@cfxlabsinc/b2b-services
    Preparing search index...
    CognitoAccountAccess:
        | { accessToken: string; identity: CognitoIdentity; kind: "native" }
        | {
            accessToken: string;
            identity: CognitoIdentity;
            identityProvider: string;
            kind: "federated";
        }

    A verified session's access token, for calls on its own login. A federated one carries aws.cognito.signin.user.admin, which the authorize request asks for, but its IdP owns the password and second factor: passkeys only.