-- Run in Supabase SQL Editor to enable custom modules:
-- custom_modules table with org-scoped RLS

CREATE TABLE IF NOT EXISTS custom_modules (
  id UUID DEFAULT gen_random_uuid() PRIMARY KEY,
  org_id UUID,
  name TEXT NOT NULL,
  icon TEXT DEFAULT '🔍',
  description TEXT,
  access_level TEXT DEFAULT 'all',
  config JSONB DEFAULT '{}',
  created_by UUID,
  created_at TIMESTAMPTZ DEFAULT NOW(),
  is_active BOOLEAN DEFAULT TRUE
);

ALTER TABLE custom_modules ENABLE ROW LEVEL SECURITY;

CREATE POLICY "org_members_can_view_custom_modules"
ON custom_modules FOR SELECT
USING (
  org_id IN (
    SELECT org_id FROM user_profiles WHERE id = auth.uid()
  )
);

CREATE POLICY "org_admins_can_manage_custom_modules"
ON custom_modules FOR ALL
USING (
  org_id IN (
    SELECT org_id FROM user_profiles WHERE id = auth.uid()
  )
);