the node's own materialized path (a prefix of the caller's) — used to sum its subtree spend.
the node's OWN granted tool scopes (an unrestricted account-root never appears as a node).
epoch ms — the node's own expiry; null = never.
Optionaldisabledan ancestor soft-disabled (enabled=false) — drives the auth-time revocation cascade.
One node of a caller's chain — itself or an ancestor — with its OWN (pre-chain) grant + caps + its materialized path.