[Security Solution] [AI Assistant] Security AI Assistant - Citations

oas_docs/output/kibana.serverless.yaml

@@ -43661,6 +43661,19 @@ components:
       required:
         - connectorId
         - actionTypeId
+    Security_AI_Assistant_API_BaseContentReference:
+      description: The basis of a content reference
+      type: object
+      properties:
+        id:
+          description: Id of the content reference
+          type: string
+        type:
+          description: Type of the content reference
+          type: string
+      required:
+        - id
+        - type
     Security_AI_Assistant_API_BulkCrudActionSummary:
       type: object
       properties:
@@ -43732,6 +43745,17 @@ components:
         - user
         - assistant
       type: string
+    Security_AI_Assistant_API_ContentReferences:
+      additionalProperties:
+        oneOf:
+          - $ref: '#/components/schemas/Security_AI_Assistant_API_KnowledgeBaseEntryContentReference'
+          - $ref: '#/components/schemas/Security_AI_Assistant_API_SecurityAlertContentReference'
+          - $ref: '#/components/schemas/Security_AI_Assistant_API_SecurityAlertsPageContentReference'
+          - $ref: '#/components/schemas/Security_AI_Assistant_API_ProductDocumentationContentReference'
+          - $ref: '#/components/schemas/Security_AI_Assistant_API_EsqlContentReference'
+            additionalProperties: false
+      description: A union of all content reference types
+      type: object
     Security_AI_Assistant_API_ConversationCategory:
       description: The conversation category.
       enum:
@@ -43970,6 +43994,26 @@ components:
           required:
             - id
         - $ref: '#/components/schemas/Security_AI_Assistant_API_DocumentEntryCreateFields'
+    Security_AI_Assistant_API_EsqlContentReference:
+      allOf:
+        - $ref: '#/components/schemas/Security_AI_Assistant_API_BaseContentReference'
+        - type: object
+          properties:
+            label:
+              description: Label of the query
+              type: string
+            query:
+              description: An ESQL query
+              type: string
+            type:
+              enum:
+                - EsqlQuery
+              type: string
+          required:
+            - type
+            - query
+            - label
+      description: References an ESQL query
     Security_AI_Assistant_API_FindAnonymizationFieldsSortField:
       enum:
         - created_at
@@ -44201,6 +44245,26 @@ components:
         - skipped
         - succeeded
         - total
+    Security_AI_Assistant_API_KnowledgeBaseEntryContentReference:
+      allOf:
+        - $ref: '#/components/schemas/Security_AI_Assistant_API_BaseContentReference'
+        - type: object
+          properties:
+            knowledgeBaseEntryId:
+              description: Id of the Knowledge Base Entry
+              type: string
+            knowledgeBaseEntryName:
+              description: Name of the knowledge base entry
+              type: string
+            type:
+              enum:
+                - KnowledgeBaseEntry
+              type: string
+          required:
+            - type
+            - knowledgeBaseEntryId
+            - knowledgeBaseEntryName
+      description: References a knowledge base entry
     Security_AI_Assistant_API_KnowledgeBaseEntryCreateProps:
       anyOf:
         - $ref: '#/components/schemas/Security_AI_Assistant_API_DocumentEntryCreateFields'
@@ -44259,6 +44323,9 @@ components:
         isError:
           description: Is error message.
           type: boolean
+        metadata:
+          $ref: '#/components/schemas/Security_AI_Assistant_API_MessageMetadata'
+          description: metadata
         reader:
           $ref: '#/components/schemas/Security_AI_Assistant_API_Reader'
           description: Message content.
@@ -44278,6 +44345,13 @@ components:
     Security_AI_Assistant_API_MessageData:
       additionalProperties: true
       type: object
+    Security_AI_Assistant_API_MessageMetadata:
+      description: Message metadata
+      type: object
+      properties:
+        contentReferences:
+          $ref: '#/components/schemas/Security_AI_Assistant_API_ContentReferences'
+          description: Data refered to by the message content.
     Security_AI_Assistant_API_MessageRole:
       description: Message role.
       enum:
@@ -44341,6 +44415,26 @@ components:
         - message
         - status_code
         - prompts
+    Security_AI_Assistant_API_ProductDocumentationContentReference:
+      allOf:
+        - $ref: '#/components/schemas/Security_AI_Assistant_API_BaseContentReference'
+        - type: object
+          properties:
+            title:
+              description: Title of the documentation
+              type: string
+            type:
+              enum:
+                - ProductDocumentation
+              type: string
+            url:
+              description: URL to the documentation
+              type: string
+          required:
+            - type
+            - title
+            - url
+      description: References the product documentation
     Security_AI_Assistant_API_PromptCreateProps:
       type: object
       properties:
@@ -44552,6 +44646,34 @@ components:
         - createdBy
         - updatedAt
         - updatedBy
+    Security_AI_Assistant_API_SecurityAlertContentReference:
+      allOf:
+        - $ref: '#/components/schemas/Security_AI_Assistant_API_BaseContentReference'
+        - type: object
+          properties:
+            alertId:
+              description: ID of the Alert
+              type: string
+            type:
+              enum:
+                - SecurityAlert
+              type: string
+          required:
+            - type
+            - alertId
+      description: References a security alert
+    Security_AI_Assistant_API_SecurityAlertsPageContentReference:
+      allOf:
+        - $ref: '#/components/schemas/Security_AI_Assistant_API_BaseContentReference'
+        - type: object
+          properties:
+            type:
+              enum:
+                - SecurityAlertsPage
+              type: string
+          required:
+            - type
+      description: References the security alerts page
     Security_AI_Assistant_API_SortOrder:
       enum:
         - asc

oas_docs/output/kibana.yaml

@@ -50165,6 +50165,19 @@ components:
       required:
         - connectorId
         - actionTypeId
+    Security_AI_Assistant_API_BaseContentReference:
+      description: The basis of a content reference
+      type: object
+      properties:
+        id:
+          description: Id of the content reference
+          type: string
+        type:
+          description: Type of the content reference
+          type: string
+      required:
+        - id
+        - type
     Security_AI_Assistant_API_BulkCrudActionSummary:
       type: object
       properties:
@@ -50236,6 +50249,17 @@ components:
         - user
         - assistant
       type: string
+    Security_AI_Assistant_API_ContentReferences:
+      additionalProperties:
+        oneOf:
+          - $ref: '#/components/schemas/Security_AI_Assistant_API_KnowledgeBaseEntryContentReference'
+          - $ref: '#/components/schemas/Security_AI_Assistant_API_SecurityAlertContentReference'
+          - $ref: '#/components/schemas/Security_AI_Assistant_API_SecurityAlertsPageContentReference'
+          - $ref: '#/components/schemas/Security_AI_Assistant_API_ProductDocumentationContentReference'
+          - $ref: '#/components/schemas/Security_AI_Assistant_API_EsqlContentReference'
+            additionalProperties: false
+      description: A union of all content reference types
+      type: object
     Security_AI_Assistant_API_ConversationCategory:
       description: The conversation category.
       enum:
@@ -50474,6 +50498,26 @@ components:
           required:
             - id
         - $ref: '#/components/schemas/Security_AI_Assistant_API_DocumentEntryCreateFields'
+    Security_AI_Assistant_API_EsqlContentReference:
+      allOf:
+        - $ref: '#/components/schemas/Security_AI_Assistant_API_BaseContentReference'
+        - type: object
+          properties:
+            label:
+              description: Label of the query
+              type: string
+            query:
+              description: An ESQL query
+              type: string
+            type:
+              enum:
+                - EsqlQuery
+              type: string
+          required:
+            - type
+            - query
+            - label
+      description: References an ESQL query
     Security_AI_Assistant_API_FindAnonymizationFieldsSortField:
       enum:
         - created_at
@@ -50705,6 +50749,26 @@ components:
         - skipped
         - succeeded
         - total
+    Security_AI_Assistant_API_KnowledgeBaseEntryContentReference:
+      allOf:
+        - $ref: '#/components/schemas/Security_AI_Assistant_API_BaseContentReference'
+        - type: object
+          properties:
+            knowledgeBaseEntryId:
+              description: Id of the Knowledge Base Entry
+              type: string
+            knowledgeBaseEntryName:
+              description: Name of the knowledge base entry
+              type: string
+            type:
+              enum:
+                - KnowledgeBaseEntry
+              type: string
+          required:
+            - type
+            - knowledgeBaseEntryId
+            - knowledgeBaseEntryName
+      description: References a knowledge base entry
     Security_AI_Assistant_API_KnowledgeBaseEntryCreateProps:
       anyOf:
         - $ref: '#/components/schemas/Security_AI_Assistant_API_DocumentEntryCreateFields'
@@ -50763,6 +50827,9 @@ components:
         isError:
           description: Is error message.
           type: boolean
+        metadata:
+          $ref: '#/components/schemas/Security_AI_Assistant_API_MessageMetadata'
+          description: metadata
         reader:
           $ref: '#/components/schemas/Security_AI_Assistant_API_Reader'
           description: Message content.
@@ -50782,6 +50849,13 @@ components:
     Security_AI_Assistant_API_MessageData:
       additionalProperties: true
       type: object
+    Security_AI_Assistant_API_MessageMetadata:
+      description: Message metadata
+      type: object
+      properties:
+        contentReferences:
+          $ref: '#/components/schemas/Security_AI_Assistant_API_ContentReferences'
+          description: Data refered to by the message content.
     Security_AI_Assistant_API_MessageRole:
       description: Message role.
       enum:
@@ -50845,6 +50919,26 @@ components:
         - message
         - status_code
         - prompts
+    Security_AI_Assistant_API_ProductDocumentationContentReference:
+      allOf:
+        - $ref: '#/components/schemas/Security_AI_Assistant_API_BaseContentReference'
+        - type: object
+          properties:
+            title:
+              description: Title of the documentation
+              type: string
+            type:
+              enum:
+                - ProductDocumentation
+              type: string
+            url:
+              description: URL to the documentation
+              type: string
+          required:
+            - type
+            - title
+            - url
+      description: References the product documentation
     Security_AI_Assistant_API_PromptCreateProps:
       type: object
       properties:
@@ -51056,6 +51150,34 @@ components:
         - createdBy
         - updatedAt
         - updatedBy
+    Security_AI_Assistant_API_SecurityAlertContentReference:
+      allOf:
+        - $ref: '#/components/schemas/Security_AI_Assistant_API_BaseContentReference'
+        - type: object
+          properties:
+            alertId:
+              description: ID of the Alert
+              type: string
+            type:
+              enum:
+                - SecurityAlert
+              type: string
+          required:
+            - type
+            - alertId
+      description: References a security alert
+    Security_AI_Assistant_API_SecurityAlertsPageContentReference:
+      allOf:
+        - $ref: '#/components/schemas/Security_AI_Assistant_API_BaseContentReference'
+        - type: object
+          properties:
+            type:
+              enum:
+                - SecurityAlertsPage
+              type: string
+          required:
+            - type
+      description: References the security alerts page
     Security_AI_Assistant_API_SortOrder:
       enum:
         - asc