-- User Profiles
CREATE TABLE profiles (
  id UUID PRIMARY KEY REFERENCES auth.users,
  email TEXT,
  credits INTEGER DEFAULT 500,
  total_generations INTEGER DEFAULT 0,
  is_master BOOLEAN DEFAULT false,
  role TEXT DEFAULT 'user', -- 'master', 'partner', 'client', 'user'
  unlocked_packs TEXT[],
  partner_id UUID REFERENCES partners(id)
);

-- Partners (Resellers)
CREATE TABLE partners (
  id UUID PRIMARY KEY DEFAULT uuid_generate_v4(),
  business_name TEXT NOT NULL,
  contact_email TEXT,
  contact_name TEXT,
  user_id UUID REFERENCES profiles(id),
  config JSONB, -- { logo_url, primary_color, enabled_styles }
  is_active BOOLEAN DEFAULT true,
  created_at TIMESTAMPTZ DEFAULT NOW()
);

-- Events
CREATE TABLE events (
  id UUID PRIMARY KEY DEFAULT uuid_generate_v4(),
  partner_id UUID REFERENCES partners(id),
  event_name TEXT NOT NULL,
  event_slug TEXT UNIQUE NOT NULL,
  config JSONB, -- { logo_url, primary_color, welcome_text, radius }
  selected_styles TEXT[], -- Array of style IDs
  credits_allocated INTEGER DEFAULT 0,
  credits_used INTEGER DEFAULT 0,
  start_date TIMESTAMPTZ,
  end_date TIMESTAMPTZ,
  is_active BOOLEAN DEFAULT true,
  created_at TIMESTAMPTZ DEFAULT NOW()
);

-- Generations (Photo Records)
CREATE TABLE generations (
  id UUID PRIMARY KEY DEFAULT uuid_generate_v4(),
  user_id UUID REFERENCES profiles(id), -- NULL for guest
  event_id UUID REFERENCES events(id), -- NULL for B2C
  style_id TEXT NOT NULL,
  image_url TEXT NOT NULL,
  aspect_ratio TEXT DEFAULT '9:16',
  created_at TIMESTAMPTZ DEFAULT NOW()
);

CREATE OR REPLACE FUNCTION deduct_event_credit(event_uuid UUID)
RETURNS BOOLEAN AS $$
DECLARE
  remaining INTEGER;
BEGIN
  -- Atomic check and deduct
  UPDATE events
  SET credits_used = credits_used + 1
  WHERE id = event_uuid
    AND (credits_allocated - credits_used) > 0
  RETURNING (credits_allocated - credits_used - 1) INTO remaining;
  
  RETURN remaining IS NOT NULL;
END;
$$ LANGUAGE plpgsql;

// src/App.tsx:703
const handleSubmit = async (e: React.FormEvent) => {
  e.preventDefault();
  
  // 1. Verify credits
  if (profile.credits < 100) {
    setErrorMessage("Saldo insuficiente.");
    return;
  }
  
  // 2. Deduct credits (optimistic)
  await supabase
    .from('profiles')
    .update({ credits: profile.credits - 100 })
    .eq('id', session.user.id);
  
  // 3. Call Edge Function
  const { data, error } = await supabase.functions.invoke('cabina-vision', {
    body: {
      user_photo: capturedImage,
      model_id: selectedStyle.id,
      aspect_ratio: formData.aspectRatio,
      user_id: session.user.id
    }
  });
  
  // 4. Handle result
  if (data?.success) {
    setResultImage(data.image_url);
  } else {
    // Refund on error
    await supabase
      .from('profiles')
      .update({ credits: profile.credits })
      .eq('id', session.user.id);
  }
};

// src/components/kiosk/GuestExperience.tsx:116
const handleGenerate = async () => {
  // No auth check - guests don't need accounts
  
  const { data, error } = await supabase.functions.invoke('cabina-vision', {
    body: {
      user_photo: capturedImage,
      model_id: selectedStyle.id,
      aspect_ratio: '9:16',
      event_id: eventConfig.id,
      guest_id: `guest_${Date.now()}`
    }
  });
  
  // Credits deducted atomically in Edge Function
  if (data?.success) {
    setResultImage(data.image_url);
    // Confetti celebration
    confetti({ 
      particleCount: 150,
      colors: [eventConfig.config.primary_color, '#ffffff']
    });
  }
};

// supabase/functions/cabina-vision/index.ts
Deno.serve(async (req) => {
  const { user_photo, model_id, event_id, user_id } = await req.json();
  
  // 1. Deduct credits atomically (for events)
  if (event_id) {
    const { data: canProceed } = await supabaseAdmin.rpc(
      'deduct_event_credit',
      { event_uuid: event_id }
    );
    
    if (!canProceed) {
      return new Response(
        JSON.stringify({ success: false, error: 'No credits' }),
        { status: 402 }
      );
    }
  }
  
  // 2. Start Replicate prediction
  const prediction = await replicate.predictions.create({
    model: FLUX_MODEL,
    input: {
      prompt: getPromptForStyle(model_id),
      image: user_photo,
      strength: 0.85
    }
  });
  
  // 3. Poll for completion (max 60s)
  let result = prediction;
  for (let i = 0; i < 30; i++) {
    await sleep(2000);
    result = await replicate.predictions.get(prediction.id);
    if (result.status === 'succeeded') break;
  }
  
  // 4. Save to database
  await supabaseAdmin.from('generations').insert({
    user_id,
    event_id,
    style_id: model_id,
    image_url: result.output[0]
  });
  
  return new Response(
    JSON.stringify({ success: true, image_url: result.output[0] }),
    { headers: { 'Content-Type': 'application/json' } }
  );
});

// src/index.tsx:8
const subdomain = window.location.hostname.split('.')[0];

if (subdomain === 'kiosk' || window.location.pathname.includes('dashboard')) {
  // B2B Admin Interface
  ReactDOM.createRoot(document.getElementById('root')!).render(
    <DashboardApp />
  );
} else {
  // B2C Public App
  ReactDOM.createRoot(document.getElementById('root')!).render(
    <App />
  );
}

-- Events are publicly readable (for guests)
CREATE POLICY "public_read_events" ON events
  FOR SELECT USING (true);

-- Partners can only see their own events
CREATE POLICY "partners_own_events" ON events
  FOR SELECT USING (
    partner_id IN (
      SELECT id FROM partners WHERE user_id = auth.uid()
    )
  );

-- Masters see everything
CREATE POLICY "master_all_access" ON events
  FOR ALL USING (
    EXISTS (
      SELECT 1 FROM profiles 
      WHERE id = auth.uid() AND is_master = true
    )
  );