cycase-gyq1usuwp-cengizhankoses-projects.vercel.app

run_diagnostic

Run one synthetic diagnostic against the case data. auth_timeline rebuilds every sign-in for the reported user; session_inventory lists sessions that are still valid and which device holds them; indicator_scope sweeps every observed indicator across the estate to measure the blast radius. Diagnostics surface further artifacts and can resolve a checklist item. Each one may be run once. `rows` are read live, so a session listed here reflects its state now rather than when the diagnostic ran, and `effects` carries the before/after of whatever the sweep changed.

Input schema

{
  "type": "object",
  "properties": {
    "diagnosticId": {
      "type": "string",
      "enum": [
        "auth_timeline",
        "session_inventory",
        "indicator_scope"
      ],
      "description": "Synthetic diagnostic to run against the current case state."
    },
    "stateVersion": {
      "type": "integer",
      "minimum": 0
    }
  },
  "required": [
    "diagnosticId",
    "stateVersion"
  ],
  "additionalProperties": false
}