Execute este SQL no Supabase → SQL Editor uma única vez para criar a tabela e o bucket:

-- 1. Criar tabela
create table if not exists hero_videos (
  id uuid primary key default gen_random_uuid(),
  url text not null,
  storage_path text,
  description text,
  position integer default 1,
  created_at timestamptz default now()
);

-- 2. Habilitar RLS na tabela
alter table hero_videos enable row level security;

-- Remover políticas antigas se existirem (evita conflito)
drop policy if exists "public read" on hero_videos;
drop policy if exists "auth write" on hero_videos;

create policy "public read" on hero_videos for select using (true);
create policy "auth write" on hero_videos for all using (auth.role() = 'authenticated');

-- 3. Criar bucket de storage público
insert into storage.buckets (id, name, public, file_size_limit, allowed_mime_types)
values ('hero_videos', 'hero_videos', true, 104857600, array['video/mp4','video/mov','video/webm','video/quicktime'])
on conflict (id) do update set public = true, file_size_limit = 104857600;

-- 4. Políticas do Storage (ESSENCIAL para upload funcionar)
drop policy if exists "hero_videos public read" on storage.objects;
drop policy if exists "hero_videos auth upload" on storage.objects;
drop policy if exists "hero_videos auth update" on storage.objects;
drop policy if exists "hero_videos auth delete" on storage.objects;

create policy "hero_videos public read"
  on storage.objects for select
  using (bucket_id = 'hero_videos');

create policy "hero_videos auth upload"
  on storage.objects for insert
  with check (bucket_id = 'hero_videos' and auth.role() = 'authenticated');

create policy "hero_videos auth update"
  on storage.objects for update
  using (bucket_id = 'hero_videos' and auth.role() = 'authenticated');

create policy "hero_videos auth delete"
  on storage.objects for delete
  using (bucket_id = 'hero_videos' and auth.role() = 'authenticated');

-- 5. Se a tabela já existe, adicione a coluna description
alter table hero_videos add column if not exists description text;