-- Lucerne Master(SuperAdmin) RLS Bypass 정책
-- clinics 테이블: Master가 전체 조회 가능
CREATE POLICY "superadmin_read_all_clinics"
ON public.clinics
FOR SELECT
TO authenticated
USING (
  EXISTS (
    SELECT 1 FROM public.clinic_members
    WHERE auth_user_id = auth.uid()
    AND role = 'SuperAdmin'
  )
);

-- clinics 테이블: Master가 상태 변경 가능 (승인/정지)
CREATE POLICY "superadmin_update_clinics"
ON public.clinics
FOR UPDATE
TO authenticated
USING (
  EXISTS (
    SELECT 1 FROM public.clinic_members
    WHERE auth_user_id = auth.uid()
    AND role = 'SuperAdmin'
  )
);

-- clinic_members: Master가 전체 직원 목록 조회 가능
CREATE POLICY "superadmin_read_all_members"
ON public.clinic_members
FOR SELECT
TO authenticated
USING (
  EXISTS (
    SELECT 1 FROM public.clinic_members cm2
    WHERE cm2.auth_user_id = auth.uid()
    AND cm2.role = 'SuperAdmin'
  )
);

-- leave_records: Master가 전체 조회 가능
CREATE POLICY "superadmin_read_all_leave"
ON public.leave_records
FOR SELECT
TO authenticated
USING (
  EXISTS (
    SELECT 1 FROM public.clinic_members
    WHERE auth_user_id = auth.uid()
    AND role = 'SuperAdmin'
  )
);

-- ═══════════════════════════════════════
-- 📱 기기 등록 (Device Binding) 컬럼 추가
-- ═══════════════════════════════════════
ALTER TABLE public.clinic_members
  ADD COLUMN IF NOT EXISTS device_uuid text,
  ADD COLUMN IF NOT EXISTS device_info text,
  ADD COLUMN IF NOT EXISTS device_registered_at timestamptz;

-- 직원이 본인 기기 정보를 등록/수정할 수 있도록
CREATE POLICY "member_update_own_device"
ON public.clinic_members
FOR UPDATE
TO authenticated
USING (auth_user_id = auth.uid())
WITH CHECK (auth_user_id = auth.uid());