firestore.rules

rules_version = '2';

service cloud.firestore {
  match /databases/{database}/documents {
    match /users/{uid} {
      // Allow read access to all users
      allow read: if true;
      
      // Allow write access only if the user is authenticated and is writing to their own document
      allow write: if request.auth != null && request.auth.uid == uid;
    }

    match /chatSessions/{id} {
      allow read: if true;
      // Allow write access if the user is authenticated and the document's userId matches the authenticated user's ID
      allow write: if request.auth != null && request.resource.data.userId == request.auth.uid;
    }

    match /toolSessions/{id} {
      allow read: if true;
      // Allow write access if the user is authenticated and the document's userId matches the authenticated user's ID
      allow write: if request.auth != null && request.resource.data.userId == request.auth.uid;
    }
    
    match /tools/{id} {
      allow read: if true;
    }
  }
}