-- 创建管理员账户初始化脚本
-- 在Supabase SQL编辑器中运行此脚本来创建管理员账户

-- 1. 创建admin_users表（如果不存在）
CREATE TABLE IF NOT EXISTS admin_users (
  id UUID DEFAULT gen_random_uuid() PRIMARY KEY,
  username TEXT UNIQUE NOT NULL,
  password_hash TEXT NOT NULL,
  role TEXT NOT NULL DEFAULT 'admin',
  full_name TEXT,
  email TEXT,
  is_active BOOLEAN DEFAULT true,
  created_at TIMESTAMP WITH TIME ZONE DEFAULT NOW(),
  updated_at TIMESTAMP WITH TIME ZONE DEFAULT NOW(),
  last_login TIMESTAMP WITH TIME ZONE
);

-- 2. 创建profiles表的管理员记录（如果不存在）
CREATE TABLE IF NOT EXISTS profiles (
  id UUID DEFAULT gen_random_uuid() PRIMARY KEY,
  email TEXT UNIQUE NOT NULL,
  full_name TEXT,
  avatar_url TEXT,
  role TEXT NOT NULL DEFAULT 'customer' CHECK (role IN ('customer', 'interpreter', 'admin')),
  languages TEXT[] DEFAULT '{}',
  credits INTEGER DEFAULT 0,
  phone TEXT,
  company TEXT,
  department TEXT,
  specializations TEXT[] DEFAULT '{}',
  hourly_rate DECIMAL(10,2),
  timezone TEXT DEFAULT 'UTC',
  is_active BOOLEAN DEFAULT true,
  is_enterprise BOOLEAN DEFAULT false,
  enterprise_id UUID,
  subscription_id TEXT,
  contract_pricing JSONB,
  verification_status TEXT DEFAULT 'pending' CHECK (verification_status IN ('pending', 'verified', 'rejected')),
  status TEXT DEFAULT 'active' CHECK (status IN ('active', 'inactive', 'suspended')),
  created_at TIMESTAMP WITH TIME ZONE DEFAULT NOW(),
  updated_at TIMESTAMP WITH TIME ZONE DEFAULT NOW(),
  last_login TIMESTAMP WITH TIME ZONE
);

-- 3. 插入默认管理员账户到admin_users表
-- 密码: admin123 (使用bcrypt加密)
INSERT INTO admin_users (username, password_hash, role, full_name, email) VALUES 
  ('admin@example.com', '$2a$10$92IXUNpkjO0rOQ5byMi.Ye4oKoEa3Ro9llC/.og/at2.uheWG/igi', 'admin', '系统管理员', 'admin@example.com')
ON CONFLICT (username) DO UPDATE SET
  password_hash = EXCLUDED.password_hash,
  updated_at = NOW();

-- 4. 插入管理员到profiles表
INSERT INTO profiles (email, full_name, role, is_active, verification_status) VALUES 
  ('admin@example.com', '系统管理员', 'admin', true, 'verified')
ON CONFLICT (email) DO UPDATE SET
  full_name = EXCLUDED.full_name,
  role = EXCLUDED.role,
  is_active = EXCLUDED.is_active,
  verification_status = EXCLUDED.verification_status,
  updated_at = NOW();

-- 5. 创建更新时间戳的触发器函数（如果不存在）
CREATE OR REPLACE FUNCTION update_updated_at_column()
RETURNS TRIGGER AS $$
BEGIN
    NEW.updated_at = NOW();
    RETURN NEW;
END;
$$ language 'plpgsql';

-- 6. 为admin_users表创建更新时间戳触发器
DROP TRIGGER IF EXISTS update_admin_users_updated_at ON admin_users;
CREATE TRIGGER update_admin_users_updated_at
    BEFORE UPDATE ON admin_users
    FOR EACH ROW
    EXECUTE FUNCTION update_updated_at_column();

-- 7. 为profiles表创建更新时间戳触发器
DROP TRIGGER IF EXISTS update_profiles_updated_at ON profiles;
CREATE TRIGGER update_profiles_updated_at
    BEFORE UPDATE ON profiles
    FOR EACH ROW
    EXECUTE FUNCTION update_updated_at_column();

-- 8. 启用行级安全策略（RLS）
ALTER TABLE admin_users ENABLE ROW LEVEL SECURITY;
ALTER TABLE profiles ENABLE ROW LEVEL SECURITY;

-- 9. 创建RLS策略（允许所有操作，实际使用时需要根据需求调整）
DROP POLICY IF EXISTS "Allow all operations on admin_users" ON admin_users;
CREATE POLICY "Allow all operations on admin_users" ON admin_users FOR ALL USING (true);

DROP POLICY IF EXISTS "Allow all operations on profiles" ON profiles;
CREATE POLICY "Allow all operations on profiles" ON profiles FOR ALL USING (true);

-- 10. 创建索引以提高查询性能
CREATE INDEX IF NOT EXISTS idx_admin_users_username ON admin_users(username);
CREATE INDEX IF NOT EXISTS idx_admin_users_email ON admin_users(email);
CREATE INDEX IF NOT EXISTS idx_profiles_email ON profiles(email);
CREATE INDEX IF NOT EXISTS idx_profiles_role ON profiles(role);

-- 11. 验证管理员账户创建
SELECT 
  'admin_users' as table_name,
  username,
  role,
  full_name,
  email,
  is_active,
  created_at
FROM admin_users 
WHERE username = 'admin@example.com'

UNION ALL

SELECT 
  'profiles' as table_name,
  email as username,
  role,
  full_name,
  email,
  is_active::text,
  created_at
FROM profiles 
WHERE email = 'admin@example.com' AND role = 'admin';

-- 显示结果
SELECT '管理员账户创建完成！' as message;
SELECT '登录信息：' as info;
SELECT '用户名: admin@example.com' as username;
SELECT '密码: admin123' as password;