{"service":"grand-server","healthPath":"/health","staffLogin":"POST /staff/login","staffMe":"GET /admin/me (staff profile; requires staff JWT)","adminApiPrefix":"JSON staff API under /admin (e.g. GET /admin/me, GET /admin/roles) — mounted before the IAM browser SPA","adminMe":"GET /admin/me","adminCatalog":"GET /admin/permissions, GET /admin/roles, GET /admin/roles/:roleId/permissions (requires grand.catalog.read)","adminStaffDirectory":"GET /admin/staff, POST /admin/staff, GET /admin/staff/:staffId (grand.staff.read / grand.staff.manage); POST /admin/staff/:staffId/assignments","adminManifestImport":"POST /admin/manifest/import","internalAuthz":"POST /internal/staff/authz/evaluate","platformAdminApi":"POST /api/admin/login (ADMIN_SECRET), GET /api/admin/* (JWT role=admin)","staffIamUi":"GET /admin/, GET /admin/login (Staff IAM SPA; assets under /admin/assets/)"}