row level security;
alter table crew_members enable row level security;
alter table vehicles    enable row level security;
alter table assignments enable row level security;

-- Jobs: all authenticated users read; admins write
create policy "jobs_select" on jobs for select to authenticated using (true);
create policy "jobs_insert" on jobs for insert to authenticated
  with check (exists (select 1 from admins where email = auth.jwt()->>'email') or
              exists (select 1 from allowed_users where email = auth.jwt()->>'email' and can_add_company_gear = true));
create policy "jobs_update" on jobs for update to authenticated
  using (exists (select 1 from admins where email = auth.jwt()->>'email') or
         exists (select 1 from allowed_users where email = auth.jwt()->>'email' and can_add_company_gear = true));
create policy "jobs_delete" on jobs for delete to authenticated
  using (exists (select 1 from admins where email = auth.jwt()->>'email'));

-- Crew members: all authenticated users read; admins + contributors write
create policy "crew_select" on crew_members for select to authenticated using (true);
create policy "crew_insert" on crew_members for insert to authenticated
  with check (exists (select 1 from admins where email = auth.jwt()->>'email') or
              exists (select 1 from allowed_users where email = auth.jwt()->>'email' and can_add_company_gear = true));
create policy "crew_update" on crew_members for update to authenticated
  using (exists (select 1 from admins where email = auth.jwt()->>'email') or
         exists (select 1 from allowed_users where email = auth.jwt()->>'email' and can_add_company_gear = true));
create policy "crew_delete" on crew_members for delete to authenticated
  using (exists (select 1 from admins where email = auth.jwt()->>'email'));

-- Vehicles: all authenticated users read; admins + contributors write
create policy "vehicles_select" on vehicles for select to authenticated using (true);
create policy "vehicles_insert" on vehicles for insert to authenticated
  with check (exists (select 1 from admins where email = auth.jwt()->>'email') or
              exists (select 1 from allowed_users where email = auth.jwt()->>'email' and can_add_company_gear = true));
create policy "vehicles_update" on vehicles for update to authenticated
  using (exists (select 1 from admins where email = auth.jwt()->>'email') or
         exists (select 1 from allowed_users where email = auth.jwt()->>'email' and can_add_company_gear = true));
create policy "vehicles_delete" on vehicles for delete to authenticated
  using (exists (select 1 from admins where email = auth.jwt()->>'email'));

-- Assignments: all authenticated users read; all authenticated users can create/update (check-out/check-in); admins delete
create policy "assignments_select" on assignments for select to authenticated using (true);
create policy "assignments_insert" on assignments for insert to authenticated with check (true);
create policy "assignments_update" on assignments for update to authenticated using (true);
create policy "assignments_delete" on assignments for delete to authenticated
  using (exists (select 1 from admins where email = auth.jwt()->>'email'));

FieldVault ← fieldvault.app

Sign in

New to FieldVault?

FieldVault v2026.26.3

FieldVault ← Sign in

Create your account

Already have an account?

FieldVault v2026.26.3

Set new password

Choose a new password for your account.

FieldVault v2026.26.3

Loading FieldVault…

FieldVault

📦 Recent Gear

📤 Checked Out

User Accounts

Crew members listed under Crew do not require a login — add them here only when they need to sign in to FieldVault.

Member	Role	Status

🏢 Company Profile

Update your company name as it appears throughout FieldVault.

Company Name

✓ Saved!

🏷️ Categories

Customize the category options available when adding or editing gear.

✓ Saved!

📍 Location Statuses

Customize the location options for each ownership type. Click ★ on a location to mark it as the primary (home base) — items anywhere else will appear as Checked Out on the dashboard.

Personal Items

Company Items

✓ Saved!

⬆️ Import & Export

Backup and restore your gear inventory.

🔑 My Account

Signed in as

✓ Email sent!

⚡ Entry Defaults

Pre-fill these values when adding items — applies to Add Item and Bulk Entry.

Default Category

Default Condition

Default Status

Default Ownership