Returns what the file says about one bank account.
Opaque key identifying one bank account.
The account's view of the file, or why the store is unreadable.
Persists one bank account's long-term token, bound to the login that minted it.
Opaque key identifying one bank account.
The long-term token to persist.
Fingerprint of the login that minted the token.
Whether the file was replaced, or why it was not.
Deletes one bank account's entry, keeping every other entry as it was.
Opaque key identifying one bank account.
Whether the file was replaced, or why it was not.
Deletes one bank account's entry only while it still holds a given token.
Opaque key identifying one bank account.
Digest of the token to retire; never the token itself.
What the entry held, or why the file could not be read or replaced.
Deletes staged token files an earlier run was killed before cleaning up.
How many were removed, or why the directory could not be read.
Read/write access to the durable long-term tokens, keyed by store key.
The key is opaque and stored verbatim. Production passes `bankId:accountKey`, so two accounts at one bank keep separate tokens; an implementation that normalised the key would collapse them onto one entry, and since each mint revokes the token it replaces, both accounts would then cost an SMS on every run.