-- ① GRANTS (run first if you get 401 errors) GRANT USAGE ON SCHEMA public TO anon, authenticated; GRANT ALL ON ALL TABLES IN SCHEMA public TO anon, authenticated; GRANT ALL ON ALL SEQUENCES IN SCHEMA public TO anon, authenticated; ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT ALL ON TABLES TO anon, authenticated; ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT ALL ON SEQUENCES TO anon, authenticated; -- ② CREATE TABLES CREATE TABLE IF NOT EXISTS patients ( id TEXT PRIMARY KEY, name TEXT NOT NULL, age INTEGER, gender TEXT, phone TEXT, email TEXT, blood_group TEXT, address TEXT, allergies TEXT, condition TEXT, abha_id TEXT, referral_source TEXT, status TEXT DEFAULT 'active', visits JSONB DEFAULT '[]', odontogram JSONB DEFAULT '{}', "createdAt" TIMESTAMPTZ DEFAULT now() ); CREATE TABLE IF NOT EXISTS invoices ( id TEXT PRIMARY KEY, patient_name TEXT, patient_phone TEXT, items JSONB, subtotal REAL, gst REAL, discount REAL, total REAL, "gstRate" REAL, status TEXT DEFAULT 'pending', "invNo" TEXT, date TEXT, "createdAt" TIMESTAMPTZ DEFAULT now() ); CREATE TABLE IF NOT EXISTS appointments ( id TEXT PRIMARY KEY, title TEXT, start_time TIMESTAMPTZ, end_time TIMESTAMPTZ, patient_id TEXT, type TEXT, notes TEXT, "createdAt" TIMESTAMPTZ DEFAULT now() ); -- ③ ROW LEVEL SECURITY ALTER TABLE patients ENABLE ROW LEVEL SECURITY; ALTER TABLE invoices ENABLE ROW LEVEL SECURITY; ALTER TABLE appointments ENABLE ROW LEVEL SECURITY; -- ④ RLS POLICIES (allow anon full access — single-clinic) CREATE POLICY "allow_all_patients" ON patients FOR ALL TO anon, authenticated USING (true) WITH CHECK (true); CREATE POLICY "allow_all_invoices" ON invoices FOR ALL TO anon, authenticated USING (true) WITH CHECK (true); CREATE POLICY "allow_all_appointments" ON appointments FOR ALL TO anon, authenticated USING (true) WITH CHECK (true);