@e-sig/supabase

Supabase reference adapters for @e-sig/core — self-contained PDF e-signature persistence on Supabase Postgres + Storage.

npm i @e-sig/core @e-sig/supabase @supabase/supabase-js

Apply migrations/0001_esig_self_contained.sql (in the suite root) first.

import { createClient } from "@supabase/supabase-js";
import {
  SupabaseCertStore,
  SupabaseAuditLogStore,
  SupabasePdfStorageStore,
} from "@e-sig/supabase";

const service = createClient(url, serviceRoleKey); // service-role: bypasses RLS for cert/audit/storage writes

const certStore = new SupabaseCertStore(service);          // table "org_signing_certs", tenant col "tenant_id"
const auditStore = new SupabaseAuditLogStore(service);     // table "esig_audit_log"
const storage = new SupabasePdfStorageStore(service);      // bucket "signed-documents"

All three constructors take options to map onto an existing schema, e.g. the Opendelphi schema keys on org_id:

new SupabaseCertStore(service, { table: "org_signing_certs", tenantColumn: "org_id" });
new SupabaseAuditLogStore(service, { tenantColumn: "org_id" });
new SupabasePdfStorageStore(service, { bucket: "signed-documents" });

Pass these to signDocument() from @e-sig/core. The stores handle the Postgres \x-hex bytea round-trip for the encrypted key and return the storage path (private buckets have no public URL — serve via an RLS-gated download route).

Peer deps: @e-sig/core, @supabase/supabase-js. License: MIT.