rules_version = '2';
service cloud.firestore {
  match /databases/{database}/documents {
    
    // Public read-only access for alienmikes.com visitors
    match /artifacts/alienmikes/public/data/{collectionName}/{document=**} {
      allow read: if true;
      allow write: if request.auth != null && request.auth.uid == "YOUR_ADMIN_UID_HERE";
    }

    // Default deny for all other collections
    match /{document=**} {
      allow read, write: if false;
    }
  }
}