/** * Hand-written GraphQL documents for the Cases v2 API. Selection sets are kept * to what the tools return; every guide on the developer portal says request * only the fields you use. Schema: schemas/fusion/cases-v2.graphql. * * Federated `*Subject` fields are deliberately not selected: the vendored * schema declares Subject with `id` only, and a federated field that cannot * be resolved turns a clean response into a partial one. */ export declare const LIST_CASES = "query FusionListCases($arguments: CasesArguments!) {\n cases(arguments: $arguments) {\n totalCount\n pageInfo { startCursor endCursor hasNextPage hasPreviousPage }\n cases {\n id\n shortId\n title\n severity\n type { id name title }\n primaryStatus { id name title isClosed }\n secondaryStatus { id name title }\n tags\n assigneeId\n managedBy\n tenantId\n createdAt\n updatedAt\n closedAt\n archivedAt\n riskScore\n }\n }\n}"; export declare const GET_CASE = "query FusionGetCase($arguments: CaseArguments!) {\n case(arguments: $arguments) {\n id\n shortId\n title\n severity\n type { id name title }\n primaryStatus { id name title isClosed }\n secondaryStatus { id name title }\n tags\n assigneeId\n managedBy\n tenantId\n createdAt\n updatedAt\n closedAt\n archivedAt\n riskScore\n keyFindings { documentType documentVersion content }\n primaryVerdict { id name title }\n secondaryVerdict { id name title }\n secondaryStatusReason\n closeReason\n closedById\n createdById\n updatedById\n contributorIds\n incidentAdvisorId\n ruleId\n source { id name title }\n links { id url title type reference isInternal createdAt }\n processingStatus { assets events detections }\n isCreatedByPartner\n isCreatedByMDRProvider\n detectionsCount\n eventsCount\n assetsCount\n }\n}"; export declare const GET_CASE_EVIDENCE = "query FusionGetCaseEvidence($arguments: CaseEvidenceArguments!) {\n caseEvidence(arguments: $arguments) {\n id\n detectionsEvidenceCount\n detectionsEvidence { detectionId createdAt createdBy isGenesis }\n eventsEvidenceCount\n eventsEvidence { eventId createdAt createdBy isGenesis }\n assetsEvidenceCount\n assetsEvidence { assetId createdAt createdBy }\n searchQueriesEvidenceCount\n searchQueriesEvidence { searchQueryId createdAt isGenesis }\n }\n}"; export declare const LIST_CASE_COMMENTS = "query FusionListCaseComments($arguments: CaseCommentsArguments!) {\n caseComments(arguments: $arguments) {\n totalCount\n totalUnreadCount\n comments {\n id\n authorId\n comment\n createdAt\n updatedAt\n isInternal\n mentionsIds\n readByIds\n }\n }\n}"; export declare const ADD_CASE_COMMENT = "mutation FusionAddCaseComment($input: AddCaseComment!) {\n addCaseComment(input: $input) {\n id\n authorId\n comment\n createdAt\n updatedAt\n isInternal\n mentionsIds\n readByIds\n }\n}"; export declare const UPDATE_CASE_COMMENT = "mutation FusionUpdateCaseComment($input: UpdateCaseCommentInput!) {\n updateCaseComment(input: $input) {\n id\n authorId\n comment\n createdAt\n updatedAt\n isInternal\n mentionsIds\n readByIds\n }\n}"; export declare const DELETE_CASE_COMMENT = "mutation FusionDeleteCaseComment($input: DeleteCaseCommentInput!) {\n deleteCaseComment(input: $input) {\n id\n authorId\n comment\n createdAt\n updatedAt\n isInternal\n mentionsIds\n readByIds\n }\n}"; export declare const CREATE_CASE = "mutation FusionCreateCase($input: CreateCaseInput!) {\n createCase(input: $input) {\n id\n shortId\n title\n severity\n type { id name title }\n primaryStatus { id name title isClosed }\n secondaryStatus { id name title }\n tags\n assigneeId\n managedBy\n tenantId\n createdAt\n updatedAt\n closedAt\n archivedAt\n riskScore\n keyFindings { documentType documentVersion content }\n primaryVerdict { id name title }\n secondaryVerdict { id name title }\n secondaryStatusReason\n closeReason\n closedById\n createdById\n updatedById\n contributorIds\n incidentAdvisorId\n ruleId\n source { id name title }\n links { id url title type reference isInternal createdAt }\n processingStatus { assets events detections }\n isCreatedByPartner\n isCreatedByMDRProvider\n detectionsCount\n eventsCount\n assetsCount\n }\n}"; export declare const UPDATE_CASE = "mutation FusionUpdateCase($input: UpdateCaseInput!) {\n updateCase(input: $input) {\n id\n shortId\n title\n severity\n type { id name title }\n primaryStatus { id name title isClosed }\n secondaryStatus { id name title }\n tags\n assigneeId\n managedBy\n tenantId\n createdAt\n updatedAt\n closedAt\n archivedAt\n riskScore\n keyFindings { documentType documentVersion content }\n primaryVerdict { id name title }\n secondaryVerdict { id name title }\n secondaryStatusReason\n closeReason\n closedById\n createdById\n updatedById\n contributorIds\n incidentAdvisorId\n ruleId\n source { id name title }\n links { id url title type reference isInternal createdAt }\n processingStatus { assets events detections }\n isCreatedByPartner\n isCreatedByMDRProvider\n detectionsCount\n eventsCount\n assetsCount\n }\n}"; export declare const ADD_EVIDENCE_TO_CASE = "mutation FusionAddEvidenceToCase($input: AddEvidenceToCaseInput!) {\n addEvidenceToCase(input: $input) {\n caseId\n detectionIds\n eventIds\n hostIds\n searchQueries\n }\n}"; export declare const REMOVE_EVIDENCE_FROM_CASE = "mutation FusionRemoveEvidenceFromCase($input: RemoveEvidenceFromCaseInput!) {\n removeEvidenceFromCase(input: $input) {\n caseId\n detectionIds\n eventIds\n assetIds\n searchQueries\n }\n}"; export declare const CREATE_CASE_LINK = "mutation FusionCreateCaseLink($input: CreateCaseLinkInput!) {\n createCaseLink(input: $input) {\n id\n url\n title\n type\n reference\n isInternal\n createdAt\n }\n}"; export declare const UPDATE_CASE_LINK = "mutation FusionUpdateCaseLink($input: UpdateCaseLinkInput!) {\n updateCaseLink(input: $input) {\n id\n url\n title\n type\n reference\n isInternal\n createdAt\n }\n}"; export declare const DELETE_CASE_LINK = "mutation FusionDeleteCaseLink($input: DeleteCaseLinkInput!) {\n deleteCaseLink(input: $input) {\n id\n url\n title\n type\n reference\n isInternal\n createdAt\n }\n}"; export declare const LIST_CASE_FILES = "query FusionListCaseFiles($arguments: CaseFilesArguments!) {\n caseFiles(arguments: $arguments) {\n totalCount\n files {\n id\n caseId\n name\n size\n status\n isEmbedded\n createdAt\n updatedAt\n deletedAt\n uploadedById\n deletedById\n metadata { contentType contentMD5 }\n }\n }\n}"; export declare const LIST_CASE_FILES_WITH_URLS = "query FusionListCaseFilesWithUrls($arguments: CaseFilesArguments!) {\n caseFiles(arguments: $arguments) {\n totalCount\n files {\n id\n caseId\n name\n size\n status\n isEmbedded\n createdAt\n updatedAt\n deletedAt\n uploadedById\n deletedById\n metadata { contentType contentMD5 }\n downloadURL\n }\n }\n}"; export declare const GET_CASE_FILE = "query FusionGetCaseFile($arguments: CaseFileArguments!) {\n caseFile(arguments: $arguments) {\n id\n caseId\n name\n size\n status\n isEmbedded\n createdAt\n updatedAt\n deletedAt\n uploadedById\n deletedById\n metadata { contentType contentMD5 }\n }\n}"; export declare const START_CASE_FILE_UPLOAD = "mutation FusionStartCaseFileUpload($input: StartCaseFileUploadInput!) {\n startCaseFileUpload(input: $input) {\n file {\n id\n caseId\n name\n size\n status\n isEmbedded\n createdAt\n updatedAt\n deletedAt\n uploadedById\n deletedById\n metadata { contentType contentMD5 }\n }\n presignedUrl\n }\n}"; export declare const DELETE_CASE_FILE = "mutation FusionDeleteCaseFile($input: DeleteCaseFileInput!) {\n deleteCaseFile(input: $input) {\n id\n caseId\n name\n size\n status\n isEmbedded\n createdAt\n updatedAt\n deletedAt\n uploadedById\n deletedById\n metadata { contentType contentMD5 }\n }\n}"; /** Moves the named evidence to a case created by the same call. Irreversible. */ export declare const SPLIT_CASE = "mutation FusionSplitCase($input: SplitCaseInput!) {\n splitCase(input: $input) {\n caseId\n destinationCaseId\n detectionIds\n eventIds\n searchQueries\n fileIds\n }\n}"; /** Asynchronous: processingEventId is the job handle. Closes the sources. Irreversible. */ export declare const MERGE_CASES = "mutation FusionMergeCases($input: MergeCaseInput!) {\n mergeCase(input: $input) {\n targetCaseId\n sourceCaseIds\n processingEventId\n }\n}"; /** * Reference data the tenant's licensed services expose. One round trip for * all three lists; the cache in case-reference-data.ts owns the refresh. */ export declare const CASE_REFERENCE_DATA = "query FusionCaseReferenceData {\n caseTypes(arguments: {}) {\n types { id name title managedBy supportedPrimaryStatusIds supportedPrimaryVerdictIds }\n }\n casePrimaryStatuses(arguments: {}) {\n primaryStatuses { id name title isClosed isCaseVisibleToCustomers }\n }\n casePrimaryVerdicts(arguments: {}) {\n primaryVerdicts { id name title }\n }\n}"; /** Verdicts valid for closing a case of a given type into a given closed status. */ export declare const CASE_PRIMARY_VERDICTS_FOR = "query FusionCasePrimaryVerdictsFor($arguments: CasePrimaryVerdictsArguments!) {\n casePrimaryVerdicts(arguments: $arguments) {\n primaryVerdicts { id name title }\n }\n}"; //# sourceMappingURL=cases.d.ts.map