<?php

namespace Database\Seeders;

use App\Models\AdminUser;
use Illuminate\Database\Seeder;
use App\Support\AdminAgentPermissionMenuActionSync;
use App\Support\AdminDrawPermissionMenuActionSync;
use App\Support\PlatformSystemRoles;

/**
 * 后台 RBAC：平台固定角色 super_admin / agent。
 *
 * 演示账号 **admin** / **123456**（仅限非 production）。
 */
final class AdminRbacAndUserSeeder extends Seeder
{
    public function run(): void
    {
        AdminAgentPermissionMenuActionSync::syncMissing();
        AdminDrawPermissionMenuActionSync::syncMissing();

        PlatformSystemRoles::ensureAll();

        $super = PlatformSystemRoles::ensureSuperAdminRole();

        $username = 'admin';
        AdminUser::query()->updateOrCreate(
            ['username' => $username],
            [
                'name' => '超级管理员',
                'email' => null,
                'password' => '123456',
                'status' => 0,
            ],
        );

        /** @var AdminUser $admin */
        $admin = AdminUser::query()->where('username', $username)->firstOrFail();
        $siteId = AdminUser::defaultAdminSiteId();
        $superId = (int) $super->getKey();
        $admin->roles()->sync([
            $superId => [
                'site_id' => $siteId,
                'granted_at' => now(),
            ],
        ]);
    }
}