/** * Tools: sophos_fusion_list_cases, sophos_fusion_get_case, sophos_fusion_get_case_evidence, * sophos_fusion_get_case_summary, sophos_fusion_list_case_reference_data, * sophos_fusion_create_case, sophos_fusion_update_case, * sophos_fusion_split_case, sophos_fusion_merge_cases, * sophos_fusion_list_case_comments, sophos_fusion_add_case_comment, * sophos_fusion_update_case_comment, sophos_fusion_delete_case_comment, * sophos_fusion_add_case_evidence, sophos_fusion_remove_case_evidence, * sophos_fusion_list_case_files, sophos_fusion_upload_case_file, * sophos_fusion_delete_case_file, * sophos_fusion_create_case_link, sophos_fusion_update_case_link, * sophos_fusion_delete_case_link * Sophos Fusion Cases GraphQL API v2 on https://api.taegis.sophos.com/graphql. * * These sit beside the Classic REST case tools in cases.ts. The two APIs hold * separate case sets: a Classic ID like 1-598868 never resolves here, and a * Fusion UUID or CSE##### never resolves there. For a tenant that has moved * to Fusion the Classic tools refuse and point here (fusion/migration.ts). * * Everything below about lag, expansion, source IDs, mentions and the * lifecycle rules was measured on a live tenant on 22/09/2026. */ import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js"; import { type FusionClient } from "../client/fusion-client.js"; import type { TenantResolver } from "../client/tenant-resolver.js"; import type { CaseReferenceDataCache } from "../fusion/case-reference-data.js"; import type { FusionDetectionRecord } from "../fusion/types.js"; export declare function registerFusionCaseTools(server: McpServer, client: FusionClient, tenantResolver: TenantResolver, referenceData: CaseReferenceDataCache): void; /** * Client-side replacement for the Classic mitre-attack-summary endpoint: * tactics and techniques across the resolved detections, with counts. */ export declare function buildMitreSummary(records: FusionDetectionRecord[]): { detection_count: number; technique_count: number; tactics: { tactic: string; techniques: { technique_id: string; technique: string | null; detection_count: number; }[]; }[]; techniques_without_tactic: { technique_id: string; technique: string | null; detection_count: number; }[]; }; //# sourceMappingURL=fusion-cases.d.ts.map