-- Agent 主机绑定凭证：只保存 bcrypt 哈希，明文 Token 仅在签发时出现。 // Logan.Li
CREATE TABLE IF NOT EXISTS monitor_agent_credentials (
    id BIGINT UNSIGNED NOT NULL AUTO_INCREMENT PRIMARY KEY,
    hostname VARCHAR(255) NOT NULL UNIQUE,
    token_prefix VARCHAR(32) NOT NULL UNIQUE,
    token_hash VARCHAR(255) NOT NULL,
    status VARCHAR(16) NOT NULL DEFAULT 'active',
    issued_by VARCHAR(128) NOT NULL DEFAULT '',
    last_used_at DATETIME NULL,
    expires_at DATETIME NULL,
    rotated_at DATETIME NOT NULL,
    created_at DATETIME NOT NULL,
    updated_at DATETIME NOT NULL,
    INDEX idx_monitor_agent_credentials_status (status)
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;