CREATE TABLE IF NOT EXISTS kanzen_auth_flows (
  id_hash TEXT PRIMARY KEY,
  state_hash TEXT NOT NULL,
  verifier TEXT NOT NULL,
  expires_at INTEGER NOT NULL
);
CREATE INDEX IF NOT EXISTS kanzen_auth_flows_expiry ON kanzen_auth_flows(expires_at);
CREATE TABLE IF NOT EXISTS kanzen_auth_sessions (
  id_hash TEXT PRIMARY KEY,
  tokens TEXT NOT NULL,
  member_id TEXT NOT NULL,
  created_at INTEGER NOT NULL,
  touched_at INTEGER NOT NULL,
  expires_at INTEGER NOT NULL,
  refresh_lock TEXT NOT NULL DEFAULT '',
  lock_until INTEGER NOT NULL DEFAULT 0
);
CREATE INDEX IF NOT EXISTS kanzen_auth_sessions_expiry ON kanzen_auth_sessions(expires_at);