Update documentation according to new content pack states endpoint response shape

.generator/schemas/v2/openapi.yaml

@@ -89430,6 +89430,57 @@ components:
         - NEVER_ACTIVATED
         - ACTIVATED
         - DEACTIVATED
+    SecurityMonitoringContentPackAppSecDetails:
+      description: Details for an Application Security content pack.
+      properties:
+        type:
+          $ref: "#/components/schemas/SecurityMonitoringContentPackAppSecDetailsType"
+      required:
+        - type
+      type: object
+    SecurityMonitoringContentPackAppSecDetailsType:
+      description: Type for Application Security content pack details.
+      enum:
+        - appsec
+      example: appsec
+      type: string
+      x-enum-varnames:
+        - APPSEC
+    SecurityMonitoringContentPackAuditDetails:
+      description: Details for an audit trail content pack.
+      properties:
+        type:
+          $ref: "#/components/schemas/SecurityMonitoringContentPackAuditDetailsType"
+      required:
+        - type
+      type: object
+    SecurityMonitoringContentPackAuditDetailsType:
+      description: Type for audit trail content pack details.
+      enum:
+        - audit
+      example: audit
+      type: string
+      x-enum-varnames:
+        - AUDIT
+    SecurityMonitoringContentPackEntityDetails:
+      description: Details for an entity or identity content pack.
+      properties:
+        cp_activation:
+          $ref: "#/components/schemas/SecurityMonitoringContentPackActivation"
+        type:
+          $ref: "#/components/schemas/SecurityMonitoringContentPackEntityDetailsType"
+      required:
+        - type
+        - cp_activation
+      type: object
+    SecurityMonitoringContentPackEntityDetailsType:
+      description: Type for entity content pack details.
+      enum:
+        - entity
+      example: entity
+      type: string
+      x-enum-varnames:
+        - ENTITY
     SecurityMonitoringContentPackIntegrationStatus:
       description: The installation status of the related integration.
       enum:
@@ -89452,38 +89503,74 @@ components:
         - PARTIALLY_INSTALLED
         - DETECTED
         - ERROR
-    SecurityMonitoringContentPackStateAttributes:
-      description: Attributes of a content pack state
+    SecurityMonitoringContentPackLogsDetails:
+      description: Details for a logs-based content pack.
       properties:
-        cloud_siem_index_incorrect:
-          description: Whether the cloud SIEM index configuration is incorrect (only applies to certain pricing models)
-          example: false
-          type: boolean
         cp_activation:
           $ref: "#/components/schemas/SecurityMonitoringContentPackActivation"
-        filters_configured_for_logs:
+        data_last_seen:
+          $ref: "#/components/schemas/SecurityMonitoringContentPackTimestampBucket"
+        filters_configured:
           description: |-
             Whether filters (Security Filters or Index Query depending on the pricing model) are
             present and correctly configured to route logs into Cloud SIEM.
           example: true
           type: boolean
         integration_installed_status:
           $ref: "#/components/schemas/SecurityMonitoringContentPackIntegrationStatus"
-        logs_last_collected:
-          $ref: "#/components/schemas/SecurityMonitoringContentPackTimestampBucket"
         logs_seen_from_any_index:
-          description: Whether logs for this content pack have been seen in any Datadog index within the last 72 hours.
+          description: Whether logs for this content pack have been seen in any Datadog index in the last 72 hours.
           example: true
           type: boolean
-        state:
-          $ref: "#/components/schemas/SecurityMonitoringContentPackStatus"
+        siem_index_incorrect:
+          description: Whether the Cloud SIEM index configuration is incorrect (only applies to certain pricing models).
+          example: false
+          type: boolean
+        type:
+          $ref: "#/components/schemas/SecurityFilterFilteredDataType"
       required:
-        - state
+        - type
         - cp_activation
+        - data_last_seen
+        - integration_installed_status
+        - filters_configured
         - logs_seen_from_any_index
-        - logs_last_collected
-        - cloud_siem_index_incorrect
-        - filters_configured_for_logs
+        - siem_index_incorrect
+      type: object
+    SecurityMonitoringContentPackOnboardingDetails:
+      description: |-
+        Content pack details returned when Cloud SIEM is inactive for the requesting organization.
