-- AlterEnum
ALTER TYPE "Role" ADD VALUE 'OWNER';

-- AlterTable
ALTER TABLE "Session" ADD COLUMN     "adminAuth" BOOLEAN NOT NULL DEFAULT false;

-- AlterTable
ALTER TABLE "User" ADD COLUMN     "failedLogins" INTEGER NOT NULL DEFAULT 0,
ADD COLUMN     "lastLoginAt" TIMESTAMP(3),
ADD COLUMN     "lockedUntil" TIMESTAMP(3),
ADD COLUMN     "passwordHash" TEXT,
ADD COLUMN     "permissions" TEXT[] DEFAULT ARRAY[]::TEXT[];

-- مدیران و کارمندان قبلی دسترسی‌های قبلی خود را حفظ کنند
UPDATE "User" SET "permissions" = ARRAY['dashboard','orders','products','inventory','reviews','discounts','catalog','banners','magazine','seo','shipping','ai'] WHERE "role" = 'ADMIN';
UPDATE "User" SET "permissions" = ARRAY['dashboard','orders','products','inventory','reviews','magazine'] WHERE "role" = 'STAFF';