// src/components/dashboards/Admin.tsx:27
export const Admin: React.FC<AdminProps> = ({ onBack }) => {
  const [view, setView] = useState<
    'overview' | 'partners' | 'b2c' | 'styles' | 'logs' | 'settings'
  >('overview');
  
  // Master sees everything
  const {
    partners,        // All partners
    b2cUsers,        // All B2C users
    stats,           // Global stats
    recentLogs,      // System logs
    stylesMetadata   // AI style library
  } = useAdmin({ showToast });
  
  // ...
};

-- Master has unrestricted access via RLS policy
CREATE POLICY "master_all_access" ON events
  FOR ALL USING (
    EXISTS (
      SELECT 1 FROM profiles 
      WHERE id = auth.uid() AND is_master = true
    )
  );

// src/components/dashboards/PartnerDashboard.tsx:42
export const PartnerDashboard: React.FC<PartnerDashboardProps> = ({
  user, profile, onBack
}) => {
  const {
    partner,              // Their partner record
    events,               // ONLY their events
    transactions,         // Their credit purchases
    clients,              // Their client list
    generationsData       // Stats for their events
  } = usePartnerDashboard({ profile, showToast });
  
  // Partner CANNOT see:
  // - Other partners' events
  // - Global platform stats
  // - Other partners' clients
};

-- Partners can only see their own events
CREATE POLICY "partners_own_events" ON events
  FOR SELECT USING (
    partner_id IN (
      SELECT id FROM partners WHERE user_id = auth.uid()
    )
  );

-- Partners can create events under their account
CREATE POLICY "partners_create_events" ON events
  FOR INSERT WITH CHECK (
    partner_id IN (
      SELECT id FROM partners WHERE user_id = auth.uid()
    )
  );

// src/hooks/useBranding.ts:85
const handleUpdateBranding = async () => {
  const { error } = await supabase
    .from('partners')
    .update({
      config: {
        logo_url: brandingConfig.logo_url,
        primary_color: brandingConfig.primary_color,
        enabled_styles: brandingConfig.enabled_styles,
        business_tagline: brandingConfig.business_tagline
      }
    })
    .eq('id', partner.id);
  
  // Branding is inherited by all events created by this partner
};

// src/components/dashboards/partner/WalletSection.tsx:24
const partnerWallet = {
  total_purchased: 50_000,  // Bought from Master
  allocated: 35_000,        // Assigned to events
  available: 15_000,        // Unallocated balance
  used: 28_450             // Actually consumed
};

// src/components/dashboards/ClientDashboard.tsx:1
export const ClientDashboard: React.FC<ClientDashboardProps> = ({
  event, onBack
}) => {
  // Client sees ONLY this event
  // Cannot create new events
  // Cannot access other events
  // Cannot modify credits or styles
  
  const creditsRemaining = event.credits_allocated - event.credits_used;
  const photoCount = event.credits_used / 100; // 100 credits per photo
  
  return (
    <div>
      <h1>{event.event_name}</h1>
      <p>{creditsRemaining} créditos restantes</p>
      <p>{photoCount} fotos generadas</p>
      <QRCodeDownload slug={event.event_slug} />
      <LiveGallery eventId={event.id} />
    </div>
  );
};

-- Clients can only view/update their specific event
CREATE POLICY "client_own_event" ON events
  FOR SELECT USING (
    client_email = (SELECT email FROM profiles WHERE id = auth.uid())
  );

-- Clients CANNOT modify credits or branding
CREATE POLICY "client_limited_update" ON events
  FOR UPDATE USING (
    client_email = (SELECT email FROM profiles WHERE id = auth.uid())
  )
  WITH CHECK (
    -- Can only update welcome_text
    config->>'welcome_text' IS DISTINCT FROM OLD.config->>'welcome_text'
    AND credits_allocated = OLD.credits_allocated
    AND selected_styles = OLD.selected_styles
  );

// src/components/EventGallery.tsx:14
const LiveGallery = ({ eventId }: { eventId: string }) => {
  const [photos, setPhotos] = useState<any[]>([]);
  
  useEffect(() => {
    // Initial fetch
    fetchPhotos();
    
    // Subscribe to new generations
    const subscription = supabase
      .channel(`event_${eventId}`)
      .on(
        'postgres_changes',
        {
          event: 'INSERT',
          schema: 'public',
          table: 'generations',
          filter: `event_id=eq.${eventId}`
        },
        (payload) => {
          setPhotos(prev => [payload.new, ...prev]);
          // Play celebration sound
          new Audio('/sounds/camera-shutter.mp3').play();
        }
      )
      .subscribe();
    
    return () => subscription.unsubscribe();
  }, [eventId]);
  
  // ...
};

// src/components/kiosk/GuestExperience.tsx:23
export const GuestExperience: React.FC<GuestExperienceProps> = ({
  eventConfig, supabase
}) => {
  // No user account needed
  // No credit balance to check
  // No authentication flow
  
  const handleGenerate = async () => {
    const { data } = await supabase.functions.invoke('cabina-vision', {
      body: {
        user_photo: capturedImage,
        model_id: selectedStyle.id,
        event_id: eventConfig.id,
        guest_id: `guest_${Date.now()}`, // Anonymous identifier
        user_id: null // Explicitly null
      }
    });
    
    // Credit deduction happens server-side atomically
  };
};