Account key, login, store, logger and refusals for this attempt.
The entry's config and whether the run can ask for an SMS code.
A copy of the config that carries only a token the store vouches for and that was not refused, and the decision the attempt's watch carries.
Returns the config one API-direct attempt logs in with, and which token it carries.