storage.rules

rules_version = '2';
service firebase.storage {
  match /b/{bucket}/o {
    // Allow users to upload images to temp folder
    match /temp/{allPaths=**} {
      allow read: if true;
      allow write: if request.resource.size < 10 * 1024 * 1024 // 10MB limit
                   && request.resource.contentType.matches('image/.*');
    }
    
    // Processed images - read only for users
    match /processed/{allPaths=**} {
      allow read: if true;
      allow write: if false; // Only functions can write
    }
    
    // Future: user-specific storage
    match /users/{userId}/{allPaths=**} {
      allow read: if request.auth != null && request.auth.uid == userId;
      allow write: if request.auth != null && request.auth.uid == userId
                   && request.resource.size < 10 * 1024 * 1024
                   && request.resource.contentType.matches('image/.*');
    }
  }
}