BEGIN;
CREATE TABLE onboarding_account_session (
 token_hash char(64) PRIMARY KEY,
 csrf_hash char(64) NOT NULL,
 user_id uuid NOT NULL REFERENCES user_account(id),
 created_at timestamptz NOT NULL DEFAULT now(),
 expires_at timestamptz NOT NULL,
 revoked_at timestamptz
);
ALTER TABLE device_activation_job
 ADD COLUMN provider_instance_id varchar(200),
 ADD COLUMN provider_product_key varchar(200),
 ADD COLUMN provider_secret_ciphertext bytea,
 ADD COLUMN provider_rtc_app_id varchar(200),
 ADD COLUMN provider_bot_id varchar(200),
 ADD COLUMN provider_transport varchar(32),
 ADD COLUMN provider_minimum_sdk varchar(80);
ALTER TABLE device_activation_attempt ADD COLUMN permit_ciphertext bytea;
CREATE UNIQUE INDEX onboarding_one_device_attempt ON device_activation_attempt(activation_id)
 WHERE executor='DEVICE' AND status IN ('CONTACT_POSSIBLE','UNKNOWN');
COMMIT;