-- 008_admin_account_v2.sql
-- 生产环境超级管理员账号替换（一次性/可重跑幂等）：
--   1) 彻底删除 admin/admin123 相关数据（用户、角色绑定、refresh 会话、审计记录）
--   2) 新增超级管理员 xxcool（密码 xxCool@2026，bcrypt 哈希），绑定 super_admin 角色
-- 说明：xxcool 哈希为 bcrypt cost=10（$2b$10$...，Go bcrypt.CompareHashAndPassword 兼容 2a/2b/2y）。

-- ============ 1) 删除 admin 账号及其全部数据痕迹 ============
-- refresh 会话（scope=admin 且 subject 指向 admin）
DELETE FROM auth_refresh_session
WHERE scope = 'admin' AND subject_id = (SELECT id FROM admin_user WHERE username = 'admin');

-- 审计操作日志
DELETE FROM admin_operation_log
WHERE admin_user_id = (SELECT id FROM admin_user WHERE username = 'admin');

-- 用户-角色绑定
DELETE FROM admin_user_role
WHERE admin_user_id = (SELECT id FROM admin_user WHERE username = 'admin');

-- 用户本身
DELETE FROM admin_user WHERE username = 'admin';

-- ============ 2) 新增 xxcool 超级管理员 ============
-- 防重跑：先清掉可能存在的 xxcool
DELETE FROM admin_user_role
WHERE admin_user_id = (SELECT id FROM admin_user WHERE username = 'xxcool');
DELETE FROM auth_refresh_session
WHERE scope = 'admin' AND subject_id = (SELECT id FROM admin_user WHERE username = 'xxcool');
DELETE FROM admin_user WHERE username = 'xxcool';

INSERT INTO admin_user (username, password_hash, nickname, status, created_at, updated_at)
VALUES ('xxcool', '$2b$10$9saH0goudfeZ4pdIUELOFe5zJCgTMGB/cvPE/uPA343gHC2.xdfly', '超级管理员', 1, NOW(), NOW());

-- 绑定 super_admin 角色（role_id=1）
INSERT INTO admin_user_role (admin_user_id, role_id, created_at, updated_at)
VALUES (LAST_INSERT_ID(), 1, NOW(), NOW());