From 2909d9aef1f43ea559d27c7cf38e53f057a9c969 Mon Sep 17 00:00:00 2001
From: "gpt-engineer-app[bot]"
 <159125892+gpt-engineer-app[bot]@users.noreply.github.com>
Date: Thu, 23 Apr 2026 21:25:55 +0000
Subject: [PATCH] Changes

Co-authored-by: domfelipe <53182096+domfelipe@users.noreply.github.com>
---
 ...1_995c85cd-215b-480e-a12c-14506dbc5e6f.sql | 25 +++++++++++++++++++
 1 file changed, 25 insertions(+)
 create mode 100644 supabase/migrations/20260423212551_995c85cd-215b-480e-a12c-14506dbc5e6f.sql

diff --git a/supabase/migrations/20260423212551_995c85cd-215b-480e-a12c-14506dbc5e6f.sql b/supabase/migrations/20260423212551_995c85cd-215b-480e-a12c-14506dbc5e6f.sql
new file mode 100644
index 0000000..0701a0c
--- /dev/null
+++ b/supabase/migrations/20260423212551_995c85cd-215b-480e-a12c-14506dbc5e6f.sql
@@ -0,0 +1,25 @@
+-- Admins podem ler todos os agent_instances
+CREATE POLICY "admins read all agent_instances"
+ON public.agent_instances
+FOR SELECT
+USING (public.has_role(auth.uid(), 'admin'));
+
+-- Admins podem ler todos os profiles
+CREATE POLICY "admins read all profiles"
+ON public.profiles
+FOR SELECT
+USING (public.has_role(auth.uid(), 'admin'));
+
+-- Admins podem ler todas as subscriptions
+CREATE POLICY "admins read all subscriptions"
+ON public.subscriptions
+FOR SELECT
+USING (public.has_role(auth.uid(), 'admin'));
+
+-- provisioning_jobs já tem "Admins veem todos os jobs", então não duplica.
+-- Admins também precisam atualizar agent_instances (chat_id backfill, etc.)
+CREATE POLICY "admins update agent_instances"
+ON public.agent_instances
+FOR UPDATE
+USING (public.has_role(auth.uid(), 'admin'))
+WITH CHECK (public.has_role(auth.uid(), 'admin'));
\ No newline at end of file