create table public.expenses (
  id uuid default gen_random_uuid() primary key,
  date date default current_date not null,
  description text not null,
  category text not null default 'Other',
  amount numeric(10,2) not null,
  notes text default '',
  receipt_path text,
  receipt_name text,
  created_by uuid references public.profiles(id) on delete set null,
  created_at timestamptz default now() not null
);
alter table public.expenses enable row level security;
create policy "Team all expenses" on public.expenses for all using (get_my_role() = 'team');