Return the full AccountState for EVERY desk the caller owns, in ONE call.

closed_limit / closed_before page the closed-trade table exactly as GET /v1/me/accounts/{id} does, and the cap is PER DESK — a global one would let the busiest desk eat every other desk's rows and render them empty. Omitted, every closed trade comes back, which is what every existing client already reads.

This is the cockpit's batch read: the page needs each desk's headline, deployments, and open/closed positions to draw its stats, equity curve, verdict mix and per-desk cards. Previously it listed desks then fetched GET /v1/me/accounts/{id} once PER desk (an N+1 that stormed the connection pool — Sentry JAVASCRIPT-NEXTJS-4). Here every desk is assembled from a handful of batched IN/GROUP BY queries (equity, deployments, open + closed positions), so the round-trips are constant, not O(desks).

Each element is byte-identical to what GET /v1/me/accounts/{id} returns for that desk. Owner-scoped exactly like /v1/me/accounts: db.list_user_accounts filters on the resolved uid, so a principal only ever sees their OWN desks.

Auth: the shared resolver (session cookie / X-Vega-Key / account key pair) — 401 when unauthenticated, and a suspended caller fails closed in the resolver. Note: this route MUST stay registered before /v1/me/accounts/{account_id} so the literal path 'summary' is not parsed as an int account id (422).