Extract security.privileges.query in a typealias

specification/security/_types/Privileges.ts

@@ -94,14 +94,27 @@ export class IndicesPrivileges {
   /**
    * A search query that defines the documents the owners of the role have read access to. A document within the specified indices must match this query for it to be accessible by the owners of the role.
    */
-  query?: string[] | QueryContainer | RoleTemplateQueryContainer
+  query?: IndicesPrivilegesQuery
   /**
    * Set to `true` if using wildcard or regular expressions for patterns that cover restricted indices. Implicitly, restricted indices have limited privileges that can cause pattern tests to fail. If restricted indices are explicitly included in the `names` list, Elasticsearch checks privileges against these indices regardless of the value set for `allow_restricted_indices`.
    * @server_default false
    */
   allow_restricted_indices?: boolean
 }
 
+/**
+ * While creating or updating a role you can provide either a JSON structure or a string to the API.
+ * However, the response provided by Elasticsearch will only be string with a json-as-text content.
+ *
+ * Since this is embedded in IndicesPrivileges, the same structure is used for clarity in both contexts.
+ *
+ * @codegen_names text, query, template
+ */
+export type IndicesPrivilegesQuery =
+  | string
+  | QueryContainer
+  | RoleTemplateQueryContainer
+
 /** @variants container */
 export class RoleTemplateQueryContainer {
   /**

specification/security/get_user_privileges/SecurityGetUserPrivilegesResponse.ts

@@ -28,6 +28,9 @@ export class Response {
     applications: ApplicationPrivileges[]
     cluster: string[]
     global: GlobalPrivilege[]
+    /**
+     * In this context IndicesPrivileges.query property can only be a string, see IndicesPrivileges documentation for detail.
+     */
     indices: IndicesPrivileges[]
     run_as: string[]
   }