-- 1. 创建 resources 数据表
CREATE TABLE IF NOT EXISTS resources (
  id TEXT PRIMARY KEY,
  category TEXT NOT NULL,
  type TEXT NOT NULL,
  title TEXT NOT NULL,
  subtitle TEXT,
  path TEXT NOT NULL,
  thumb TEXT,
  size TEXT,
  badge TEXT,
  badge_color TEXT DEFAULT 'cyan',
  icon TEXT DEFAULT '📄',
  can_preview BOOLEAN DEFAULT true,
  can_download BOOLEAN DEFAULT true,
  preview_type TEXT,
  sort_order INTEGER DEFAULT 0,
  created_at TIMESTAMP WITH TIME ZONE DEFAULT NOW()
);

-- 2. 开启 resources 表公开读写权限
ALTER TABLE resources ENABLE ROW LEVEL SECURITY;
DROP POLICY IF EXISTS "Public Read Access" ON resources;
DROP POLICY IF EXISTS "Public Insert Access" ON resources;
DROP POLICY IF EXISTS "Public Update Access" ON resources;
DROP POLICY IF EXISTS "Public Delete Access" ON resources;

CREATE POLICY "Public Read Access" ON resources FOR SELECT USING (true);
CREATE POLICY "Public Insert Access" ON resources FOR INSERT WITH CHECK (true);
CREATE POLICY "Public Update Access" ON resources FOR UPDATE USING (true);
CREATE POLICY "Public Delete Access" ON resources FOR DELETE USING (true);

-- 3. 开启 Storage 存储桶公开上传权限 (解决 RLS policy 报错)
DROP POLICY IF EXISTS "Allow Public Uploads" ON storage.objects;
DROP POLICY IF EXISTS "Allow Public Select" ON storage.objects;
DROP POLICY IF EXISTS "Allow Public Update" ON storage.objects;
DROP POLICY IF EXISTS "Allow Public Delete" ON storage.objects;

CREATE POLICY "Allow Public Uploads" ON storage.objects FOR INSERT TO public WITH CHECK (bucket_id = 'enipay-assets');
CREATE POLICY "Allow Public Select" ON storage.objects FOR SELECT TO public USING (bucket_id = 'enipay-assets');
CREATE POLICY "Allow Public Update" ON storage.objects FOR UPDATE TO public USING (bucket_id = 'enipay-assets');
CREATE POLICY "Allow Public Delete" ON storage.objects FOR DELETE TO public USING (bucket_id = 'enipay-assets');