{
  "openapi": "3.0.0",
  "info": {
    "title": "Axce Corporate SSO & Diagnostic Integration API",
    "description": "Internal APIs for SSO session replication, system health diagnostics, and config replication.",
    "version": "1.4.2"
  },
  "paths": {
    "/api/v1/status": {
      "get": {
        "summary": "Get diagnostic engine status",
        "responses": {
          "200": {
            "description": "Service is online"
          }
        }
      }
    },
    "/api/v1/users": {
      "get": {
        "summary": "Retrieve replicated corporate directory users",
        "parameters": [
          {
            "name": "filter",
            "in": "query",
            "schema": {
              "type": "string"
            },
            "description": "Filter by name/group"
          }
        ],
        "responses": {
          "200": {
            "description": "Filtered directory output"
          }
        }
      }
    },
    "/api/v1/system/debug": {
      "post": {
        "summary": "Execute system-level diagnostic command (Admin only)",
        "description": "Requires JWT admin bearer token. Executes safe debug command strings on the engine host.",
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "type": "object",
                "properties": {
                  "cmd": {
                    "type": "string",
                    "example": "ping -c 3 10.0.0.1"
                  }
                }
              }
            }
          }
        },
        "responses": {
          "200": {
            "description": "Diagnostic log response"
          }
        }
      }
    }
  }
}