+      properties:
+        integration_installed_status:
+          $ref: "#/components/schemas/SecurityMonitoringContentPackIntegrationStatus"
+        logs_seen_from_any_index:
+          description: Whether logs for this content pack have been seen in any Datadog index in the last 72 hours.
+          example: true
+          type: boolean
+        type:
+          $ref: "#/components/schemas/SecurityMonitoringContentPackOnboardingDetailsType"
+      required:
+        - type
+        - logs_seen_from_any_index
+      type: object
+    SecurityMonitoringContentPackOnboardingDetailsType:
+      description: Type for onboarding content pack details.
+      enum:
+        - onboarding
+      example: onboarding
+      type: string
+      x-enum-varnames:
+        - ONBOARDING
+    SecurityMonitoringContentPackStateAttributes:
+      description: Attributes of a content pack state.
+      properties:
+        details:
+          $ref: "#/components/schemas/SecurityMonitoringContentPackStateDetails"
+        status:
+          $ref: "#/components/schemas/SecurityMonitoringContentPackStatus"
+      required:
+        - status
+        - details
       type: object
     SecurityMonitoringContentPackStateData:
       description: Content pack state data.
@@ -89501,13 +89588,42 @@ components:
         - type
         - attributes
       type: object
+    SecurityMonitoringContentPackStateDetails:
+      description: |-
+        Type-specific details for a content pack state. The set of fields present depends
+        on the content pack's `type`. When Cloud SIEM is inactive for the requesting organization, `onboarding` is returned instead of the content pack's usual type, such as `logs` or `vulnerability`.`
+      discriminator:
+        mapping:
+          appsec: "#/components/schemas/SecurityMonitoringContentPackAppSecDetails"
+          audit: "#/components/schemas/SecurityMonitoringContentPackAuditDetails"
+          entity: "#/components/schemas/SecurityMonitoringContentPackEntityDetails"
+          logs: "#/components/schemas/SecurityMonitoringContentPackLogsDetails"
+          onboarding: "#/components/schemas/SecurityMonitoringContentPackOnboardingDetails"
+          threat_intel: "#/components/schemas/SecurityMonitoringContentPackThreatIntelDetails"
+          vulnerability: "#/components/schemas/SecurityMonitoringContentPackVulnerabilityDetails"
+        propertyName: type
+      oneOf:
+        - $ref: "#/components/schemas/SecurityMonitoringContentPackLogsDetails"
+        - $ref: "#/components/schemas/SecurityMonitoringContentPackThreatIntelDetails"
+        - $ref: "#/components/schemas/SecurityMonitoringContentPackEntityDetails"
+        - $ref: "#/components/schemas/SecurityMonitoringContentPackAuditDetails"
+        - $ref: "#/components/schemas/SecurityMonitoringContentPackAppSecDetails"
+        - $ref: "#/components/schemas/SecurityMonitoringContentPackVulnerabilityDetails"
+        - $ref: "#/components/schemas/SecurityMonitoringContentPackOnboardingDetails"
     SecurityMonitoringContentPackStateMeta:
-      description: Metadata for content pack states
+      description: Metadata for content pack states.
       properties:
         cloud_siem_index_incorrect:
-          description: Whether the cloud SIEM index configuration is incorrect at the organization level
+          description: Whether the Cloud SIEM index configuration is incorrect for the organization.
           example: false
           type: boolean
+        retention_months:
+          description: |-
+            The number of months that standard logs are retained for organizations on the standalone_indexed` pricing model. This field is omitted for other pricing models.
+          example: 15
+          format: int32
+          maximum: 60
+          type: integer
         sku:
           $ref: "#/components/schemas/SecurityMonitoringSKU"
       required:
@@ -89545,6 +89661,7 @@ components:
         - active
         - warning
         - broken
+        - not_configured
       example: active
       type: string
       x-enum-descriptions:
@@ -89554,13 +89671,40 @@ components:
         - Activated; logs received within the last 24 hours.
         - Activated; integration not installed or logs last seen 24 to 72 hours ago.
         - Activated; no logs for over 72 hours, filter missing, or Cloud SIEM index incorrectly ordered.
+        - Activated, but no credentials are configured (entity content packs only).
       x-enum-varnames:
         - INSTALL
         - ACTIVATE
         - INITIALIZING
         - ACTIVE
         - WARNING
         - BROKEN
+        - NOT_CONFIGURED
+    SecurityMonitoringContentPackThreatIntelDetails:
+      description: Details for a threat intelligence content pack.
+      properties:
+        cp_activation:
+          $ref: "#/components/schemas/SecurityMonitoringContentPackActivation"
+        data_last_seen:
+          $ref: "#/components/schemas/SecurityMonitoringContentPackTimestampBucket"
+        integration_installed_status:
+          $ref: "#/components/schemas/SecurityMonitoringContentPackIntegrationStatus"
+        type:
+          $ref: "#/components/schemas/SecurityMonitoringContentPackThreatIntelDetailsType"
+      required:
+        - type
+        - cp_activation
+        - data_last_seen
+        - integration_installed_status
+      type: object
+    SecurityMonitoringContentPackThreatIntelDetailsType:
+      description: Type for threat intelligence content pack details.
+      enum:
+        - threat_intel
+      example: threat_intel
+      type: string
+      x-enum-varnames:
+        - THREAT_INTEL
     SecurityMonitoringContentPackTimestampBucket:
       description: Timestamp bucket indicating when logs were last collected.
       enum:
@@ -89583,6 +89727,31 @@ components:
         - WITHIN_24_TO_72_HOURS
         - OVER_72H_TO_30D
         - OVER_30D
+    SecurityMonitoringContentPackVulnerabilityDetails:
+      description: Details for a vulnerability content pack.
+      properties:
+        cp_activation:
+          $ref: "#/components/schemas/SecurityMonitoringContentPackActivation"
+        data_last_seen:
+          $ref: "#/components/schemas/SecurityMonitoringContentPackTimestampBucket"
+        integration_installed_status:
+          $ref: "#/components/schemas/SecurityMonitoringContentPackIntegrationStatus"
+        type:
+          $ref: "#/components/schemas/SecurityMonitoringContentPackVulnerabilityDetailsType"
+      required:
+        - type
+        - cp_activation
+        - data_last_seen
+        - integration_installed_status
+      type: object
+    SecurityMonitoringContentPackVulnerabilityDetailsType:
+      description: Type for vulnerability content pack details.
+      enum:
+        - vulnerability
+      example: vulnerability
+      type: string
+      x-enum-varnames:
+        - VULNERABILITY
     SecurityMonitoringCriticalAsset:
       description: The critical asset's properties.
       properties:
@@ -91954,12 +92123,16 @@ components:
         - per_gb_analyzed
         - per_event_in_siem_index_2023
         - add_on_2024
+        - standalone_indexed
+        - unknown
       example: add_on_2024
       type: string
       x-enum-varnames:
         - PER_GB_ANALYZED
         - PER_EVENT_IN_SIEM_INDEX_2023
         - ADD_ON_2024
+        - STANDALONE_INDEXED
+        - UNKNOWN
     SecurityMonitoringSchedulingOptions:
       description: Options for scheduled rules. When this field is present, the rule runs based on the schedule. When absent, it runs real-time on ingested logs.
       nullable: true
@@ -183928,12 +184101,15 @@ paths:
                   value:
                     data:
                       - attributes:
-                          cloud_siem_index_incorrect: false
-                          cp_activation: activated
-                          filters_configured_for_logs: true
-                          logs_last_collected: within_24_hours
-                          logs_seen_from_any_index: true
-                          state: active
+                          details:
+                            cp_activation: activated
+                            data_last_seen: within_24_hours
+                            filters_configured: true
+                            integration_installed_status: installed
+                            logs_seen_from_any_index: true
+                            siem_index_incorrect: false
+                            type: logs
+                          status: active
                         id: aws-cloudtrail
                         type: content_pack_state
                     meta: