@laserfiche/lf-repository-api-client-v2 1.2.0 → 1.3.0

package/dist/index.d.ts

@@ -1,4 +1,391 @@
 import { HttpRequestHandler, AccessKey, ApiException as ApiExceptionCore, GetAccessTokenResponse } from '@laserfiche/lf-api-client-core';
+export interface IAnnotationsClient {
+    /**
+     * - Returns every annotation on every page of the document, as a polymorphic list keyed by annotation type.
+    - Requires the "see annotations" entry right; redaction content is only revealed to callers with the "see through redactions" right.
+    - Required OAuth scope: repository.Read
+     * @param args.repositoryId The requested repository ID.
+     * @param args.entryId The document entry ID.
+     * @param args.select (optional) Limits the properties returned in the result.
+     * @param args.orderby (optional) Specifies the order in which items are returned. The maximum number of expressions is 5.
+     * @param args.count (optional) Indicates whether the total count of items within a collection are returned in the result.
+     * @returns Successfully returned the annotations on the document.
+     */
+    listDocumentAnnotations(args: {
+        repositoryId: string;
+        entryId: number;
+        select?: string | null | undefined;
+        orderby?: string | null | undefined;
+        count?: boolean | undefined;
+    }): Promise<Annotation[]>;
+    /**
+     * - Returns the annotations on the requested page, as a polymorphic list keyed by annotation type.
+    - Requires the "see annotations" entry right; redaction content is only revealed to callers with the "see through redactions" right.
+    - Required OAuth scope: repository.Read
+     * @param args.repositoryId The requested repository ID.
+     * @param args.entryId The document entry ID.
+     * @param args.pageNumber The 1-based page number.
+     * @param args.select (optional) Limits the properties returned in the result.
+     * @param args.orderby (optional) Specifies the order in which items are returned. The maximum number of expressions is 5.
+     * @param args.count (optional) Indicates whether the total count of items within a collection are returned in the result.
+     * @returns Successfully returned the annotations on the page.
+     */
+    listPageAnnotations(args: {
+        repositoryId: string;
+        entryId: number;
+        pageNumber: number;
+        select?: string | null | undefined;
+        orderby?: string | null | undefined;
+        count?: boolean | undefined;
+    }): Promise<Annotation[]>;
+    /**
+     * - The request body is a polymorphic annotation discriminated by `annotationType`; supply the writable members for that type.
+    - For attachment and bitmap annotations, create the annotation first, then upload its binary content via the dedicated sub-resource.
+    - Requires the "annotate" entry right.
+    - Required OAuth scope: repository.Write
+     * @returns Successfully created the annotation. Returned the created annotation.
+     */
+    createAnnotation(args: {
+        repositoryId: string;
+        entryId: number;
+        pageNumber: number;
+        request: Annotation;
+    }): Promise<Annotation>;
+    /**
+     * - Returns the annotation, typed by annotation type.
+    - Requires the "see annotations" entry right; redaction content is only revealed to callers with the "see through redactions" right.
+    - Required OAuth scope: repository.Read
+     * @param args.repositoryId The requested repository ID.
+     * @param args.entryId The document entry ID.
+     * @param args.pageNumber The 1-based page number.
+     * @param args.itemId The annotation item ID, unique within the page.
+     * @param args.select (optional) Limits the properties returned in the result.
+     * @returns Successfully returned the requested annotation.
+     */
+    getAnnotation(args: {
+        repositoryId: string;
+        entryId: number;
+        pageNumber: number;
+        itemId: number;
+        select?: string | null | undefined;
+    }): Promise<Annotation>;
+    /**
+     * - Supply only the members to change; omitted members are left unchanged. The `annotationType` must match the existing annotation.
+    - Requires the "annotate" entry right.
+    - Required OAuth scope: repository.Write
+     * @returns Successfully updated the annotation. Returned the updated annotation.
+     */
+    updateAnnotation(args: {
+        repositoryId: string;
+        entryId: number;
+        pageNumber: number;
+        itemId: number;
+        request: Annotation;
+    }): Promise<Annotation>;
+    /**
+     * - Requires the "annotate" entry right.
+    - Required OAuth scope: repository.Write
+     * @returns Successfully deleted the annotation.
+     */
+    deleteAnnotation(args: {
+        repositoryId: string;
+        entryId: number;
+        pageNumber: number;
+        itemId: number;
+    }): Promise<void>;
+    /**
+     * - Streams the attached file. Fails with a bad request if the annotation is not an attachment.
+    - Requires the "see annotations" entry right.
+    - Required OAuth scope: repository.Read
+     * @param args.repositoryId The requested repository ID.
+     * @param args.entryId The document entry ID.
+     * @param args.pageNumber The 1-based page number.
+     * @param args.itemId The attachment annotation's item ID.
+     * @param args.select (optional) Limits the properties returned in the result.
+     * @returns Successfully returned the content of the attachment annotation.
+     */
+    getAnnotationAttachment(args: {
+        repositoryId: string;
+        entryId: number;
+        pageNumber: number;
+        itemId: number;
+        select?: string | null | undefined;
+    }): Promise<FileResponse>;
+    /**
+     * - Send the file as multipart/form-data under the form field "file". The annotation must already exist and be an attachment annotation.
+    - Requires the "annotate" entry right.
+    - Required OAuth scope: repository.Write
+     * @param args.file (optional) The image file to upload. See https://doc.laserfiche.com/ for supported image file formats.
+     * @returns Successfully uploaded the attachment content.
+     */
+    uploadAnnotationAttachment(args: {
+        repositoryId: string;
+        entryId: number;
+        pageNumber: number;
+        itemId: number;
+        file?: FileParameter | undefined;
+    }): Promise<void>;
+    /**
+     * - Returns the redaction reasons defined in the repository.
+    - Required OAuth scope: repository.Read
+     * @param args.repositoryId The requested repository ID.
+     * @param args.select (optional) Limits the properties returned in the result.
+     * @param args.orderby (optional) Specifies the order in which items are returned. The maximum number of expressions is 5.
+     * @param args.count (optional) Indicates whether the total count of items within a collection are returned in the result.
+     * @returns Successfully returned the repository's annotation reasons.
+     */
+    listAnnotationReasons(args: {
+        repositoryId: string;
+        select?: string | null | undefined;
+        orderby?: string | null | undefined;
+        count?: boolean | undefined;
+    }): Promise<AnnotationReason[]>;
+    /**
+     * - Required OAuth scope: repository.Write
+     * @returns Successfully created the annotation reason. Returned the created reason.
+     */
+    createAnnotationReason(args: {
+        repositoryId: string;
+        request: AnnotationReasonRequest;
+    }): Promise<AnnotationReason>;
+    /**
+     * - Send the image as multipart/form-data under the form field "file". The annotation must already exist and be a bitmap annotation.
+    - Requires the "annotate" entry right.
+    - Required OAuth scope: repository.Write
+     * @param args.file (optional) The image file to upload. See https://doc.laserfiche.com/ for supported image file formats.
+     * @returns Successfully uploaded the bitmap annotation image.
+     */
+    uploadAnnotationImage(args: {
+        repositoryId: string;
+        entryId: number;
+        pageNumber: number;
+        itemId: number;
+        file?: FileParameter | undefined;
+    }): Promise<void>;
+    /**
+     * - Required OAuth scope: repository.Write
+     * @returns Successfully updated the annotation reason. Returned the updated reason.
+     */
+    updateAnnotationReason(args: {
+        repositoryId: string;
+        reasonId: number;
+        request: AnnotationReasonRequest;
+    }): Promise<AnnotationReason>;
+    /**
+     * - When `force` is false, deleting a reason that is in use fails.
+    - Required OAuth scope: repository.Write
+     * @param args.force (optional)
+     * @returns Successfully deleted the annotation reason.
+     */
+    deleteAnnotationReason(args: {
+        repositoryId: string;
+        reasonId: number;
+        force?: boolean | undefined;
+    }): Promise<void>;
+}
+export declare class AnnotationsClient implements IAnnotationsClient {
+    private http;
+    private baseUrl;
+    protected jsonParseReviver: ((key: string, value: any) => any) | undefined;
+    constructor(baseUrl?: string, http?: {
+        fetch(url: RequestInfo, init?: RequestInit): Promise<Response>;
+    });
+    /**
+     * - Returns every annotation on every page of the document, as a polymorphic list keyed by annotation type.
+    - Requires the "see annotations" entry right; redaction content is only revealed to callers with the "see through redactions" right.
+    - Required OAuth scope: repository.Read
+     * @param args.repositoryId The requested repository ID.
+     * @param args.entryId The document entry ID.
+     * @param args.select (optional) Limits the properties returned in the result.
+     * @param args.orderby (optional) Specifies the order in which items are returned. The maximum number of expressions is 5.
+     * @param args.count (optional) Indicates whether the total count of items within a collection are returned in the result.
+     * @returns Successfully returned the annotations on the document.
+     */
+    listDocumentAnnotations(args: {
+        repositoryId: string;
+        entryId: number;
+        select?: string | null | undefined;
+        orderby?: string | null | undefined;
+        count?: boolean | undefined;
+    }): Promise<Annotation[]>;
+    protected processListDocumentAnnotations(response: Response): Promise<Annotation[]>;
+    /**
+     * - Returns the annotations on the requested page, as a polymorphic list keyed by annotation type.
+    - Requires the "see annotations" entry right; redaction content is only revealed to callers with the "see through redactions" right.
+    - Required OAuth scope: repository.Read
+     * @param args.repositoryId The requested repository ID.
+     * @param args.entryId The document entry ID.
+     * @param args.pageNumber The 1-based page number.
+     * @param args.select (optional) Limits the properties returned in the result.
+     * @param args.orderby (optional) Specifies the order in which items are returned. The maximum number of expressions is 5.
+     * @param args.count (optional) Indicates whether the total count of items within a collection are returned in the result.
+     * @returns Successfully returned the annotations on the page.
+     */
+    listPageAnnotations(args: {
+        repositoryId: string;
+        entryId: number;
+        pageNumber: number;
+        select?: string | null | undefined;
+        orderby?: string | null | undefined;
+        count?: boolean | undefined;
+    }): Promise<Annotation[]>;
+    protected processListPageAnnotations(response: Response): Promise<Annotation[]>;
+    /**
+     * - The request body is a polymorphic annotation discriminated by `annotationType`; supply the writable members for that type.
+    - For attachment and bitmap annotations, create the annotation first, then upload its binary content via the dedicated sub-resource.
+    - Requires the "annotate" entry right.
+    - Required OAuth scope: repository.Write
+     * @returns Successfully created the annotation. Returned the created annotation.
+     */
+    createAnnotation(args: {
+        repositoryId: string;
+        entryId: number;
+        pageNumber: number;
+        request: Annotation;
+    }): Promise<Annotation>;
+    protected processCreateAnnotation(response: Response): Promise<Annotation>;
+    /**
+     * - Returns the annotation, typed by annotation type.
+    - Requires the "see annotations" entry right; redaction content is only revealed to callers with the "see through redactions" right.
+    - Required OAuth scope: repository.Read
+     * @param args.repositoryId The requested repository ID.
+     * @param args.entryId The document entry ID.
+     * @param args.pageNumber The 1-based page number.
+     * @param args.itemId The annotation item ID, unique within the page.
+     * @param args.select (optional) Limits the properties returned in the result.
+     * @returns Successfully returned the requested annotation.
+     */
+    getAnnotation(args: {
+        repositoryId: string;
+        entryId: number;
+        pageNumber: number;
+        itemId: number;
+        select?: string | null | undefined;
+    }): Promise<Annotation>;
+    protected processGetAnnotation(response: Response): Promise<Annotation>;
+    /**
+     * - Supply only the members to change; omitted members are left unchanged. The `annotationType` must match the existing annotation.
+    - Requires the "annotate" entry right.
+    - Required OAuth scope: repository.Write
+     * @returns Successfully updated the annotation. Returned the updated annotation.
+     */
+    updateAnnotation(args: {
+        repositoryId: string;
+        entryId: number;
+        pageNumber: number;
+        itemId: number;
+        request: Annotation;
+    }): Promise<Annotation>;
+    protected processUpdateAnnotation(response: Response): Promise<Annotation>;
+    /**
+     * - Requires the "annotate" entry right.
+    - Required OAuth scope: repository.Write
+     * @returns Successfully deleted the annotation.
+     */
+    deleteAnnotation(args: {
+        repositoryId: string;
+        entryId: number;
+        pageNumber: number;
+        itemId: number;
+    }): Promise<void>;
+    protected processDeleteAnnotation(response: Response): Promise<void>;
+    /**
+     * - Streams the attached file. Fails with a bad request if the annotation is not an attachment.
+    - Requires the "see annotations" entry right.
+    - Required OAuth scope: repository.Read
+     * @param args.repositoryId The requested repository ID.
+     * @param args.entryId The document entry ID.
+     * @param args.pageNumber The 1-based page number.
+     * @param args.itemId The attachment annotation's item ID.
+     * @param args.select (optional) Limits the properties returned in the result.
+     * @returns Successfully returned the content of the attachment annotation.
+     */
+    getAnnotationAttachment(args: {
+        repositoryId: string;
+        entryId: number;
+        pageNumber: number;
+        itemId: number;
+        select?: string | null | undefined;
+    }): Promise<FileResponse>;
+    protected processGetAnnotationAttachment(response: Response): Promise<FileResponse>;
+    /**
+     * - Send the file as multipart/form-data under the form field "file". The annotation must already exist and be an attachment annotation.
+    - Requires the "annotate" entry right.
+    - Required OAuth scope: repository.Write
+     * @param args.file (optional) The image file to upload. See https://doc.laserfiche.com/ for supported image file formats.
+     * @returns Successfully uploaded the attachment content.
+     */
+    uploadAnnotationAttachment(args: {
+        repositoryId: string;
+        entryId: number;
+        pageNumber: number;
+        itemId: number;
+        file?: FileParameter | undefined;
+    }): Promise<void>;
+    protected processUploadAnnotationAttachment(response: Response): Promise<void>;
+    /**
+     * - Returns the redaction reasons defined in the repository.
+    - Required OAuth scope: repository.Read
+     * @param args.repositoryId The requested repository ID.
+     * @param args.select (optional) Limits the properties returned in the result.
+     * @param args.orderby (optional) Specifies the order in which items are returned. The maximum number of expressions is 5.
+     * @param args.count (optional) Indicates whether the total count of items within a collection are returned in the result.
+     * @returns Successfully returned the repository's annotation reasons.
+     */
+    listAnnotationReasons(args: {
+        repositoryId: string;
+        select?: string | null | undefined;
+        orderby?: string | null | undefined;
+        count?: boolean | undefined;
+    }): Promise<AnnotationReason[]>;
+    protected processListAnnotationReasons(response: Response): Promise<AnnotationReason[]>;
+    /**
+     * - Required OAuth scope: repository.Write
+     * @returns Successfully created the annotation reason. Returned the created reason.
+     */
+    createAnnotationReason(args: {
+        repositoryId: string;
+        request: AnnotationReasonRequest;
+    }): Promise<AnnotationReason>;
+    protected processCreateAnnotationReason(response: Response): Promise<AnnotationReason>;
+    /**
+     * - Send the image as multipart/form-data under the form field "file". The annotation must already exist and be a bitmap annotation.
+    - Requires the "annotate" entry right.
+    - Required OAuth scope: repository.Write
+     * @param args.file (optional) The image file to upload. See https://doc.laserfiche.com/ for supported image file formats.
+     * @returns Successfully uploaded the bitmap annotation image.
+     */
+    uploadAnnotationImage(args: {
+        repositoryId: string;
+        entryId: number;
+        pageNumber: number;
+        itemId: number;
+        file?: FileParameter | undefined;
+    }): Promise<void>;
+    protected processUploadAnnotationImage(response: Response): Promise<void>;
+    /**
+     * - Required OAuth scope: repository.Write
+     * @returns Successfully updated the annotation reason. Returned the updated reason.
+     */
+    updateAnnotationReason(args: {
+        repositoryId: string;
+        reasonId: number;
+        request: AnnotationReasonRequest;
+    }): Promise<AnnotationReason>;
+    protected processUpdateAnnotationReason(response: Response): Promise<AnnotationReason>;
+    /**
+     * - When `force` is false, deleting a reason that is in use fails.
+    - Required OAuth scope: repository.Write
+     * @param args.force (optional)
+     * @returns Successfully deleted the annotation reason.
+     */
+    deleteAnnotationReason(args: {
+        repositoryId: string;
+        reasonId: number;
+        force?: boolean | undefined;
+    }): Promise<void>;
+    protected processDeleteAnnotationReason(response: Response): Promise<void>;
+}
 export interface IAttributesClient {
     /**
      * - Returns the attribute key value pairs associated with the authenticated user. Alternatively, return only the attribute key value pairs that are associated with the "Everyone" group.
@@ -641,47 +1028,515 @@ export declare class FieldDefinitionsClient implements IFieldDefinitionsClient {
     }): Promise<FieldDefinition>;
     protected processChangeFieldType(response: Response): Promise<FieldDefinition>;
 }
-export interface ILinkDefinitionsClient {
+export interface IAccessControlClient {
     /**
-     * - Returns the link definitions in the repository.
-    - Provide a repository ID and get a paged listing of link definitions available in the repository. Useful when trying to display all link definitions available, not only links assigned to a specific entry.
-    - Default page size: 100. Allowed OData query options: Select | Count | OrderBy | Skip | Top | SkipToken | Prefer.
+     * - Returns the field's access control entries (ACEs): the trustee, whether rights are allowed or denied, and the rights themselves. Field ACEs have no scope and are never inherited.
+    - The OAuth scope is coarse; the repository session enforces the real permission and returns 403 when the caller lacks the field's ReadPermissions right.
     - Required OAuth scope: repository.Read
      * @param args.repositoryId The requested repository ID.
-     * @param args.prefer (optional) An optional OData header. Can be used to set the maximum page size using odata.maxpagesize.
-     * @param args.select (optional) Limits the properties returned in the result.
-     * @param args.orderby (optional) Specifies the order in which items are returned. The maximum number of expressions is 5.
-     * @param args.top (optional) Limits the number of items returned from a collection. The maximum value is 150.
-     * @param args.skip (optional) Excludes the specified number of items of the queried collection from the result.
-     * @param args.count (optional) Indicates whether the total count of items within a collection are returned in the result.
-     * @returns Successfully returned link definitions.
+     * @param args.fieldId The requested field definition ID.
+     * @returns Successfully returned the field definition's access control list.
      */
-    listLinkDefinitions(args: {
+    getFieldAccessControl(args: {
         repositoryId: string;
-        prefer?: string | null | undefined;
-        select?: string | null | undefined;
-        orderby?: string | null | undefined;
-        top?: number | undefined;
-        skip?: number | undefined;
-        count?: boolean | undefined;
-    }): Promise<LinkDefinitionCollectionResponse>;
+        fieldId: number;
+    }): Promise<FieldAccessControlList>;
     /**
-     * - Returns a single link definition associated with the specified ID.
-    - Provide a link definition ID and get the associated link definition. Useful when a route provides a minimal amount of details and more information about the specific link definition is needed.
-    - Allowed OData query options: Select
+     * - Full replace: the supplied entries replace the field's entire explicit ACL. Inherited entries are not accepted (field ACEs are never inherited). Address a trustee by trustee.sid or trustee.accountName (the SID wins when both are given; an account name is resolved to a SID server-side).
+    - The OAuth scope is coarse; the repository session enforces the real permission and returns 403 when the caller lacks the field's ChangePermissions right.
+    - Required OAuth scope: repository.Write
+     * @param args.repositoryId The requested repository ID.
+     * @param args.fieldId The field definition ID whose ACL to replace.
+     * @param args.request The access control entries to set.
+     * @returns Successfully replaced the field definition's access control list. Returned the updated access control list.
+     */
+    setFieldAccessControl(args: {
+        repositoryId: string;
+        fieldId: number;
+        request: SetFieldAccessControlRequest;
+    }): Promise<FieldAccessControlList>;
+    /**
+     * - Returns the rights a trustee has on the field definition, plus whether the session is read-only. By default these are the effective rights (after group membership, allow/deny resolution, and the privilege overlay); set aclOnly=true for the rights granted by the field's own ACL without that overlay. Omit both trusteeId and trusteeName for the current session.
     - Required OAuth scope: repository.Read
      * @param args.repositoryId The requested repository ID.
-     * @param args.linkDefinitionId The requested link definition ID.
-     * @param args.select (optional) Limits the properties returned in the result.
-     * @returns Successfully returned specified link definition.
+     * @param args.fieldId The requested field definition ID.
+     * @param args.trusteeId (optional) An optional trustee SID. When supplied, returns that trustee's rights; otherwise the current session's.
+     * @param args.trusteeName (optional) An optional trustee account name, as an alternative to trusteeId. The SID wins when both are supplied.
+     * @param args.aclOnly (optional) Optional. Selects which rights are returned. Default (false): the trustee's effective rights — the net result after allow/deny resolution, group membership, and the repository's privilege overlay (for example, the metadata-management privilege that grants full control over every field regardless of its ACL). When true: only the rights granted by this field definition's own access control list, without that privilege overlay. Group membership is always resolved. Field definitions are not hierarchical, so there is no parent inheritance involved either way.
+     * @returns Successfully returned the rights for the field definition.
      */
-    getLinkDefinition(args: {
+    getFieldRights(args: {
         repositoryId: string;
-        linkDefinitionId: number;
-        select?: string | null | undefined;
-    }): Promise<LinkDefinition>;
-}
-export declare class LinkDefinitionsClient implements ILinkDefinitionsClient {
+        fieldId: number;
+        trusteeId?: string | null | undefined;
+        trusteeName?: string | null | undefined;
+        aclOnly?: boolean | undefined;
+    }): Promise<FieldRights>;
+    /**
+     * - Returns the repository's default field ACL — the access control entries a new field definition inherits at creation time.
+    - Required OAuth scope: repository.Read
+     * @param args.repositoryId The requested repository ID.
+     * @returns Successfully returned the default field access control list.
+     */
+    getDefaultFieldAccessControl(args: {
+        repositoryId: string;
+    }): Promise<FieldAccessControlList>;
+    /**
+     * - Full replace: the supplied entries replace the entire default field ACL. Inherited entries are not accepted. Address a trustee by trustee.sid or trustee.accountName (the SID wins when both are given).
+    - Required OAuth scope: repository.Write
+     * @param args.repositoryId The requested repository ID.
+     * @param args.request The access control entries to set as the default field ACL.
+     * @returns Successfully replaced the default field access control list. Returned the updated default access control list.
+     */
+    setDefaultFieldAccessControl(args: {
+        repositoryId: string;
+        request: SetFieldAccessControlRequest;
+    }): Promise<FieldAccessControlList>;
+    /**
+     * - Returns the access control entries (ACEs) configured on the entry — by default both explicitly-set and inherited (inherited ACEs carry isInherited = true), or only the explicit ones when includeInherited=false — plus whether the entry inherits rights from its parent(s).
+    - Each ACE names a trustee, whether its rights are allowed or denied, the rights themselves, and the propagation scope.
+    - The repository session enforces the underlying permission: reading an ACL requires the ReadPermissions right on the entry, and a 403 is returned when it is lacking. The repository.Read OAuth scope is necessary but not sufficient.
+    - Required OAuth scope: repository.Read
+     * @param args.repositoryId The requested repository ID.
+     * @param args.entryId The entry whose access control list is returned.
+     * @param args.includeInherited (optional) Optional. When true (the default), the response includes both the entry's explicit access control entries and the inherited ones (inherited ACEs carry isInherited = true). When false, only the explicit ACEs are returned — the exact set that the access-control PUT accepts — making it convenient to read, edit, and write back the ACL without filtering inherited entries client-side. The inheritParents flag is unaffected by this option.
+     * @param args.select (optional) Limits the properties returned in the result.
+     * @returns Successfully returned the entry's access control list.
+     */
+    getEntryAccessControl(args: {
+        repositoryId: string;
+        entryId: number;
+        includeInherited?: boolean | undefined;
+        select?: string | null | undefined;
+    }): Promise<AccessControlList>;
+    /**
+     * - Full replace of the entry's explicit ACEs: the supplied entries become the entry's complete set of explicit ACEs, and any explicit ACE not included is removed. An empty entries array clears all explicit ACEs.
+    - Inherited ACEs cannot be supplied (entries flagged isInherited = true are rejected with 400); inheritance is controlled via inheritParents. When inheritParents is omitted, the entry's current inheritance setting is preserved.
+    - Each ACE identifies its trustee by trustee.sid or trustee.accountName (an account name is resolved to a SID server-side; the SID takes precedence when both are supplied). A trustee that needs both allowed and denied rights is expressed as two ACEs.
+    - The repository session enforces the underlying permission: changing an ACL requires the ChangePermissions right on the entry, and a 403 is returned when it is lacking. The repository.Write OAuth scope is necessary but not sufficient.
+    - Returns the entry's full ACL after the change.
+    - Required OAuth scope: repository.Write
+     * @param args.repositoryId The requested repository ID.
+     * @param args.entryId The entry whose access control list is replaced.
+     * @param args.request The explicit access control entries to apply and, optionally, the parent-inheritance setting.
+     * @returns Successfully replaced the entry's access control list. Returned the updated access control list.
+     */
+    setEntryAccessControl(args: {
+        repositoryId: string;
+        entryId: number;
+        request: SetAccessControlRequest;
+    }): Promise<AccessControlList>;
+    /**
+     * - Returns the rights a trustee has on the entry. By default these are the effective rights — the same calculation the Laserfiche applications use, after allow/deny resolution, group membership, and the repository's privilege and records-management overlays. Set aclOnly=true to return only the rights granted by the entry's access control list (including its stored inherited ACEs) without the privilege/records-management overlays.
+    - Identify the trustee by trusteeId (a SID) or trusteeName (an account name); omit both for the calling session.
+    - isReadOnly reports whether the session is read-only, in which case no write operations are possible regardless of the granted rights.
+    - Required OAuth scope: repository.Read
+     * @param args.repositoryId The requested repository ID.
+     * @param args.entryId The entry whose rights are computed.
+     * @param args.trusteeId (optional) Optional. The SID of the trustee to compute rights for. When omitted (along with trusteeName), the rights of the current session are returned.
+     * @param args.trusteeName (optional) Optional. The account name of the trustee to compute rights for, as an alternative to trusteeId. When both are supplied, trusteeId takes precedence.
+     * @param args.aclOnly (optional) Optional. Selects which rights are returned. Default (false): the trustee's effective rights — the net result after allow/deny resolution, group membership, and the repository's privilege and records-management overlays. When true: only the rights granted by this item's access control list — including inherited access control entries, which are stored on the item itself — without the privilege and records-management overlays (for example, a privilege that grants full control regardless of the ACL is reflected only when aclOnly=false). Group membership is always resolved. The aclOnly=true value is what the ACL editor displays as the net effect of the list.
+     * @param args.select (optional) Limits the properties returned in the result.
+     * @returns Successfully returned the rights for the entry.
+     */
+    getEntryRights(args: {
+        repositoryId: string;
+        entryId: number;
+        trusteeId?: string | null | undefined;
+        trusteeName?: string | null | undefined;
+        aclOnly?: boolean | undefined;
+        select?: string | null | undefined;
+    }): Promise<EntryRights>;
+    /**
+     * - Returns the privileges and feature rights held by the current session, plus whether the session is read-only. Each is reported as named booleans (a map of right name to whether it is granted), for UI enablement and pre-flight checks.
+    - Reflects the current session only. Per-trustee privilege administration is not part of this surface.
+    - Required OAuth scope: repository.Read
+     * @param args.repositoryId The requested repository ID.
+     * @returns Successfully returned the current session's rights.
+     */
+    getSessionRights(args: {
+        repositoryId: string;
+    }): Promise<SessionRights>;
+    /**
+     * - Returns the template's access control entries (ACEs): the trustee, whether rights are allowed or denied, and the rights themselves. Template ACEs have no scope and are never inherited.
+    - The OAuth scope is coarse; the repository session enforces the real permission and returns 403 when the caller lacks the template's ReadPermissions right.
+    - Required OAuth scope: repository.Read
+     * @param args.repositoryId The requested repository ID.
+     * @param args.templateId The requested template definition ID.
+     * @returns Successfully returned the template definition's access control list.
+     */
+    getTemplateAccessControl(args: {
+        repositoryId: string;
+        templateId: number;
+    }): Promise<TemplateAccessControlList>;
+    /**
+     * - Full replace: the supplied entries replace the template's entire explicit ACL. Inherited entries are not accepted (template ACEs are never inherited). Address a trustee by trustee.sid or trustee.accountName (the SID wins when both are given; an account name is resolved to a SID server-side).
+    - The OAuth scope is coarse; the repository session enforces the real permission and returns 403 when the caller lacks the template's ChangePermissions right.
+    - Required OAuth scope: repository.Write
+     * @param args.repositoryId The requested repository ID.
+     * @param args.templateId The template definition ID whose ACL to replace.
+     * @param args.request The access control entries to set.
+     * @returns Successfully replaced the template definition's access control list. Returned the updated access control list.
+     */
+    setTemplateAccessControl(args: {
+        repositoryId: string;
+        templateId: number;
+        request: SetTemplateAccessControlRequest;
+    }): Promise<TemplateAccessControlList>;
+    /**
+     * - Returns the rights a trustee has on the template definition, plus whether the session is read-only. By default these are the effective rights (after group membership, allow/deny resolution, and the privilege overlay); set aclOnly=true for the rights granted by the template's own ACL without that overlay. Omit both trusteeId and trusteeName for the current session.
+    - Required OAuth scope: repository.Read
+     * @param args.repositoryId The requested repository ID.
+     * @param args.templateId The requested template definition ID.
+     * @param args.trusteeId (optional) An optional trustee SID. When supplied, returns that trustee's rights; otherwise the current session's.
+     * @param args.trusteeName (optional) An optional trustee account name, as an alternative to trusteeId. The SID wins when both are supplied.
+     * @param args.aclOnly (optional) Optional. Selects which rights are returned. Default (false): the trustee's effective rights — the net result after allow/deny resolution, group membership, and the repository's privilege overlay (for example, the metadata-management privilege that grants full control over every template regardless of its ACL). When true: only the rights granted by this template definition's own access control list, without that privilege overlay. Group membership is always resolved. Template definitions are not hierarchical, so there is no parent inheritance involved either way.
+     * @returns Successfully returned the rights for the template definition.
+     */
+    getTemplateRights(args: {
+        repositoryId: string;
+        templateId: number;
+        trusteeId?: string | null | undefined;
+        trusteeName?: string | null | undefined;
+        aclOnly?: boolean | undefined;
+    }): Promise<TemplateRights>;
+    /**
+     * - Returns the repository's default template ACL — the access control entries a new template definition inherits at creation time.
+    - Required OAuth scope: repository.Read
+     * @param args.repositoryId The requested repository ID.
+     * @returns Successfully returned the default template access control list.
+     */
+    getDefaultTemplateAccessControl(args: {
+        repositoryId: string;
+    }): Promise<TemplateAccessControlList>;
+    /**
+     * - Full replace: the supplied entries replace the entire default template ACL. Inherited entries are not accepted. Address a trustee by trustee.sid or trustee.accountName (the SID wins when both are given).
+    - Required OAuth scope: repository.Write
+     * @param args.repositoryId The requested repository ID.
+     * @param args.request The access control entries to set as the default template ACL.
+     * @returns Successfully replaced the default template access control list. Returned the updated default access control list.
+     */
+    setDefaultTemplateAccessControl(args: {
+        repositoryId: string;
+        request: SetTemplateAccessControlRequest;
+    }): Promise<TemplateAccessControlList>;
+    /**
+     * - Resolves trustee names to the SIDs used when building access control entries or reading effective rights for a trustee.
+    - Each result includes the trustee's SID, account name, display name, type, whether it is a user or group, and whether the account is disabled.
+    - Required OAuth scope: repository.Read
+     * @param args.repositoryId The requested repository ID.
+     * @param args.search (optional) The name (or name prefix) to search for.
+     * @param args.type (optional) Optional. Restrict the search to user or group trustees. When omitted, both users and groups are returned.
+     * @param args.count (optional) Optional. The maximum number of trustees to return. Defaults to 100.
+     * @returns Successfully returned the matching trustees.
+     */
+    lookupTrustees(args: {
+        repositoryId: string;
+        search?: string | null | undefined;
+        type?: string | null | undefined;
+        count?: number | undefined;
+    }): Promise<TrusteeIdentity[]>;
+    /**
+     * - Returns the trustee's privileges and feature rights (as named booleans), the security tags assigned to it, the audit classes configured for it (split into success and failure masks), and whether the trustee is read-only.
+    - The effective view (includeInherited=true) is a best-effort computation that can, in rare cases, differ from the trustee's real rights. The authoritative way to determine a trustee's security is to sign in as that trustee and read the resulting session's rights.
+    - Required OAuth scope: repository.Read
+     * @param args.repositoryId The requested repository ID.
+     * @param args.trusteeId The SID of the trustee whose security is read. Use the trustee lookup to resolve a name to a SID.
+     * @param args.includeInherited (optional) When true (default), returns the trustee's effective security — what applies once group memberships are resolved. When false, returns the direct security assigned on the trustee record itself, without group-membership inheritance.
+     * @returns Successfully returned the trustee's account security (effective by default, or direct when includeInherited=false).
+     */
+    getTrusteeSecurity(args: {
+        repositoryId: string;
+        trusteeId: string;
+        includeInherited?: boolean | undefined;
+    }): Promise<TrusteeSecurity>;
+}
+export declare class AccessControlClient implements IAccessControlClient {
+    private http;
+    private baseUrl;
+    protected jsonParseReviver: ((key: string, value: any) => any) | undefined;
+    constructor(baseUrl?: string, http?: {
+        fetch(url: RequestInfo, init?: RequestInit): Promise<Response>;
+    });
+    /**
+     * - Returns the field's access control entries (ACEs): the trustee, whether rights are allowed or denied, and the rights themselves. Field ACEs have no scope and are never inherited.
+    - The OAuth scope is coarse; the repository session enforces the real permission and returns 403 when the caller lacks the field's ReadPermissions right.
+    - Required OAuth scope: repository.Read
+     * @param args.repositoryId The requested repository ID.
+     * @param args.fieldId The requested field definition ID.
+     * @returns Successfully returned the field definition's access control list.
+     */
+    getFieldAccessControl(args: {
+        repositoryId: string;
+        fieldId: number;
+    }): Promise<FieldAccessControlList>;
+    protected processGetFieldAccessControl(response: Response): Promise<FieldAccessControlList>;
+    /**
+     * - Full replace: the supplied entries replace the field's entire explicit ACL. Inherited entries are not accepted (field ACEs are never inherited). Address a trustee by trustee.sid or trustee.accountName (the SID wins when both are given; an account name is resolved to a SID server-side).
+    - The OAuth scope is coarse; the repository session enforces the real permission and returns 403 when the caller lacks the field's ChangePermissions right.
+    - Required OAuth scope: repository.Write
+     * @param args.repositoryId The requested repository ID.
+     * @param args.fieldId The field definition ID whose ACL to replace.
+     * @param args.request The access control entries to set.
+     * @returns Successfully replaced the field definition's access control list. Returned the updated access control list.
+     */
+    setFieldAccessControl(args: {
+        repositoryId: string;
+        fieldId: number;
+        request: SetFieldAccessControlRequest;
+    }): Promise<FieldAccessControlList>;
+    protected processSetFieldAccessControl(response: Response): Promise<FieldAccessControlList>;
+    /**
+     * - Returns the rights a trustee has on the field definition, plus whether the session is read-only. By default these are the effective rights (after group membership, allow/deny resolution, and the privilege overlay); set aclOnly=true for the rights granted by the field's own ACL without that overlay. Omit both trusteeId and trusteeName for the current session.
+    - Required OAuth scope: repository.Read
+     * @param args.repositoryId The requested repository ID.
+     * @param args.fieldId The requested field definition ID.
+     * @param args.trusteeId (optional) An optional trustee SID. When supplied, returns that trustee's rights; otherwise the current session's.
+     * @param args.trusteeName (optional) An optional trustee account name, as an alternative to trusteeId. The SID wins when both are supplied.
+     * @param args.aclOnly (optional) Optional. Selects which rights are returned. Default (false): the trustee's effective rights — the net result after allow/deny resolution, group membership, and the repository's privilege overlay (for example, the metadata-management privilege that grants full control over every field regardless of its ACL). When true: only the rights granted by this field definition's own access control list, without that privilege overlay. Group membership is always resolved. Field definitions are not hierarchical, so there is no parent inheritance involved either way.
+     * @returns Successfully returned the rights for the field definition.
+     */
+    getFieldRights(args: {
+        repositoryId: string;
+        fieldId: number;
+        trusteeId?: string | null | undefined;
+        trusteeName?: string | null | undefined;
+        aclOnly?: boolean | undefined;
+    }): Promise<FieldRights>;
+    protected processGetFieldRights(response: Response): Promise<FieldRights>;
+    /**
+     * - Returns the repository's default field ACL — the access control entries a new field definition inherits at creation time.
+    - Required OAuth scope: repository.Read
+     * @param args.repositoryId The requested repository ID.
+     * @returns Successfully returned the default field access control list.
+     */
+    getDefaultFieldAccessControl(args: {
+        repositoryId: string;
+    }): Promise<FieldAccessControlList>;
+    protected processGetDefaultFieldAccessControl(response: Response): Promise<FieldAccessControlList>;
+    /**
+     * - Full replace: the supplied entries replace the entire default field ACL. Inherited entries are not accepted. Address a trustee by trustee.sid or trustee.accountName (the SID wins when both are given).
+    - Required OAuth scope: repository.Write
+     * @param args.repositoryId The requested repository ID.
+     * @param args.request The access control entries to set as the default field ACL.
+     * @returns Successfully replaced the default field access control list. Returned the updated default access control list.
+     */
+    setDefaultFieldAccessControl(args: {
+        repositoryId: string;
+        request: SetFieldAccessControlRequest;
+    }): Promise<FieldAccessControlList>;
+    protected processSetDefaultFieldAccessControl(response: Response): Promise<FieldAccessControlList>;
+    /**
+     * - Returns the access control entries (ACEs) configured on the entry — by default both explicitly-set and inherited (inherited ACEs carry isInherited = true), or only the explicit ones when includeInherited=false — plus whether the entry inherits rights from its parent(s).
+    - Each ACE names a trustee, whether its rights are allowed or denied, the rights themselves, and the propagation scope.
+    - The repository session enforces the underlying permission: reading an ACL requires the ReadPermissions right on the entry, and a 403 is returned when it is lacking. The repository.Read OAuth scope is necessary but not sufficient.
+    - Required OAuth scope: repository.Read
+     * @param args.repositoryId The requested repository ID.
+     * @param args.entryId The entry whose access control list is returned.
+     * @param args.includeInherited (optional) Optional. When true (the default), the response includes both the entry's explicit access control entries and the inherited ones (inherited ACEs carry isInherited = true). When false, only the explicit ACEs are returned — the exact set that the access-control PUT accepts — making it convenient to read, edit, and write back the ACL without filtering inherited entries client-side. The inheritParents flag is unaffected by this option.
+     * @param args.select (optional) Limits the properties returned in the result.
+     * @returns Successfully returned the entry's access control list.
+     */
+    getEntryAccessControl(args: {
+        repositoryId: string;
+        entryId: number;
+        includeInherited?: boolean | undefined;
+        select?: string | null | undefined;
+    }): Promise<AccessControlList>;
+    protected processGetEntryAccessControl(response: Response): Promise<AccessControlList>;
+    /**
+     * - Full replace of the entry's explicit ACEs: the supplied entries become the entry's complete set of explicit ACEs, and any explicit ACE not included is removed. An empty entries array clears all explicit ACEs.
+    - Inherited ACEs cannot be supplied (entries flagged isInherited = true are rejected with 400); inheritance is controlled via inheritParents. When inheritParents is omitted, the entry's current inheritance setting is preserved.
+    - Each ACE identifies its trustee by trustee.sid or trustee.accountName (an account name is resolved to a SID server-side; the SID takes precedence when both are supplied). A trustee that needs both allowed and denied rights is expressed as two ACEs.
+    - The repository session enforces the underlying permission: changing an ACL requires the ChangePermissions right on the entry, and a 403 is returned when it is lacking. The repository.Write OAuth scope is necessary but not sufficient.
+    - Returns the entry's full ACL after the change.
+    - Required OAuth scope: repository.Write
+     * @param args.repositoryId The requested repository ID.
+     * @param args.entryId The entry whose access control list is replaced.
+     * @param args.request The explicit access control entries to apply and, optionally, the parent-inheritance setting.
+     * @returns Successfully replaced the entry's access control list. Returned the updated access control list.
+     */
+    setEntryAccessControl(args: {
+        repositoryId: string;
+        entryId: number;
+        request: SetAccessControlRequest;
+    }): Promise<AccessControlList>;
+    protected processSetEntryAccessControl(response: Response): Promise<AccessControlList>;
+    /**
+     * - Returns the rights a trustee has on the entry. By default these are the effective rights — the same calculation the Laserfiche applications use, after allow/deny resolution, group membership, and the repository's privilege and records-management overlays. Set aclOnly=true to return only the rights granted by the entry's access control list (including its stored inherited ACEs) without the privilege/records-management overlays.
+    - Identify the trustee by trusteeId (a SID) or trusteeName (an account name); omit both for the calling session.
+    - isReadOnly reports whether the session is read-only, in which case no write operations are possible regardless of the granted rights.
+    - Required OAuth scope: repository.Read
+     * @param args.repositoryId The requested repository ID.
+     * @param args.entryId The entry whose rights are computed.
+     * @param args.trusteeId (optional) Optional. The SID of the trustee to compute rights for. When omitted (along with trusteeName), the rights of the current session are returned.
+     * @param args.trusteeName (optional) Optional. The account name of the trustee to compute rights for, as an alternative to trusteeId. When both are supplied, trusteeId takes precedence.
+     * @param args.aclOnly (optional) Optional. Selects which rights are returned. Default (false): the trustee's effective rights — the net result after allow/deny resolution, group membership, and the repository's privilege and records-management overlays. When true: only the rights granted by this item's access control list — including inherited access control entries, which are stored on the item itself — without the privilege and records-management overlays (for example, a privilege that grants full control regardless of the ACL is reflected only when aclOnly=false). Group membership is always resolved. The aclOnly=true value is what the ACL editor displays as the net effect of the list.
+     * @param args.select (optional) Limits the properties returned in the result.
+     * @returns Successfully returned the rights for the entry.
+     */
+    getEntryRights(args: {
+        repositoryId: string;
+        entryId: number;
+        trusteeId?: string | null | undefined;
+        trusteeName?: string | null | undefined;
+        aclOnly?: boolean | undefined;
+        select?: string | null | undefined;
+    }): Promise<EntryRights>;
+    protected processGetEntryRights(response: Response): Promise<EntryRights>;
+    /**
+     * - Returns the privileges and feature rights held by the current session, plus whether the session is read-only. Each is reported as named booleans (a map of right name to whether it is granted), for UI enablement and pre-flight checks.
+    - Reflects the current session only. Per-trustee privilege administration is not part of this surface.
+    - Required OAuth scope: repository.Read
+     * @param args.repositoryId The requested repository ID.
+     * @returns Successfully returned the current session's rights.
+     */
+    getSessionRights(args: {
+        repositoryId: string;
+    }): Promise<SessionRights>;
+    protected processGetSessionRights(response: Response): Promise<SessionRights>;
+    /**
+     * - Returns the template's access control entries (ACEs): the trustee, whether rights are allowed or denied, and the rights themselves. Template ACEs have no scope and are never inherited.
+    - The OAuth scope is coarse; the repository session enforces the real permission and returns 403 when the caller lacks the template's ReadPermissions right.
+    - Required OAuth scope: repository.Read
+     * @param args.repositoryId The requested repository ID.
+     * @param args.templateId The requested template definition ID.
+     * @returns Successfully returned the template definition's access control list.
+     */
+    getTemplateAccessControl(args: {
+        repositoryId: string;
+        templateId: number;
+    }): Promise<TemplateAccessControlList>;
+    protected processGetTemplateAccessControl(response: Response): Promise<TemplateAccessControlList>;
+    /**
+     * - Full replace: the supplied entries replace the template's entire explicit ACL. Inherited entries are not accepted (template ACEs are never inherited). Address a trustee by trustee.sid or trustee.accountName (the SID wins when both are given; an account name is resolved to a SID server-side).
+    - The OAuth scope is coarse; the repository session enforces the real permission and returns 403 when the caller lacks the template's ChangePermissions right.
+    - Required OAuth scope: repository.Write
+     * @param args.repositoryId The requested repository ID.
+     * @param args.templateId The template definition ID whose ACL to replace.
+     * @param args.request The access control entries to set.
+     * @returns Successfully replaced the template definition's access control list. Returned the updated access control list.
+     */
+    setTemplateAccessControl(args: {
+        repositoryId: string;
+        templateId: number;
+        request: SetTemplateAccessControlRequest;
+    }): Promise<TemplateAccessControlList>;
+    protected processSetTemplateAccessControl(response: Response): Promise<TemplateAccessControlList>;
+    /**
+     * - Returns the rights a trustee has on the template definition, plus whether the session is read-only. By default these are the effective rights (after group membership, allow/deny resolution, and the privilege overlay); set aclOnly=true for the rights granted by the template's own ACL without that overlay. Omit both trusteeId and trusteeName for the current session.
+    - Required OAuth scope: repository.Read
+     * @param args.repositoryId The requested repository ID.
+     * @param args.templateId The requested template definition ID.
+     * @param args.trusteeId (optional) An optional trustee SID. When supplied, returns that trustee's rights; otherwise the current session's.
+     * @param args.trusteeName (optional) An optional trustee account name, as an alternative to trusteeId. The SID wins when both are supplied.
+     * @param args.aclOnly (optional) Optional. Selects which rights are returned. Default (false): the trustee's effective rights — the net result after allow/deny resolution, group membership, and the repository's privilege overlay (for example, the metadata-management privilege that grants full control over every template regardless of its ACL). When true: only the rights granted by this template definition's own access control list, without that privilege overlay. Group membership is always resolved. Template definitions are not hierarchical, so there is no parent inheritance involved either way.
+     * @returns Successfully returned the rights for the template definition.
+     */
+    getTemplateRights(args: {
+        repositoryId: string;
+        templateId: number;
+        trusteeId?: string | null | undefined;
+        trusteeName?: string | null | undefined;
+        aclOnly?: boolean | undefined;
+    }): Promise<TemplateRights>;
+    protected processGetTemplateRights(response: Response): Promise<TemplateRights>;
+    /**
+     * - Returns the repository's default template ACL — the access control entries a new template definition inherits at creation time.
+    - Required OAuth scope: repository.Read
+     * @param args.repositoryId The requested repository ID.
+     * @returns Successfully returned the default template access control list.
+     */
+    getDefaultTemplateAccessControl(args: {
+        repositoryId: string;
+    }): Promise<TemplateAccessControlList>;
+    protected processGetDefaultTemplateAccessControl(response: Response): Promise<TemplateAccessControlList>;
+    /**
+     * - Full replace: the supplied entries replace the entire default template ACL. Inherited entries are not accepted. Address a trustee by trustee.sid or trustee.accountName (the SID wins when both are given).
+    - Required OAuth scope: repository.Write
+     * @param args.repositoryId The requested repository ID.
+     * @param args.request The access control entries to set as the default template ACL.
+     * @returns Successfully replaced the default template access control list. Returned the updated default access control list.
+     */
+    setDefaultTemplateAccessControl(args: {
+        repositoryId: string;
+        request: SetTemplateAccessControlRequest;
+    }): Promise<TemplateAccessControlList>;
+    protected processSetDefaultTemplateAccessControl(response: Response): Promise<TemplateAccessControlList>;
+    /**
+     * - Resolves trustee names to the SIDs used when building access control entries or reading effective rights for a trustee.
+    - Each result includes the trustee's SID, account name, display name, type, whether it is a user or group, and whether the account is disabled.
+    - Required OAuth scope: repository.Read
+     * @param args.repositoryId The requested repository ID.
+     * @param args.search (optional) The name (or name prefix) to search for.
+     * @param args.type (optional) Optional. Restrict the search to user or group trustees. When omitted, both users and groups are returned.
+     * @param args.count (optional) Optional. The maximum number of trustees to return. Defaults to 100.
+     * @returns Successfully returned the matching trustees.
+     */
+    lookupTrustees(args: {
+        repositoryId: string;
+        search?: string | null | undefined;
+        type?: string | null | undefined;
+        count?: number | undefined;
+    }): Promise<TrusteeIdentity[]>;
+    protected processLookupTrustees(response: Response): Promise<TrusteeIdentity[]>;
+    /**
+     * - Returns the trustee's privileges and feature rights (as named booleans), the security tags assigned to it, the audit classes configured for it (split into success and failure masks), and whether the trustee is read-only.
+    - The effective view (includeInherited=true) is a best-effort computation that can, in rare cases, differ from the trustee's real rights. The authoritative way to determine a trustee's security is to sign in as that trustee and read the resulting session's rights.
+    - Required OAuth scope: repository.Read
+     * @param args.repositoryId The requested repository ID.
+     * @param args.trusteeId The SID of the trustee whose security is read. Use the trustee lookup to resolve a name to a SID.
+     * @param args.includeInherited (optional) When true (default), returns the trustee's effective security — what applies once group memberships are resolved. When false, returns the direct security assigned on the trustee record itself, without group-membership inheritance.
+     * @returns Successfully returned the trustee's account security (effective by default, or direct when includeInherited=false).
+     */
+    getTrusteeSecurity(args: {
+        repositoryId: string;
+        trusteeId: string;
+        includeInherited?: boolean | undefined;
+    }): Promise<TrusteeSecurity>;
+    protected processGetTrusteeSecurity(response: Response): Promise<TrusteeSecurity>;
+}
+export interface ILinkDefinitionsClient {
+    /**
+     * - Returns the link definitions in the repository.
+    - Provide a repository ID and get a paged listing of link definitions available in the repository. Useful when trying to display all link definitions available, not only links assigned to a specific entry.
+    - Default page size: 100. Allowed OData query options: Select | Count | OrderBy | Skip | Top | SkipToken | Prefer.
+    - Required OAuth scope: repository.Read
+     * @param args.repositoryId The requested repository ID.
+     * @param args.prefer (optional) An optional OData header. Can be used to set the maximum page size using odata.maxpagesize.
+     * @param args.select (optional) Limits the properties returned in the result.
+     * @param args.orderby (optional) Specifies the order in which items are returned. The maximum number of expressions is 5.
+     * @param args.top (optional) Limits the number of items returned from a collection. The maximum value is 150.
+     * @param args.skip (optional) Excludes the specified number of items of the queried collection from the result.
+     * @param args.count (optional) Indicates whether the total count of items within a collection are returned in the result.
+     * @returns Successfully returned link definitions.
+     */
+    listLinkDefinitions(args: {
+        repositoryId: string;
+        prefer?: string | null | undefined;
+        select?: string | null | undefined;
+        orderby?: string | null | undefined;
+        top?: number | undefined;
+        skip?: number | undefined;
+        count?: boolean | undefined;
+    }): Promise<LinkDefinitionCollectionResponse>;
+    /**
+     * - Returns a single link definition associated with the specified ID.
+    - Provide a link definition ID and get the associated link definition. Useful when a route provides a minimal amount of details and more information about the specific link definition is needed.
+    - Allowed OData query options: Select
+    - Required OAuth scope: repository.Read
+     * @param args.repositoryId The requested repository ID.
+     * @param args.linkDefinitionId The requested link definition ID.
+     * @param args.select (optional) Limits the properties returned in the result.
+     * @returns Successfully returned specified link definition.
+     */
+    getLinkDefinition(args: {
+        repositoryId: string;
+        linkDefinitionId: number;
+        select?: string | null | undefined;
+    }): Promise<LinkDefinition>;
+}
+export declare class LinkDefinitionsClient implements ILinkDefinitionsClient {
     private http;
     private baseUrl;
     protected jsonParseReviver: ((key: string, value: any) => any) | undefined;
@@ -2556,38 +3411,246 @@ export declare class EntriesClient implements IEntriesClient {
     }): Promise<Entry>;
     protected processUndoCheckOut(response: Response): Promise<Entry>;
 }
-export interface IRepositoriesClient {
+export interface IRecordsManagementClient {
     /**
-     * - Returns the repository resource list that current user has access to.
-    - Required OAuth scope: repository.Read
-     * @returns Successfully returned list of available repositories.
+     * @param args.select (optional) Limits the properties returned in the result.
+     * @returns Successfully returned the entry's records management properties.
      */
-    listRepositories(args: {}): Promise<RepositoryCollectionResponse>;
-}
-export declare class RepositoriesClient implements IRepositoriesClient {
-    private http;
-    private baseUrl;
-    protected jsonParseReviver: ((key: string, value: any) => any) | undefined;
-    constructor(baseUrl?: string, http?: {
-        fetch(url: RequestInfo, init?: RequestInit): Promise<Response>;
-    });
+    getEntryRecordsManagementProperties(args: {
+        repositoryId: string;
+        entryId: number;
+        select?: string | null | undefined;
+    }): Promise<RecordsManagementProperties>;
     /**
-     * Returns the repository resource list that current user has access to given the API server base URL. Only available in Laserfiche Self-Hosted.
-     * - Related: {@link IRepositoriesClient.listRepositories listRepositories}
-     * @param args.baseUrl API server base URL e.g., https://{APIServerName}/LFRepositoryAPI
-     * @returns A collection of respositories.
+     * @returns Successfully updated the entry's records management properties. Returned the updated properties.
      */
-    static listSelfHostedRepositories(args: {
-        baseUrl: string;
-    }): Promise<RepositoryCollectionResponse>;
+    updateEntryRecordsManagementProperties(args: {
+        repositoryId: string;
+        entryId: number;
+        request: UpdateRecordsManagementPropertiesRequest;
+    }): Promise<RecordsManagementProperties>;
     /**
-     * - Returns the repository resource list that current user has access to.
-    - Required OAuth scope: repository.Read
-     * @returns Successfully returned list of available repositories.
+     * @param args.eligibleFor (optional)
+     * @param args.select (optional) Limits the properties returned in the result.
+     * @returns Successfully returned the ids of the records eligible for the requested action.
      */
-    listRepositories(args: {}): Promise<RepositoryCollectionResponse>;
-    protected processListRepositories(response: Response): Promise<RepositoryCollectionResponse>;
-}
+    getEligibleRecords(args: {
+        repositoryId: string;
+        entryId: number;
+        eligibleFor?: EligibleRecordsAction | null | undefined;
+        select?: string | null | undefined;
+    }): Promise<RecordEntryIdCollection>;
+    /**
+     * @param args.select (optional) Limits the properties returned in the result.
+     * @returns Successfully returned the ids of the independent records under the record folder.
+     */
+    getIndependentRecords(args: {
+        repositoryId: string;
+        entryId: number;
+        select?: string | null | undefined;
+    }): Promise<RecordEntryIdCollection>;
+    /**
+     * @param args.select (optional) Limits the properties returned in the result.
+     * @returns Successfully returned the record folder's alternate-retention trigger events.
+     */
+    getAltRetentionEvents(args: {
+        repositoryId: string;
+        entryId: number;
+        select?: string | null | undefined;
+    }): Promise<AltRetentionEventCollection>;
+    /**
+     * @param args.select (optional) Limits the properties returned in the result.
+     * @returns Successfully returned the record series properties.
+     */
+    getRecordSeriesProperties(args: {
+        repositoryId: string;
+        entryId: number;
+        select?: string | null | undefined;
+    }): Promise<RecordSeriesProperties>;
+    /**
+     * @returns Successfully updated the record series properties. Returned the updated properties.
+     */
+    updateRecordSeriesProperties(args: {
+        repositoryId: string;
+        entryId: number;
+        request: UpdateRecordSeriesPropertiesRequest;
+    }): Promise<RecordSeriesProperties>;
+    /**
+     * @returns Successfully set the record event date. Returned the updated records management properties.
+     */
+    setRecordEvent(args: {
+        repositoryId: string;
+        entryId: number;
+        request: SetRecordEventRequest;
+    }): Promise<RecordsManagementProperties>;
+    /**
+     * @returns Successfully removed the record event date. Returned the updated records management properties.
+     */
+    removeRecordEvent(args: {
+        repositoryId: string;
+        entryId: number;
+        request: RemoveRecordEventRequest;
+    }): Promise<RecordsManagementProperties>;
+    /**
+     * - A record series provides cascading retention defaults for the file plan beneath it.
+    - The parent must be the file-plan root or another record series; creating one under a normal folder is rejected.
+    - Deleting a record series uses the existing Delete Entry endpoint (a record series is an entry).
+    - Required OAuth scope: repository.Write
+     * @param args.repositoryId The requested repository ID.
+     * @param args.parentEntryId The parent the record series is created under. A record series belongs to the record file plan, so the parent must be the repository's file-plan root or an existing record series — it cannot be a normal folder (the server returns an error if it is).
+     * @param args.request The new record series' name and code.
+     * @returns Successfully created the record series. Returned the created entry.
+     */
+    createRecordSeries(args: {
+        repositoryId: string;
+        parentEntryId: number;
+        request: CreateRecordSeriesRequest;
+    }): Promise<Entry>;
+}
+export declare class RecordsManagementClient implements IRecordsManagementClient {
+    private http;
+    private baseUrl;
+    protected jsonParseReviver: ((key: string, value: any) => any) | undefined;
+    constructor(baseUrl?: string, http?: {
+        fetch(url: RequestInfo, init?: RequestInit): Promise<Response>;
+    });
+    /**
+     * @param args.select (optional) Limits the properties returned in the result.
+     * @returns Successfully returned the entry's records management properties.
+     */
+    getEntryRecordsManagementProperties(args: {
+        repositoryId: string;
+        entryId: number;
+        select?: string | null | undefined;
+    }): Promise<RecordsManagementProperties>;
+    protected processGetEntryRecordsManagementProperties(response: Response): Promise<RecordsManagementProperties>;
+    /**
+     * @returns Successfully updated the entry's records management properties. Returned the updated properties.
+     */
+    updateEntryRecordsManagementProperties(args: {
+        repositoryId: string;
+        entryId: number;
+        request: UpdateRecordsManagementPropertiesRequest;
+    }): Promise<RecordsManagementProperties>;
+    protected processUpdateEntryRecordsManagementProperties(response: Response): Promise<RecordsManagementProperties>;
+    /**
+     * @param args.eligibleFor (optional)
+     * @param args.select (optional) Limits the properties returned in the result.
+     * @returns Successfully returned the ids of the records eligible for the requested action.
+     */
+    getEligibleRecords(args: {
+        repositoryId: string;
+        entryId: number;
+        eligibleFor?: EligibleRecordsAction | null | undefined;
+        select?: string | null | undefined;
+    }): Promise<RecordEntryIdCollection>;
+    protected processGetEligibleRecords(response: Response): Promise<RecordEntryIdCollection>;
+    /**
+     * @param args.select (optional) Limits the properties returned in the result.
+     * @returns Successfully returned the ids of the independent records under the record folder.
+     */
+    getIndependentRecords(args: {
+        repositoryId: string;
+        entryId: number;
+        select?: string | null | undefined;
+    }): Promise<RecordEntryIdCollection>;
+    protected processGetIndependentRecords(response: Response): Promise<RecordEntryIdCollection>;
+    /**
+     * @param args.select (optional) Limits the properties returned in the result.
+     * @returns Successfully returned the record folder's alternate-retention trigger events.
+     */
+    getAltRetentionEvents(args: {
+        repositoryId: string;
+        entryId: number;
+        select?: string | null | undefined;
+    }): Promise<AltRetentionEventCollection>;
+    protected processGetAltRetentionEvents(response: Response): Promise<AltRetentionEventCollection>;
+    /**
+     * @param args.select (optional) Limits the properties returned in the result.
+     * @returns Successfully returned the record series properties.
+     */
+    getRecordSeriesProperties(args: {
+        repositoryId: string;
+        entryId: number;
+        select?: string | null | undefined;
+    }): Promise<RecordSeriesProperties>;
+    protected processGetRecordSeriesProperties(response: Response): Promise<RecordSeriesProperties>;
+    /**
+     * @returns Successfully updated the record series properties. Returned the updated properties.
+     */
+    updateRecordSeriesProperties(args: {
+        repositoryId: string;
+        entryId: number;
+        request: UpdateRecordSeriesPropertiesRequest;
+    }): Promise<RecordSeriesProperties>;
+    protected processUpdateRecordSeriesProperties(response: Response): Promise<RecordSeriesProperties>;
+    /**
+     * @returns Successfully set the record event date. Returned the updated records management properties.
+     */
+    setRecordEvent(args: {
+        repositoryId: string;
+        entryId: number;
+        request: SetRecordEventRequest;
+    }): Promise<RecordsManagementProperties>;
+    protected processSetRecordEvent(response: Response): Promise<RecordsManagementProperties>;
+    /**
+     * @returns Successfully removed the record event date. Returned the updated records management properties.
+     */
+    removeRecordEvent(args: {
+        repositoryId: string;
+        entryId: number;
+        request: RemoveRecordEventRequest;
+    }): Promise<RecordsManagementProperties>;
+    protected processRemoveRecordEvent(response: Response): Promise<RecordsManagementProperties>;
+    /**
+     * - A record series provides cascading retention defaults for the file plan beneath it.
+    - The parent must be the file-plan root or another record series; creating one under a normal folder is rejected.
+    - Deleting a record series uses the existing Delete Entry endpoint (a record series is an entry).
+    - Required OAuth scope: repository.Write
+     * @param args.repositoryId The requested repository ID.
+     * @param args.parentEntryId The parent the record series is created under. A record series belongs to the record file plan, so the parent must be the repository's file-plan root or an existing record series — it cannot be a normal folder (the server returns an error if it is).
+     * @param args.request The new record series' name and code.
+     * @returns Successfully created the record series. Returned the created entry.
+     */
+    createRecordSeries(args: {
+        repositoryId: string;
+        parentEntryId: number;
+        request: CreateRecordSeriesRequest;
+    }): Promise<Entry>;
+    protected processCreateRecordSeries(response: Response): Promise<Entry>;
+}
+export interface IRepositoriesClient {
+    /**
+     * - Returns the repository resource list that current user has access to.
+    - Required OAuth scope: repository.Read
+     * @returns Successfully returned list of available repositories.
+     */
+    listRepositories(args: {}): Promise<RepositoryCollectionResponse>;
+}
+export declare class RepositoriesClient implements IRepositoriesClient {
+    private http;
+    private baseUrl;
+    protected jsonParseReviver: ((key: string, value: any) => any) | undefined;
+    constructor(baseUrl?: string, http?: {
+        fetch(url: RequestInfo, init?: RequestInit): Promise<Response>;
+    });
+    /**
+     * Returns the repository resource list that current user has access to given the API server base URL. Only available in Laserfiche Self-Hosted.
+     * - Related: {@link IRepositoriesClient.listRepositories listRepositories}
+     * @param args.baseUrl API server base URL e.g., https://{APIServerName}/LFRepositoryAPI
+     * @returns A collection of respositories.
+     */
+    static listSelfHostedRepositories(args: {
+        baseUrl: string;
+    }): Promise<RepositoryCollectionResponse>;
+    /**
+     * - Returns the repository resource list that current user has access to.
+    - Required OAuth scope: repository.Read
+     * @returns Successfully returned list of available repositories.
+     */
+    listRepositories(args: {}): Promise<RepositoryCollectionResponse>;
+    protected processListRepositories(response: Response): Promise<RepositoryCollectionResponse>;
+}
 export interface ISearchesClient {
     /**
      * - Runs a search operation on the repository.
@@ -2916,6 +3979,170 @@ export declare class SimpleSearchesClient implements ISimpleSearchesClient {
     }): Promise<EntryCollectionResponse>;
     protected processSearchEntry(response: Response): Promise<EntryCollectionResponse>;
 }
+export interface IStampsClient {
+    /**
+     * - Use `scope` to select public, personal, or all stamps. The image bytes are not included; fetch them from the stamp's Image sub-resource.
+    - Required OAuth scope: repository.Read
+     * @param args.scope (optional)
+     * @param args.select (optional) Limits the properties returned in the result.
+     * @param args.orderby (optional) Specifies the order in which items are returned. The maximum number of expressions is 5.
+     * @param args.count (optional) Indicates whether the total count of items within a collection are returned in the result.
+     * @returns Successfully returned the repository's stamps.
+     */
+    listStamps(args: {
+        repositoryId: string;
+        scope?: StampScope | undefined;
+        select?: string | null | undefined;
+        orderby?: string | null | undefined;
+        count?: boolean | undefined;
+    }): Promise<Stamp[]>;
+    /**
+     * - Send the image as multipart/form-data under the form field "file", with "name" and "isPublic" form fields. The service converts the image to the repository's internal format.
+    - Creating a public stamp requires the stamp-management privilege; personal stamps require no special privilege.
+    - Required OAuth scope: repository.Write
+     * @param args.name (optional)
+     * @param args.isPublic (optional)
+     * @param args.file (optional) The image file to upload. See https://doc.laserfiche.com/ for supported image file formats.
+     * @returns Successfully created the stamp. Returned the created stamp.
+     */
+    createStamp(args: {
+        repositoryId: string;
+        name?: string | null | undefined;
+        isPublic?: boolean | undefined;
+        file?: FileParameter | undefined;
+    }): Promise<Stamp>;
+    /**
+     * - Required OAuth scope: repository.Read
+     * @param args.select (optional) Limits the properties returned in the result.
+     * @returns Successfully returned the stamp's metadata.
+     */
+    getStamp(args: {
+        repositoryId: string;
+        stampId: number;
+        select?: string | null | undefined;
+    }): Promise<Stamp>;
+    /**
+     * - Managing a public stamp requires the stamp-management privilege.
+    - Required OAuth scope: repository.Write
+     * @returns Successfully updated the stamp. Returned the updated stamp.
+     */
+    updateStamp(args: {
+        repositoryId: string;
+        stampId: number;
+        request: UpdateStampRequest;
+    }): Promise<Stamp>;
+    /**
+     * - Deleting a public stamp requires the stamp-management privilege.
+    - Required OAuth scope: repository.Write
+     * @returns Successfully deleted the stamp.
+     */
+    deleteStamp(args: {
+        repositoryId: string;
+        stampId: number;
+    }): Promise<void>;
+    /**
+     * - Only public (common) stamps are returned. Personal stamps are not served by this endpoint and return 404.
+    - An optional `color` (#RRGGBB) recolors the image: black pixels become the color, white becomes transparent.
+    - Required OAuth scope: repository.Read
+     * @param args.color (optional)
+     * @param args.select (optional) Limits the properties returned in the result.
+     * @returns Successfully returned the stamp image as a PNG.
+     */
+    getStampImage(args: {
+        repositoryId: string;
+        stampId: number;
+        color?: string | null | undefined;
+        select?: string | null | undefined;
+    }): Promise<FileResponse>;
+}
+export declare class StampsClient implements IStampsClient {
+    private http;
+    private baseUrl;
+    protected jsonParseReviver: ((key: string, value: any) => any) | undefined;
+    constructor(baseUrl?: string, http?: {
+        fetch(url: RequestInfo, init?: RequestInit): Promise<Response>;
+    });
+    /**
+     * - Use `scope` to select public, personal, or all stamps. The image bytes are not included; fetch them from the stamp's Image sub-resource.
+    - Required OAuth scope: repository.Read
+     * @param args.scope (optional)
+     * @param args.select (optional) Limits the properties returned in the result.
+     * @param args.orderby (optional) Specifies the order in which items are returned. The maximum number of expressions is 5.
+     * @param args.count (optional) Indicates whether the total count of items within a collection are returned in the result.
+     * @returns Successfully returned the repository's stamps.
+     */
+    listStamps(args: {
+        repositoryId: string;
+        scope?: StampScope | undefined;
+        select?: string | null | undefined;
+        orderby?: string | null | undefined;
+        count?: boolean | undefined;
+    }): Promise<Stamp[]>;
+    protected processListStamps(response: Response): Promise<Stamp[]>;
+    /**
+     * - Send the image as multipart/form-data under the form field "file", with "name" and "isPublic" form fields. The service converts the image to the repository's internal format.
+    - Creating a public stamp requires the stamp-management privilege; personal stamps require no special privilege.
+    - Required OAuth scope: repository.Write
+     * @param args.name (optional)
+     * @param args.isPublic (optional)
+     * @param args.file (optional) The image file to upload. See https://doc.laserfiche.com/ for supported image file formats.
+     * @returns Successfully created the stamp. Returned the created stamp.
+     */
+    createStamp(args: {
+        repositoryId: string;
+        name?: string | null | undefined;
+        isPublic?: boolean | undefined;
+        file?: FileParameter | undefined;
+    }): Promise<Stamp>;
+    protected processCreateStamp(response: Response): Promise<Stamp>;
+    /**
+     * - Required OAuth scope: repository.Read
+     * @param args.select (optional) Limits the properties returned in the result.
+     * @returns Successfully returned the stamp's metadata.
+     */
+    getStamp(args: {
+        repositoryId: string;
+        stampId: number;
+        select?: string | null | undefined;
+    }): Promise<Stamp>;
+    protected processGetStamp(response: Response): Promise<Stamp>;
+    /**
+     * - Managing a public stamp requires the stamp-management privilege.
+    - Required OAuth scope: repository.Write
+     * @returns Successfully updated the stamp. Returned the updated stamp.
+     */
+    updateStamp(args: {
+        repositoryId: string;
+        stampId: number;
+        request: UpdateStampRequest;
+    }): Promise<Stamp>;
+    protected processUpdateStamp(response: Response): Promise<Stamp>;
+    /**
+     * - Deleting a public stamp requires the stamp-management privilege.
+    - Required OAuth scope: repository.Write
+     * @returns Successfully deleted the stamp.
+     */
+    deleteStamp(args: {
+        repositoryId: string;
+        stampId: number;
+    }): Promise<void>;
+    protected processDeleteStamp(response: Response): Promise<void>;
+    /**
+     * - Only public (common) stamps are returned. Personal stamps are not served by this endpoint and return 404.
+    - An optional `color` (#RRGGBB) recolors the image: black pixels become the color, white becomes transparent.
+    - Required OAuth scope: repository.Read
+     * @param args.color (optional)
+     * @param args.select (optional) Limits the properties returned in the result.
+     * @returns Successfully returned the stamp image as a PNG.
+     */
+    getStampImage(args: {
+        repositoryId: string;
+        stampId: number;
+        color?: string | null | undefined;
+        select?: string | null | undefined;
+    }): Promise<FileResponse>;
+    protected processGetStampImage(response: Response): Promise<FileResponse>;
+}
 export interface ITagDefinitionsClient {
     /**
      * - Returns all tag definitions in the repository.
@@ -3781,51 +5008,1190 @@ export declare class TemplateDefinitionsClient implements ITemplateDefinitionsCl
     }): Promise<void>;
     protected processMoveTemplateField(response: Response): Promise<void>;
 }
-/** Response containing a collection of Attribute. */
-export declare class AttributeCollectionResponse implements IAttributeCollectionResponse {
-    /** A URL to retrieve the next page of the requested collection. */
-    odataNextLink?: string | undefined;
-    /** The total count of items within a collection. */
-    odataCount?: number | undefined;
-    value?: Attribute[] | undefined;
-    constructor(data?: IAttributeCollectionResponse);
-    init(_data?: any): void;
-    static fromJS(data: any): AttributeCollectionResponse;
-    toJSON(data?: any): any;
-}
-/** Response containing a collection of Attribute. */
-export interface IAttributeCollectionResponse {
-    /** A URL to retrieve the next page of the requested collection. */
-    odataNextLink?: string | undefined;
-    /** The total count of items within a collection. */
-    odataCount?: number | undefined;
-    value?: Attribute[] | undefined;
-}
-/** Represents a trustee attribute. */
-export declare class Attribute implements IAttribute {
-    /** The attribute key. */
-    key?: string | undefined;
-    /** The attribute value. */
-    value?: string | undefined;
-    constructor(data?: IAttribute);
-    init(_data?: any): void;
-    static fromJS(data: any): Attribute;
-    toJSON(data?: any): any;
-}
-/** Represents a trustee attribute. */
-export interface IAttribute {
-    /** The attribute key. */
-    key?: string | undefined;
-    /** The attribute value. */
-    value?: string | undefined;
-}
-/** A machine-readable format for specifying errors in HTTP API responses, per RFC 9457 (https://www.rfc-editor.org/rfc/rfc9457). Supersedes RFC 7807. */
-export declare class ProblemDetails implements IProblemDetails {
-    /** The problem type. */
-    type?: string | undefined;
-    /** A short, human-readable summary of the problem type. */
-    title?: string | undefined;
-    /** The HTTP status code. */
+export interface IUserAreasClient {
+    /**
+     * - Returns the documents in the authenticated user's Recent Documents list, most-recently-accessed first.
+    - The list is per-user and maintained by the Laserfiche apps; this endpoint is read-only and reflects the persisted recent-documents area, so it may briefly lag an app's in-memory recent view.
+    - If the user has no recent documents, an empty collection is returned.
+    - Required OAuth scope: repository.Read
+     * @param args.repositoryId The requested repository ID.
+     * @param args.documentLimit (optional) An optional maximum number of recent documents to return. When omitted, all entries in the user's recent-documents list are returned. A value of 0 returns an empty list; negative values are rejected.
+     * @returns Successfully returned the user's recently accessed documents.
+     */
+    getRecentDocuments(args: {
+        repositoryId: string;
+        documentLimit?: number | null | undefined;
+    }): Promise<UserAreaEntry[]>;
+    /**
+     * - Returns the folders in the authenticated user's Recent Folders list, most-recently-accessed first.
+    - The list is per-user and maintained by the Laserfiche apps; this endpoint is read-only.
+    - If the user has no recent folders, an empty collection is returned.
+    - Required OAuth scope: repository.Read
+     * @param args.repositoryId The requested repository ID.
+     * @returns Successfully returned the user's recently accessed folders.
+     */
+    getRecentFolders(args: {
+        repositoryId: string;
+    }): Promise<UserAreaEntry[]>;
+    /**
+     * - Returns the entries in the authenticated user's Starred list.
+    - The list is per-user; if the user has starred nothing, an empty collection is returned.
+    - Required OAuth scope: repository.Read
+     * @param args.repositoryId The requested repository ID.
+     * @returns Successfully returned the user's starred entries.
+     */
+    getStarredEntries(args: {
+        repositoryId: string;
+    }): Promise<UserAreaEntry[]>;
+    /**
+     * - Adds the supplied entries to the authenticated user's Starred list and returns the updated list.
+    - Creates the user's Starred area on first use.
+    - Required OAuth scope: repository.Write
+     * @param args.repositoryId The requested repository ID.
+     * @param args.request The entry IDs to star. Already-starred entries are left unchanged (idempotent).
+     * @returns Successfully starred the requested entries. Returns the updated list of starred entries.
+     */
+    starEntries(args: {
+        repositoryId: string;
+        request: StarEntriesRequest;
+    }): Promise<UserAreaEntry[]>;
+    /**
+     * - Removes the supplied entries from the authenticated user's Starred list and returns the updated list.
+    - Required OAuth scope: repository.Write
+     * @param args.repositoryId The requested repository ID.
+     * @param args.request The entry IDs to unstar. Entries that are not starred are ignored (idempotent).
+     * @returns Successfully unstarred the requested entries. Returns the updated list of starred entries.
+     */
+    unstarEntries(args: {
+        repositoryId: string;
+        request: StarEntriesRequest;
+    }): Promise<UserAreaEntry[]>;
+    /**
+     * - Returns the authenticated user's personal collections, each with its display name and member entry IDs.
+    - Required OAuth scope: repository.Read
+     * @param args.repositoryId The requested repository ID.
+     * @returns Successfully returned the user's personal collections.
+     */
+    getPersonalCollections(args: {
+        repositoryId: string;
+    }): Promise<PersonalCollection[]>;
+    /**
+     * - Creates a personal collection with the supplied display name. Names must be unique (case-insensitive),
+      fewer than 256 characters, and must not use a reserved name. A user may have at most 50 collections.
+    - Required OAuth scope: repository.Write
+     * @param args.repositoryId The requested repository ID.
+     * @param args.request The new collection's display name.
+     * @returns Successfully created the personal collection.
+     */
+    createPersonalCollection(args: {
+        repositoryId: string;
+        request: CreatePersonalCollectionRequest;
+    }): Promise<PersonalCollection>;
+    /**
+     * - Returns the requested personal collection with its display name and member entry IDs.
+    - Required OAuth scope: repository.Read
+     * @param args.repositoryId The requested repository ID.
+     * @param args.collectionId The ID of the personal collection.
+     * @param args.select (optional) Limits the properties returned in the result.
+     * @returns Successfully returned the requested personal collection.
+     */
+    getPersonalCollection(args: {
+        repositoryId: string;
+        collectionId: string;
+        select?: string | null | undefined;
+    }): Promise<PersonalCollection>;
+    /**
+     * - Changes the collection's display name (the collection ID is unchanged). Same name constraints as creation.
+    - Required OAuth scope: repository.Write
+     * @param args.repositoryId The requested repository ID.
+     * @param args.collectionId The ID of the personal collection to rename.
+     * @param args.request The new display name.
+     * @returns Successfully renamed the personal collection.
+     */
+    renamePersonalCollection(args: {
+        repositoryId: string;
+        collectionId: string;
+        request: RenamePersonalCollectionRequest;
+    }): Promise<PersonalCollection>;
+    /**
+     * - Deletes the collection. Idempotent — deleting a non-existent collection succeeds.
+    - Required OAuth scope: repository.Write
+     * @param args.repositoryId The requested repository ID.
+     * @param args.collectionId The ID of the personal collection to delete.
+     * @returns Successfully deleted the personal collection.
+     */
+    deletePersonalCollection(args: {
+        repositoryId: string;
+        collectionId: string;
+    }): Promise<void>;
+    /**
+     * - Adds the supplied entries to the collection and returns the updated collection. Idempotent for entries already present.
+    - Required OAuth scope: repository.Write
+     * @param args.repositoryId The requested repository ID.
+     * @param args.collectionId The ID of the personal collection.
+     * @param args.request The entry IDs to add.
+     * @returns Successfully added the entries to the personal collection. Returns the updated collection.
+     */
+    addCollectionEntries(args: {
+        repositoryId: string;
+        collectionId: string;
+        request: EntryIdsRequest;
+    }): Promise<PersonalCollection>;
+    /**
+     * - Removes the supplied entries from the collection and returns the updated collection. Idempotent for entries not present.
+    - Required OAuth scope: repository.Write
+     * @param args.repositoryId The requested repository ID.
+     * @param args.collectionId The ID of the personal collection.
+     * @param args.request The entry IDs to remove.
+     * @returns Successfully removed the entries from the personal collection. Returns the updated collection.
+     */
+    removeCollectionEntries(args: {
+        repositoryId: string;
+        collectionId: string;
+        request: EntryIdsRequest;
+    }): Promise<PersonalCollection>;
+    /**
+     * - Returns the caller's generic user areas. Application-managed areas (Personal Collections, Starred,
+      Recent) are excluded from this surface.
+    - Required OAuth scope: repository.Read
+     * @param args.repositoryId The requested repository ID.
+     * @returns Successfully returned the user's user areas.
+     */
+    getUserAreas(args: {
+        repositoryId: string;
+    }): Promise<UserArea[]>;
+    /**
+     * - Creates a user area owned by the caller. Names reserved for application-managed areas are rejected.
+    - Required OAuth scope: repository.Write
+     * @param args.repositoryId The requested repository ID.
+     * @param args.request The new user area's name and optional comment/data.
+     * @returns Successfully created the user area.
+     */
+    createUserArea(args: {
+        repositoryId: string;
+        request: CreateUserAreaRequest;
+    }): Promise<UserArea>;
+    /**
+     * - Returns the requested user area. Application-managed areas are not accessible through this surface (404).
+    - Required OAuth scope: repository.Read
+     * @param args.repositoryId The requested repository ID.
+     * @param args.areaId The ID of the user area.
+     * @param args.select (optional) Limits the properties returned in the result.
+     * @returns Successfully returned the requested user area.
+     */
+    getUserArea(args: {
+        repositoryId: string;
+        areaId: number;
+        select?: string | null | undefined;
+    }): Promise<UserArea>;
+    /**
+     * - Updates the name, comment, and/or data of the user area. A renamed area cannot take a reserved name.
+    - Required OAuth scope: repository.Write
+     * @param args.repositoryId The requested repository ID.
+     * @param args.areaId The ID of the user area to update.
+     * @param args.request The properties to change. Null properties are left unchanged.
+     * @returns Successfully updated the user area.
+     */
+    updateUserArea(args: {
+        repositoryId: string;
+        areaId: number;
+        request: UpdateUserAreaRequest;
+    }): Promise<UserArea>;
+    /**
+     * - Deletes the user area. Application-managed areas cannot be deleted through this surface (404).
+    - Required OAuth scope: repository.Write
+     * @param args.repositoryId The requested repository ID.
+     * @param args.areaId The ID of the user area to delete.
+     * @returns Successfully deleted the user area.
+     */
+    deleteUserArea(args: {
+        repositoryId: string;
+        areaId: number;
+    }): Promise<void>;
+    /**
+     * - Returns the entries contained in the user area.
+    - Required OAuth scope: repository.Read
+     * @param args.repositoryId The requested repository ID.
+     * @param args.areaId The ID of the user area.
+     * @returns Successfully returned the user area's entries.
+     */
+    getUserAreaEntries(args: {
+        repositoryId: string;
+        areaId: number;
+    }): Promise<UserAreaEntry[]>;
+    /**
+     * - Adds the supplied entries to the user area and returns the updated entries. Idempotent for entries already present.
+    - Required OAuth scope: repository.Write
+     * @param args.repositoryId The requested repository ID.
+     * @param args.areaId The ID of the user area.
+     * @param args.request The entry IDs to add.
+     * @returns Successfully added the entries to the user area. Returns the updated entries.
+     */
+    addUserAreaEntries(args: {
+        repositoryId: string;
+        areaId: number;
+        request: EntryIdsRequest;
+    }): Promise<UserAreaEntry[]>;
+    /**
+     * - Removes the supplied entries from the user area and returns the updated entries. Idempotent for entries not present.
+    - Required OAuth scope: repository.Write
+     * @param args.repositoryId The requested repository ID.
+     * @param args.areaId The ID of the user area.
+     * @param args.request The entry IDs to remove.
+     * @returns Successfully removed the entries from the user area. Returns the updated entries.
+     */
+    removeUserAreaEntries(args: {
+        repositoryId: string;
+        areaId: number;
+        request: EntryIdsRequest;
+    }): Promise<UserAreaEntry[]>;
+}
+export declare class UserAreasClient implements IUserAreasClient {
+    private http;
+    private baseUrl;
+    protected jsonParseReviver: ((key: string, value: any) => any) | undefined;
+    constructor(baseUrl?: string, http?: {
+        fetch(url: RequestInfo, init?: RequestInit): Promise<Response>;
+    });
+    /**
+     * - Returns the documents in the authenticated user's Recent Documents list, most-recently-accessed first.
+    - The list is per-user and maintained by the Laserfiche apps; this endpoint is read-only and reflects the persisted recent-documents area, so it may briefly lag an app's in-memory recent view.
+    - If the user has no recent documents, an empty collection is returned.
+    - Required OAuth scope: repository.Read
+     * @param args.repositoryId The requested repository ID.
+     * @param args.documentLimit (optional) An optional maximum number of recent documents to return. When omitted, all entries in the user's recent-documents list are returned. A value of 0 returns an empty list; negative values are rejected.
+     * @returns Successfully returned the user's recently accessed documents.
+     */
+    getRecentDocuments(args: {
+        repositoryId: string;
+        documentLimit?: number | null | undefined;
+    }): Promise<UserAreaEntry[]>;
+    protected processGetRecentDocuments(response: Response): Promise<UserAreaEntry[]>;
+    /**
+     * - Returns the folders in the authenticated user's Recent Folders list, most-recently-accessed first.
+    - The list is per-user and maintained by the Laserfiche apps; this endpoint is read-only.
+    - If the user has no recent folders, an empty collection is returned.
+    - Required OAuth scope: repository.Read
+     * @param args.repositoryId The requested repository ID.
+     * @returns Successfully returned the user's recently accessed folders.
+     */
+    getRecentFolders(args: {
+        repositoryId: string;
+    }): Promise<UserAreaEntry[]>;
+    protected processGetRecentFolders(response: Response): Promise<UserAreaEntry[]>;
+    /**
+     * - Returns the entries in the authenticated user's Starred list.
+    - The list is per-user; if the user has starred nothing, an empty collection is returned.
+    - Required OAuth scope: repository.Read
+     * @param args.repositoryId The requested repository ID.
+     * @returns Successfully returned the user's starred entries.
+     */
+    getStarredEntries(args: {
+        repositoryId: string;
+    }): Promise<UserAreaEntry[]>;
+    protected processGetStarredEntries(response: Response): Promise<UserAreaEntry[]>;
+    /**
+     * - Adds the supplied entries to the authenticated user's Starred list and returns the updated list.
+    - Creates the user's Starred area on first use.
+    - Required OAuth scope: repository.Write
+     * @param args.repositoryId The requested repository ID.
+     * @param args.request The entry IDs to star. Already-starred entries are left unchanged (idempotent).
+     * @returns Successfully starred the requested entries. Returns the updated list of starred entries.
+     */
+    starEntries(args: {
+        repositoryId: string;
+        request: StarEntriesRequest;
+    }): Promise<UserAreaEntry[]>;
+    protected processStarEntries(response: Response): Promise<UserAreaEntry[]>;
+    /**
+     * - Removes the supplied entries from the authenticated user's Starred list and returns the updated list.
+    - Required OAuth scope: repository.Write
+     * @param args.repositoryId The requested repository ID.
+     * @param args.request The entry IDs to unstar. Entries that are not starred are ignored (idempotent).
+     * @returns Successfully unstarred the requested entries. Returns the updated list of starred entries.
+     */
+    unstarEntries(args: {
+        repositoryId: string;
+        request: StarEntriesRequest;
+    }): Promise<UserAreaEntry[]>;
+    protected processUnstarEntries(response: Response): Promise<UserAreaEntry[]>;
+    /**
+     * - Returns the authenticated user's personal collections, each with its display name and member entry IDs.
+    - Required OAuth scope: repository.Read
+     * @param args.repositoryId The requested repository ID.
+     * @returns Successfully returned the user's personal collections.
+     */
+    getPersonalCollections(args: {
+        repositoryId: string;
+    }): Promise<PersonalCollection[]>;
+    protected processGetPersonalCollections(response: Response): Promise<PersonalCollection[]>;
+    /**
+     * - Creates a personal collection with the supplied display name. Names must be unique (case-insensitive),
+      fewer than 256 characters, and must not use a reserved name. A user may have at most 50 collections.
+    - Required OAuth scope: repository.Write
+     * @param args.repositoryId The requested repository ID.
+     * @param args.request The new collection's display name.
+     * @returns Successfully created the personal collection.
+     */
+    createPersonalCollection(args: {
+        repositoryId: string;
+        request: CreatePersonalCollectionRequest;
+    }): Promise<PersonalCollection>;
+    protected processCreatePersonalCollection(response: Response): Promise<PersonalCollection>;
+    /**
+     * - Returns the requested personal collection with its display name and member entry IDs.
+    - Required OAuth scope: repository.Read
+     * @param args.repositoryId The requested repository ID.
+     * @param args.collectionId The ID of the personal collection.
+     * @param args.select (optional) Limits the properties returned in the result.
+     * @returns Successfully returned the requested personal collection.
+     */
+    getPersonalCollection(args: {
+        repositoryId: string;
+        collectionId: string;
+        select?: string | null | undefined;
+    }): Promise<PersonalCollection>;
+    protected processGetPersonalCollection(response: Response): Promise<PersonalCollection>;
+    /**
+     * - Changes the collection's display name (the collection ID is unchanged). Same name constraints as creation.
+    - Required OAuth scope: repository.Write
+     * @param args.repositoryId The requested repository ID.
+     * @param args.collectionId The ID of the personal collection to rename.
+     * @param args.request The new display name.
+     * @returns Successfully renamed the personal collection.
+     */
+    renamePersonalCollection(args: {
+        repositoryId: string;
+        collectionId: string;
+        request: RenamePersonalCollectionRequest;
+    }): Promise<PersonalCollection>;
+    protected processRenamePersonalCollection(response: Response): Promise<PersonalCollection>;
+    /**
+     * - Deletes the collection. Idempotent — deleting a non-existent collection succeeds.
+    - Required OAuth scope: repository.Write
+     * @param args.repositoryId The requested repository ID.
+     * @param args.collectionId The ID of the personal collection to delete.
+     * @returns Successfully deleted the personal collection.
+     */
+    deletePersonalCollection(args: {
+        repositoryId: string;
+        collectionId: string;
+    }): Promise<void>;
+    protected processDeletePersonalCollection(response: Response): Promise<void>;
+    /**
+     * - Adds the supplied entries to the collection and returns the updated collection. Idempotent for entries already present.
+    - Required OAuth scope: repository.Write
+     * @param args.repositoryId The requested repository ID.
+     * @param args.collectionId The ID of the personal collection.
+     * @param args.request The entry IDs to add.
+     * @returns Successfully added the entries to the personal collection. Returns the updated collection.
+     */
+    addCollectionEntries(args: {
+        repositoryId: string;
+        collectionId: string;
+        request: EntryIdsRequest;
+    }): Promise<PersonalCollection>;
+    protected processAddCollectionEntries(response: Response): Promise<PersonalCollection>;
+    /**
+     * - Removes the supplied entries from the collection and returns the updated collection. Idempotent for entries not present.
+    - Required OAuth scope: repository.Write
+     * @param args.repositoryId The requested repository ID.
+     * @param args.collectionId The ID of the personal collection.
+     * @param args.request The entry IDs to remove.
+     * @returns Successfully removed the entries from the personal collection. Returns the updated collection.
+     */
+    removeCollectionEntries(args: {
+        repositoryId: string;
+        collectionId: string;
+        request: EntryIdsRequest;
+    }): Promise<PersonalCollection>;
+    protected processRemoveCollectionEntries(response: Response): Promise<PersonalCollection>;
+    /**
+     * - Returns the caller's generic user areas. Application-managed areas (Personal Collections, Starred,
+      Recent) are excluded from this surface.
+    - Required OAuth scope: repository.Read
+     * @param args.repositoryId The requested repository ID.
+     * @returns Successfully returned the user's user areas.
+     */
+    getUserAreas(args: {
+        repositoryId: string;
+    }): Promise<UserArea[]>;
+    protected processGetUserAreas(response: Response): Promise<UserArea[]>;
+    /**
+     * - Creates a user area owned by the caller. Names reserved for application-managed areas are rejected.
+    - Required OAuth scope: repository.Write
+     * @param args.repositoryId The requested repository ID.
+     * @param args.request The new user area's name and optional comment/data.
+     * @returns Successfully created the user area.
+     */
+    createUserArea(args: {
+        repositoryId: string;
+        request: CreateUserAreaRequest;
+    }): Promise<UserArea>;
+    protected processCreateUserArea(response: Response): Promise<UserArea>;
+    /**
+     * - Returns the requested user area. Application-managed areas are not accessible through this surface (404).
+    - Required OAuth scope: repository.Read
+     * @param args.repositoryId The requested repository ID.
+     * @param args.areaId The ID of the user area.
+     * @param args.select (optional) Limits the properties returned in the result.
+     * @returns Successfully returned the requested user area.
+     */
+    getUserArea(args: {
+        repositoryId: string;
+        areaId: number;
+        select?: string | null | undefined;
+    }): Promise<UserArea>;
+    protected processGetUserArea(response: Response): Promise<UserArea>;
+    /**
+     * - Updates the name, comment, and/or data of the user area. A renamed area cannot take a reserved name.
+    - Required OAuth scope: repository.Write
+     * @param args.repositoryId The requested repository ID.
+     * @param args.areaId The ID of the user area to update.
+     * @param args.request The properties to change. Null properties are left unchanged.
+     * @returns Successfully updated the user area.
+     */
+    updateUserArea(args: {
+        repositoryId: string;
+        areaId: number;
+        request: UpdateUserAreaRequest;
+    }): Promise<UserArea>;
+    protected processUpdateUserArea(response: Response): Promise<UserArea>;
+    /**
+     * - Deletes the user area. Application-managed areas cannot be deleted through this surface (404).
+    - Required OAuth scope: repository.Write
+     * @param args.repositoryId The requested repository ID.
+     * @param args.areaId The ID of the user area to delete.
+     * @returns Successfully deleted the user area.
+     */
+    deleteUserArea(args: {
+        repositoryId: string;
+        areaId: number;
+    }): Promise<void>;
+    protected processDeleteUserArea(response: Response): Promise<void>;
+    /**
+     * - Returns the entries contained in the user area.
+    - Required OAuth scope: repository.Read
+     * @param args.repositoryId The requested repository ID.
+     * @param args.areaId The ID of the user area.
+     * @returns Successfully returned the user area's entries.
+     */
+    getUserAreaEntries(args: {
+        repositoryId: string;
+        areaId: number;
+    }): Promise<UserAreaEntry[]>;
+    protected processGetUserAreaEntries(response: Response): Promise<UserAreaEntry[]>;
+    /**
+     * - Adds the supplied entries to the user area and returns the updated entries. Idempotent for entries already present.
+    - Required OAuth scope: repository.Write
+     * @param args.repositoryId The requested repository ID.
+     * @param args.areaId The ID of the user area.
+     * @param args.request The entry IDs to add.
+     * @returns Successfully added the entries to the user area. Returns the updated entries.
+     */
+    addUserAreaEntries(args: {
+        repositoryId: string;
+        areaId: number;
+        request: EntryIdsRequest;
+    }): Promise<UserAreaEntry[]>;
+    protected processAddUserAreaEntries(response: Response): Promise<UserAreaEntry[]>;
+    /**
+     * - Removes the supplied entries from the user area and returns the updated entries. Idempotent for entries not present.
+    - Required OAuth scope: repository.Write
+     * @param args.repositoryId The requested repository ID.
+     * @param args.areaId The ID of the user area.
+     * @param args.request The entry IDs to remove.
+     * @returns Successfully removed the entries from the user area. Returns the updated entries.
+     */
+    removeUserAreaEntries(args: {
+        repositoryId: string;
+        areaId: number;
+        request: EntryIdsRequest;
+    }): Promise<UserAreaEntry[]>;
+    protected processRemoveUserAreaEntries(response: Response): Promise<UserAreaEntry[]>;
+}
+export declare abstract class Annotation implements IAnnotation {
+    /** The identifier of the annotation, unique within its page. */
+    itemId?: number;
+    /** The ID of the document entry the annotation belongs to. */
+    entryId?: number;
+    /** The 1-based page number the annotation is on. */
+    pageNumber?: number;
+    /** The security identifier (SID) of the user that created the annotation. */
+    creator?: string | undefined;
+    /** The UTC time the annotation was created. */
+    createdTime?: Date;
+    /** The UTC time the annotation was last modified. */
+    lastModifiedTime?: Date;
+    /** A boolean indicating whether the annotation is read-only (for example, on an archived version). */
+    isReadOnly?: boolean;
+    /** A boolean indicating whether the annotation is protected so that only its creator can modify it. */
+    isProtected?: boolean;
+    /** Controls who can see the annotation. */
+    visibility?: AnnotationVisibility;
+    /** An optional comment on the annotation. */
+    comment?: string | undefined;
+    /** Optional application-defined custom data stored with the annotation. */
+    customData?: string | undefined;
+    /** The z-order of the annotation; higher values draw on top. */
+    zOrder?: number;
+    /** The ID of the redaction reason associated with the annotation, if any. */
+    reasonId?: number | undefined;
+    /** How the annotation participates in access control. */
+    accessType?: AnnotationAccessControlType;
+    protected _discriminator: string;
+    constructor(data?: IAnnotation);
+    init(_data?: any): void;
+    static fromJS(data: any): Annotation;
+    toJSON(data?: any): any;
+}
+export interface IAnnotation {
+    /** The identifier of the annotation, unique within its page. */
+    itemId?: number;
+    /** The ID of the document entry the annotation belongs to. */
+    entryId?: number;
+    /** The 1-based page number the annotation is on. */
+    pageNumber?: number;
+    /** The security identifier (SID) of the user that created the annotation. */
+    creator?: string | undefined;
+    /** The UTC time the annotation was created. */
+    createdTime?: Date;
+    /** The UTC time the annotation was last modified. */
+    lastModifiedTime?: Date;
+    /** A boolean indicating whether the annotation is read-only (for example, on an archived version). */
+    isReadOnly?: boolean;
+    /** A boolean indicating whether the annotation is protected so that only its creator can modify it. */
+    isProtected?: boolean;
+    /** Controls who can see the annotation. */
+    visibility?: AnnotationVisibility;
+    /** An optional comment on the annotation. */
+    comment?: string | undefined;
+    /** Optional application-defined custom data stored with the annotation. */
+    customData?: string | undefined;
+    /** The z-order of the annotation; higher values draw on top. */
+    zOrder?: number;
+    /** The ID of the redaction reason associated with the annotation, if any. */
+    reasonId?: number | undefined;
+    /** How the annotation participates in access control. */
+    accessType?: AnnotationAccessControlType;
+}
+/** The kind of a document annotation. Used as the discriminator for the polymorphic Annotation response. */
+export declare enum AnnotationType {
+    Highlight = "Highlight",
+    Redaction = "Redaction",
+    Strikeout = "Strikeout",
+    Underline = "Underline",
+    Note = "Note",
+    Attachment = "Attachment",
+    TextBox = "TextBox",
+    Bitmap = "Bitmap",
+    Line = "Line",
+    Rectangle = "Rectangle",
+    Polyline = "Polyline",
+    Callout = "Callout",
+    Stamp = "Stamp",
+    FreeHand = "FreeHand"
+}
+/** Controls who can see an annotation. */
+export declare enum AnnotationVisibility {
+    CreatorAndOwner = "CreatorAndOwner",
+    Standard = "Standard",
+    AllUsers = "AllUsers"
+}
+/** How an annotation participates in access control. */
+export declare enum AnnotationAccessControlType {
+    None = "None",
+    Allow = "Allow",
+    Deny = "Deny"
+}
+/** Highlights one or more regions of a page. */
+export declare class HighlightAnnotation extends Annotation implements IHighlightAnnotation {
+    /** The highlight color as an RGB hex string (for example, "#FFFF00"); null if transparent. */
+    color?: string | undefined;
+    /** The start offset of the linked text span, or -1 when not linked to text. */
+    textStart?: number;
+    /** The end offset of the linked text span, or -1 when not linked to text. */
+    textEnd?: number;
+    /** The rectangular regions covered by the highlight. */
+    rectangles?: AnnotationRectangle[] | undefined;
+    constructor(data?: IHighlightAnnotation);
+    init(_data?: any): void;
+    static fromJS(data: any): HighlightAnnotation;
+    toJSON(data?: any): any;
+}
+/** Highlights one or more regions of a page. */
+export interface IHighlightAnnotation extends IAnnotation {
+    /** The highlight color as an RGB hex string (for example, "#FFFF00"); null if transparent. */
+    color?: string | undefined;
+    /** The start offset of the linked text span, or -1 when not linked to text. */
+    textStart?: number;
+    /** The end offset of the linked text span, or -1 when not linked to text. */
+    textEnd?: number;
+    /** The rectangular regions covered by the highlight. */
+    rectangles?: AnnotationRectangle[] | undefined;
+}
+/** A rectangular region on a page, in image pixels from the top-left corner. */
+export declare class AnnotationRectangle implements IAnnotationRectangle {
+    /** The horizontal offset in pixels of the left edge of the rectangle. */
+    x?: number;
+    /** The vertical offset in pixels of the top edge of the rectangle. */
+    y?: number;
+    /** The width of the rectangle in pixels. */
+    width?: number;
+    /** The height of the rectangle in pixels. */
+    height?: number;
+    constructor(data?: IAnnotationRectangle);
+    init(_data?: any): void;
+    static fromJS(data: any): AnnotationRectangle;
+    toJSON(data?: any): any;
+}
+/** A rectangular region on a page, in image pixels from the top-left corner. */
+export interface IAnnotationRectangle {
+    /** The horizontal offset in pixels of the left edge of the rectangle. */
+    x?: number;
+    /** The vertical offset in pixels of the top edge of the rectangle. */
+    y?: number;
+    /** The width of the rectangle in pixels. */
+    width?: number;
+    /** The height of the rectangle in pixels. */
+    height?: number;
+}
+/** Obscures one or more regions of a page. Redactions are overlays; the underlying content is preserved and is only hidden from users without the right to see through redactions. */
+export declare class RedactionAnnotation extends Annotation implements IRedactionAnnotation {
+    /** A boolean indicating whether the region is whited out (true) rather than blacked out (false). */
+    isWhiteout?: boolean;
+    /** The start offset of the linked text span, or -1 when not linked to text. */
+    textStart?: number;
+    /** The end offset of the linked text span, or -1 when not linked to text. */
+    textEnd?: number;
+    /** The rectangular regions covered by the redaction. */
+    rectangles?: AnnotationRectangle[] | undefined;
+    constructor(data?: IRedactionAnnotation);
+    init(_data?: any): void;
+    static fromJS(data: any): RedactionAnnotation;
+    toJSON(data?: any): any;
+}
+/** Obscures one or more regions of a page. Redactions are overlays; the underlying content is preserved and is only hidden from users without the right to see through redactions. */
+export interface IRedactionAnnotation extends IAnnotation {
+    /** A boolean indicating whether the region is whited out (true) rather than blacked out (false). */
+    isWhiteout?: boolean;
+    /** The start offset of the linked text span, or -1 when not linked to text. */
+    textStart?: number;
+    /** The end offset of the linked text span, or -1 when not linked to text. */
+    textEnd?: number;
+    /** The rectangular regions covered by the redaction. */
+    rectangles?: AnnotationRectangle[] | undefined;
+}
+/** Strikes through one or more regions of a page. */
+export declare class StrikeoutAnnotation extends Annotation implements IStrikeoutAnnotation {
+    /** The strikeout color as an RGB hex string (for example, "#FF0000"); null if transparent. */
+    color?: string | undefined;
+    /** The reading direction of the struck-through text. */
+    direction?: TextDirection;
+    /** The start offset of the linked text span, or -1 when not linked to text. */
+    textStart?: number;
+    /** The end offset of the linked text span, or -1 when not linked to text. */
+    textEnd?: number;
+    /** The rectangular regions covered by the strikeout. */
+    rectangles?: AnnotationRectangle[] | undefined;
+    constructor(data?: IStrikeoutAnnotation);
+    init(_data?: any): void;
+    static fromJS(data: any): StrikeoutAnnotation;
+    toJSON(data?: any): any;
+}
+/** Strikes through one or more regions of a page. */
+export interface IStrikeoutAnnotation extends IAnnotation {
+    /** The strikeout color as an RGB hex string (for example, "#FF0000"); null if transparent. */
+    color?: string | undefined;
+    /** The reading direction of the struck-through text. */
+    direction?: TextDirection;
+    /** The start offset of the linked text span, or -1 when not linked to text. */
+    textStart?: number;
+    /** The end offset of the linked text span, or -1 when not linked to text. */
+    textEnd?: number;
+    /** The rectangular regions covered by the strikeout. */
+    rectangles?: AnnotationRectangle[] | undefined;
+}
+/** The reading direction of annotation text. */
+export declare enum TextDirection {
+    LeftToRight = "LeftToRight",
+    TopToBottom = "TopToBottom",
+    RightToLeft = "RightToLeft",
+    BottomToTop = "BottomToTop"
+}
+/** Underlines one or more regions of a page. */
+export declare class UnderlineAnnotation extends Annotation implements IUnderlineAnnotation {
+    /** The underline color as an RGB hex string (for example, "#FF0000"); null if transparent. */
+    color?: string | undefined;
+    /** The reading direction of the underlined text. */
+    direction?: TextDirection;
+    /** The start offset of the linked text span, or -1 when not linked to text. */
+    textStart?: number;
+    /** The end offset of the linked text span, or -1 when not linked to text. */
+    textEnd?: number;
+    /** The rectangular regions covered by the underline. */
+    rectangles?: AnnotationRectangle[] | undefined;
+    constructor(data?: IUnderlineAnnotation);
+    init(_data?: any): void;
+    static fromJS(data: any): UnderlineAnnotation;
+    toJSON(data?: any): any;
+}
+/** Underlines one or more regions of a page. */
+export interface IUnderlineAnnotation extends IAnnotation {
+    /** The underline color as an RGB hex string (for example, "#FF0000"); null if transparent. */
+    color?: string | undefined;
+    /** The reading direction of the underlined text. */
+    direction?: TextDirection;
+    /** The start offset of the linked text span, or -1 when not linked to text. */
+    textStart?: number;
+    /** The end offset of the linked text span, or -1 when not linked to text. */
+    textEnd?: number;
+    /** The rectangular regions covered by the underline. */
+    rectangles?: AnnotationRectangle[] | undefined;
+}
+/** A sticky note placed on a page. */
+export declare class NoteAnnotation extends Annotation implements INoteAnnotation {
+    /** The top-left position of the note on the page. */
+    position?: AnnotationPoint | undefined;
+    /** The background color of the note as an RGB hex string (for example, "#FFFF00"); null if transparent. */
+    color?: string | undefined;
+    /** The text content of the note. */
+    text?: string | undefined;
+    /** A boolean indicating whether the note keeps a revision history. */
+    keepHistory?: boolean;
+    constructor(data?: INoteAnnotation);
+    init(_data?: any): void;
+    static fromJS(data: any): NoteAnnotation;
+    toJSON(data?: any): any;
+}
+/** A sticky note placed on a page. */
+export interface INoteAnnotation extends IAnnotation {
+    /** The top-left position of the note on the page. */
+    position?: AnnotationPoint | undefined;
+    /** The background color of the note as an RGB hex string (for example, "#FFFF00"); null if transparent. */
+    color?: string | undefined;
+    /** The text content of the note. */
+    text?: string | undefined;
+    /** A boolean indicating whether the note keeps a revision history. */
+    keepHistory?: boolean;
+}
+/** A point on a page, in image pixels from the top-left corner. */
+export declare class AnnotationPoint implements IAnnotationPoint {
+    /** The horizontal offset in pixels from the left edge of the page. */
+    x?: number;
+    /** The vertical offset in pixels from the top edge of the page. */
+    y?: number;
+    constructor(data?: IAnnotationPoint);
+    init(_data?: any): void;
+    static fromJS(data: any): AnnotationPoint;
+    toJSON(data?: any): any;
+}
+/** A point on a page, in image pixels from the top-left corner. */
+export interface IAnnotationPoint {
+    /** The horizontal offset in pixels from the left edge of the page. */
+    x?: number;
+    /** The vertical offset in pixels from the top edge of the page. */
+    y?: number;
+}
+/** A file attached to a page. The attached file's bytes are retrieved through the attachment-content endpoint, not in the annotation response. */
+export declare class AttachmentAnnotation extends Annotation implements IAttachmentAnnotation {
+    /** The top-left position of the attachment icon on the page. */
+    position?: AnnotationPoint | undefined;
+    /** The original file name of the attachment. */
+    fileName?: string | undefined;
+    /** The MIME type of the attached file. */
+    mimeType?: string | undefined;
+    /** The size of the attached file in bytes. */
+    attachmentLength?: number;
+    constructor(data?: IAttachmentAnnotation);
+    init(_data?: any): void;
+    static fromJS(data: any): AttachmentAnnotation;
+    toJSON(data?: any): any;
+}
+/** A file attached to a page. The attached file's bytes are retrieved through the attachment-content endpoint, not in the annotation response. */
+export interface IAttachmentAnnotation extends IAnnotation {
+    /** The top-left position of the attachment icon on the page. */
+    position?: AnnotationPoint | undefined;
+    /** The original file name of the attachment. */
+    fileName?: string | undefined;
+    /** The MIME type of the attached file. */
+    mimeType?: string | undefined;
+    /** The size of the attached file in bytes. */
+    attachmentLength?: number;
+}
+/** A bordered text box drawn on a page. */
+export declare class TextBoxAnnotation extends Annotation implements ITextBoxAnnotation {
+    /** The bounding rectangle of the text box. */
+    coordinates?: AnnotationRectangle | undefined;
+    /** The fill color as an RGB hex string; null if not filled. */
+    fillColor?: string | undefined;
+    /** The border color as an RGB hex string; null if transparent. */
+    borderColor?: string | undefined;
+    /** The border stroke style. */
+    borderStyle?: LineStyle;
+    /** The border thickness in pixels. */
+    borderThickness?: number;
+    /** The opacity of the text box as a percentage (0-100). */
+    opacity?: number;
+    /** The text displayed in the box. */
+    text?: string | undefined;
+    /** The font size of the text in points. */
+    textSize?: number;
+    /** The reading direction of the text. */
+    direction?: TextDirection;
+    constructor(data?: ITextBoxAnnotation);
+    init(_data?: any): void;
+    static fromJS(data: any): TextBoxAnnotation;
+    toJSON(data?: any): any;
+}
+/** A bordered text box drawn on a page. */
+export interface ITextBoxAnnotation extends IAnnotation {
+    /** The bounding rectangle of the text box. */
+    coordinates?: AnnotationRectangle | undefined;
+    /** The fill color as an RGB hex string; null if not filled. */
+    fillColor?: string | undefined;
+    /** The border color as an RGB hex string; null if transparent. */
+    borderColor?: string | undefined;
+    /** The border stroke style. */
+    borderStyle?: LineStyle;
+    /** The border thickness in pixels. */
+    borderThickness?: number;
+    /** The opacity of the text box as a percentage (0-100). */
+    opacity?: number;
+    /** The text displayed in the box. */
+    text?: string | undefined;
+    /** The font size of the text in points. */
+    textSize?: number;
+    /** The reading direction of the text. */
+    direction?: TextDirection;
+}
+/** The stroke style of a line or border. */
+export declare enum LineStyle {
+    Solid = "Solid",
+    Dashed1 = "Dashed1",
+    Dashed2 = "Dashed2",
+    Dashed3 = "Dashed3",
+    Dashed4 = "Dashed4",
+    Dashed5 = "Dashed5",
+    Dashed6 = "Dashed6",
+    Cloud1 = "Cloud1",
+    Cloud2 = "Cloud2"
+}
+/** An image placed on a page. The image bytes are not included in the annotation response; they are uploaded and managed separately. */
+export declare class BitmapAnnotation extends Annotation implements IBitmapAnnotation {
+    /** The top-left position of the image on the page. */
+    position?: AnnotationPoint | undefined;
+    /** The rendered size of the image in pixels. */
+    size?: AnnotationSize | undefined;
+    /** The clockwise rotation of the image in degrees (0-359). */
+    rotation?: number;
+    /** The opacity of the image as a percentage (0-100). */
+    opacity?: number;
+    constructor(data?: IBitmapAnnotation);
+    init(_data?: any): void;
+    static fromJS(data: any): BitmapAnnotation;
+    toJSON(data?: any): any;
+}
+/** An image placed on a page. The image bytes are not included in the annotation response; they are uploaded and managed separately. */
+export interface IBitmapAnnotation extends IAnnotation {
+    /** The top-left position of the image on the page. */
+    position?: AnnotationPoint | undefined;
+    /** The rendered size of the image in pixels. */
+    size?: AnnotationSize | undefined;
+    /** The clockwise rotation of the image in degrees (0-359). */
+    rotation?: number;
+    /** The opacity of the image as a percentage (0-100). */
+    opacity?: number;
+}
+/** A size in image pixels. */
+export declare class AnnotationSize implements IAnnotationSize {
+    /** The width in pixels. */
+    width?: number;
+    /** The height in pixels. */
+    height?: number;
+    constructor(data?: IAnnotationSize);
+    init(_data?: any): void;
+    static fromJS(data: any): AnnotationSize;
+    toJSON(data?: any): any;
+}
+/** A size in image pixels. */
+export interface IAnnotationSize {
+    /** The width in pixels. */
+    width?: number;
+    /** The height in pixels. */
+    height?: number;
+}
+/** A straight line or arrow drawn on a page. */
+export declare class LineAnnotation extends Annotation implements ILineAnnotation {
+    /** The start point of the line. */
+    beginPosition?: AnnotationPoint | undefined;
+    /** The end point of the line. */
+    endPosition?: AnnotationPoint | undefined;
+    /** The cap style at the start of the line. */
+    beginStyle?: LineEndingStyle;
+    /** The cap style at the end of the line. */
+    endStyle?: LineEndingStyle;
+    /** The line stroke style. */
+    lineStyle?: LineStyle;
+    /** The line color as an RGB hex string; null if transparent. */
+    color?: string | undefined;
+    /** The end-cap color as an RGB hex string; null if transparent. */
+    endColor?: string | undefined;
+    /** The line thickness in pixels. */
+    thickness?: number;
+    /** The opacity of the line as a percentage (0-100). */
+    opacity?: number;
+    constructor(data?: ILineAnnotation);
+    init(_data?: any): void;
+    static fromJS(data: any): LineAnnotation;
+    toJSON(data?: any): any;
+}
+/** A straight line or arrow drawn on a page. */
+export interface ILineAnnotation extends IAnnotation {
+    /** The start point of the line. */
+    beginPosition?: AnnotationPoint | undefined;
+    /** The end point of the line. */
+    endPosition?: AnnotationPoint | undefined;
+    /** The cap style at the start of the line. */
+    beginStyle?: LineEndingStyle;
+    /** The cap style at the end of the line. */
+    endStyle?: LineEndingStyle;
+    /** The line stroke style. */
+    lineStyle?: LineStyle;
+    /** The line color as an RGB hex string; null if transparent. */
+    color?: string | undefined;
+    /** The end-cap color as an RGB hex string; null if transparent. */
+    endColor?: string | undefined;
+    /** The line thickness in pixels. */
+    thickness?: number;
+    /** The opacity of the line as a percentage (0-100). */
+    opacity?: number;
+}
+/** The cap style at the end of a line. */
+export declare enum LineEndingStyle {
+    None = "None",
+    Open = "Open",
+    Closed = "Closed",
+    OpenReversed = "OpenReversed",
+    ClosedReversed = "ClosedReversed",
+    Butt = "Butt",
+    Diamond = "Diamond",
+    Round = "Round",
+    Square = "Square",
+    Slash = "Slash"
+}
+/** A rectangle, rounded rectangle, or ellipse drawn on a page. */
+export declare class RectangleAnnotation extends Annotation implements IRectangleAnnotation {
+    /** The bounding rectangle of the shape. */
+    coordinates?: AnnotationRectangle | undefined;
+    /** The fill color as an RGB hex string (for example, "#FF0000"); null if not filled. */
+    fillColor?: string | undefined;
+    /** The shape drawn within the bounding rectangle. */
+    boxStyle?: BoxStyle;
+    /** The border stroke style. */
+    borderStyle?: LineStyle;
+    /** The border color as an RGB hex string; null if transparent. */
+    borderColor?: string | undefined;
+    /** The border thickness in pixels. */
+    borderThickness?: number;
+    /** The opacity of the shape as a percentage (0-100). */
+    opacity?: number;
+    constructor(data?: IRectangleAnnotation);
+    init(_data?: any): void;
+    static fromJS(data: any): RectangleAnnotation;
+    toJSON(data?: any): any;
+}
+/** A rectangle, rounded rectangle, or ellipse drawn on a page. */
+export interface IRectangleAnnotation extends IAnnotation {
+    /** The bounding rectangle of the shape. */
+    coordinates?: AnnotationRectangle | undefined;
+    /** The fill color as an RGB hex string (for example, "#FF0000"); null if not filled. */
+    fillColor?: string | undefined;
+    /** The shape drawn within the bounding rectangle. */
+    boxStyle?: BoxStyle;
+    /** The border stroke style. */
+    borderStyle?: LineStyle;
+    /** The border color as an RGB hex string; null if transparent. */
+    borderColor?: string | undefined;
+    /** The border thickness in pixels. */
+    borderThickness?: number;
+    /** The opacity of the shape as a percentage (0-100). */
+    opacity?: number;
+}
+/** The shape of a rectangle annotation. */
+export declare enum BoxStyle {
+    Rectangle = "Rectangle",
+    Ellipse = "Ellipse",
+    RoundedRectangle = "RoundedRectangle"
+}
+/** A closed multi-point polygon drawn on a page. */
+export declare class PolylineAnnotation extends Annotation implements IPolylineAnnotation {
+    /** The ordered vertices of the polygon. */
+    points?: AnnotationPoint[] | undefined;
+    /** The border stroke style. */
+    lineStyle?: LineStyle;
+    /** The fill color as an RGB hex string; null if not filled. */
+    fillColor?: string | undefined;
+    /** Whether the polygon is filled. */
+    fillStyle?: FillStyle;
+    /** The border color as an RGB hex string; null if transparent. */
+    color?: string | undefined;
+    /** The border thickness in pixels. */
+    thickness?: number;
+    /** The opacity of the polygon as a percentage (0-100). */
+    opacity?: number;
+    constructor(data?: IPolylineAnnotation);
+    init(_data?: any): void;
+    static fromJS(data: any): PolylineAnnotation;
+    toJSON(data?: any): any;
+}
+/** A closed multi-point polygon drawn on a page. */
+export interface IPolylineAnnotation extends IAnnotation {
+    /** The ordered vertices of the polygon. */
+    points?: AnnotationPoint[] | undefined;
+    /** The border stroke style. */
+    lineStyle?: LineStyle;
+    /** The fill color as an RGB hex string; null if not filled. */
+    fillColor?: string | undefined;
+    /** Whether the polygon is filled. */
+    fillStyle?: FillStyle;
+    /** The border color as an RGB hex string; null if transparent. */
+    color?: string | undefined;
+    /** The border thickness in pixels. */
+    thickness?: number;
+    /** The opacity of the polygon as a percentage (0-100). */
+    opacity?: number;
+}
+/** Whether a closed shape is filled. */
+export declare enum FillStyle {
+    None = "None",
+    Solid = "Solid"
+}
+/** A text box with a pointer leading to a focus point on the page. */
+export declare class CalloutAnnotation extends Annotation implements ICalloutAnnotation {
+    /** The bounding rectangle of the callout's text box. */
+    boxCoordinates?: AnnotationRectangle | undefined;
+    /** The point the callout pointer leads to. */
+    focusPosition?: AnnotationPoint | undefined;
+    /** The fill color as an RGB hex string; null if not filled. */
+    fillColor?: string | undefined;
+    /** The border and pointer color as an RGB hex string; null if transparent. */
+    borderColor?: string | undefined;
+    /** The border stroke style. */
+    borderStyle?: LineStyle;
+    /** The border thickness in pixels. */
+    borderThickness?: number;
+    /** The cap style at the focus end of the pointer. */
+    focusStyle?: LineEndingStyle;
+    /** The opacity of the callout as a percentage (0-100). */
+    opacity?: number;
+    /** The font size of the text in points. */
+    textSize?: number;
+    /** The text displayed in the callout. */
+    text?: string | undefined;
+    /** The reading direction of the text. */
+    direction?: TextDirection;
+    constructor(data?: ICalloutAnnotation);
+    init(_data?: any): void;
+    static fromJS(data: any): CalloutAnnotation;
+    toJSON(data?: any): any;
+}
+/** A text box with a pointer leading to a focus point on the page. */
+export interface ICalloutAnnotation extends IAnnotation {
+    /** The bounding rectangle of the callout's text box. */
+    boxCoordinates?: AnnotationRectangle | undefined;
+    /** The point the callout pointer leads to. */
+    focusPosition?: AnnotationPoint | undefined;
+    /** The fill color as an RGB hex string; null if not filled. */
+    fillColor?: string | undefined;
+    /** The border and pointer color as an RGB hex string; null if transparent. */
+    borderColor?: string | undefined;
+    /** The border stroke style. */
+    borderStyle?: LineStyle;
+    /** The border thickness in pixels. */
+    borderThickness?: number;
+    /** The cap style at the focus end of the pointer. */
+    focusStyle?: LineEndingStyle;
+    /** The opacity of the callout as a percentage (0-100). */
+    opacity?: number;
+    /** The font size of the text in points. */
+    textSize?: number;
+    /** The text displayed in the callout. */
+    text?: string | undefined;
+    /** The reading direction of the text. */
+    direction?: TextDirection;
+}
+/** A placement of a catalog stamp on a page. The stamp image itself is defined by the catalog entry referenced by StampId. */
+export declare class StampAnnotation extends Annotation implements IStampAnnotation {
+    /** The ID of the catalog stamp placed; 0 when the stamp carries its own inline bitmap. */
+    stampId?: number;
+    /** The rectangle the stamp is drawn into. */
+    coordinates?: AnnotationRectangle | undefined;
+    /** The top-left position of the stamp on the page. */
+    position?: AnnotationPoint | undefined;
+    /** The render color of the stamp as an RGB hex string (for example, "#000000"); null if transparent. */
+    color?: string | undefined;
+    /** The clockwise rotation of the stamp in degrees (0-359). */
+    rotation?: number;
+    /** The opacity of the stamp as a percentage (0-100). */
+    opacity?: number;
+    constructor(data?: IStampAnnotation);
+    init(_data?: any): void;
+    static fromJS(data: any): StampAnnotation;
+    toJSON(data?: any): any;
+}
+/** A placement of a catalog stamp on a page. The stamp image itself is defined by the catalog entry referenced by StampId. */
+export interface IStampAnnotation extends IAnnotation {
+    /** The ID of the catalog stamp placed; 0 when the stamp carries its own inline bitmap. */
+    stampId?: number;
+    /** The rectangle the stamp is drawn into. */
+    coordinates?: AnnotationRectangle | undefined;
+    /** The top-left position of the stamp on the page. */
+    position?: AnnotationPoint | undefined;
+    /** The render color of the stamp as an RGB hex string (for example, "#000000"); null if transparent. */
+    color?: string | undefined;
+    /** The clockwise rotation of the stamp in degrees (0-359). */
+    rotation?: number;
+    /** The opacity of the stamp as a percentage (0-100). */
+    opacity?: number;
+}
+/** A freehand-drawn multi-point line on a page. */
+export declare class FreeHandAnnotation extends Annotation implements IFreeHandAnnotation {
+    /** The ordered points of the freehand stroke. */
+    points?: AnnotationPoint[] | undefined;
+    /** The stroke style. */
+    lineStyle?: LineStyle;
+    /** The stroke color as an RGB hex string; null if transparent. */
+    color?: string | undefined;
+    /** The stroke thickness in pixels. */
+    thickness?: number;
+    /** The opacity of the stroke as a percentage (0-100). */
+    opacity?: number;
+    constructor(data?: IFreeHandAnnotation);
+    init(_data?: any): void;
+    static fromJS(data: any): FreeHandAnnotation;
+    toJSON(data?: any): any;
+}
+/** A freehand-drawn multi-point line on a page. */
+export interface IFreeHandAnnotation extends IAnnotation {
+    /** The ordered points of the freehand stroke. */
+    points?: AnnotationPoint[] | undefined;
+    /** The stroke style. */
+    lineStyle?: LineStyle;
+    /** The stroke color as an RGB hex string; null if transparent. */
+    color?: string | undefined;
+    /** The stroke thickness in pixels. */
+    thickness?: number;
+    /** The opacity of the stroke as a percentage (0-100). */
+    opacity?: number;
+}
+/** A machine-readable format for specifying errors in HTTP API responses, per RFC 9457 (https://www.rfc-editor.org/rfc/rfc9457). Supersedes RFC 7807. */
+export declare class ProblemDetails implements IProblemDetails {
+    /** The problem type. */
+    type?: string | undefined;
+    /** A short, human-readable summary of the problem type. */
+    title?: string | undefined;
+    /** The HTTP status code. */
     status: number;
     /** A human-readable explanation specific to this occurrence of the problem. */
     detail?: string | undefined;
@@ -3845,32 +6211,104 @@ export declare class ProblemDetails implements IProblemDetails {
     extensions: any;
     constructor(data?: IProblemDetails);
     init(_data?: any): void;
-    static fromJS(data: any): ProblemDetails;
+    static fromJS(data: any): ProblemDetails;
+    toJSON(data?: any): any;
+}
+/** A machine-readable format for specifying errors in HTTP API responses, per RFC 9457 (https://www.rfc-editor.org/rfc/rfc9457). Supersedes RFC 7807. */
+export interface IProblemDetails {
+    /** The problem type. */
+    type?: string | undefined;
+    /** A short, human-readable summary of the problem type. */
+    title?: string | undefined;
+    /** The HTTP status code. */
+    status: number;
+    /** A human-readable explanation specific to this occurrence of the problem. */
+    detail?: string | undefined;
+    /** A URI reference that identifies the specific occurrence of the problem. */
+    instance?: string | undefined;
+    /** The operation id. */
+    operationId?: string | undefined;
+    /** The error source. */
+    errorSource?: string | undefined;
+    /** The error code. */
+    errorCode?: number | undefined;
+    /** The trace id. */
+    traceId?: string | undefined;
+    /** The instance detail. */
+    instanceDetail?: string | undefined;
+    [key: string]: any;
+}
+/** A repository-defined reason that can be associated with a redaction annotation. */
+export declare class AnnotationReason implements IAnnotationReason {
+    /** The ID of the annotation reason. */
+    id?: number;
+    /** The display text of the annotation reason. */
+    text?: string | undefined;
+    constructor(data?: IAnnotationReason);
+    init(_data?: any): void;
+    static fromJS(data: any): AnnotationReason;
+    toJSON(data?: any): any;
+}
+/** A repository-defined reason that can be associated with a redaction annotation. */
+export interface IAnnotationReason {
+    /** The ID of the annotation reason. */
+    id?: number;
+    /** The display text of the annotation reason. */
+    text?: string | undefined;
+}
+/** Request body for creating or updating an annotation (redaction) reason. */
+export declare class AnnotationReasonRequest implements IAnnotationReasonRequest {
+    /** The display text of the annotation reason. */
+    text?: string | undefined;
+    constructor(data?: IAnnotationReasonRequest);
+    init(_data?: any): void;
+    static fromJS(data: any): AnnotationReasonRequest;
+    toJSON(data?: any): any;
+}
+/** Request body for creating or updating an annotation (redaction) reason. */
+export interface IAnnotationReasonRequest {
+    /** The display text of the annotation reason. */
+    text?: string | undefined;
+}
+/** Response containing a collection of Attribute. */
+export declare class AttributeCollectionResponse implements IAttributeCollectionResponse {
+    /** A URL to retrieve the next page of the requested collection. */
+    odataNextLink?: string | undefined;
+    /** The total count of items within a collection. */
+    odataCount?: number | undefined;
+    /** Gets or sets the OData response content in the "value". */
+    value?: Attribute[] | undefined;
+    constructor(data?: IAttributeCollectionResponse);
+    init(_data?: any): void;
+    static fromJS(data: any): AttributeCollectionResponse;
+    toJSON(data?: any): any;
+}
+/** Response containing a collection of Attribute. */
+export interface IAttributeCollectionResponse {
+    /** A URL to retrieve the next page of the requested collection. */
+    odataNextLink?: string | undefined;
+    /** The total count of items within a collection. */
+    odataCount?: number | undefined;
+    /** Gets or sets the OData response content in the "value". */
+    value?: Attribute[] | undefined;
+}
+/** Represents a trustee attribute. */
+export declare class Attribute implements IAttribute {
+    /** The attribute key. */
+    key?: string | undefined;
+    /** The attribute value. */
+    value?: string | undefined;
+    constructor(data?: IAttribute);
+    init(_data?: any): void;
+    static fromJS(data: any): Attribute;
     toJSON(data?: any): any;
 }
-/** A machine-readable format for specifying errors in HTTP API responses, per RFC 9457 (https://www.rfc-editor.org/rfc/rfc9457). Supersedes RFC 7807. */
-export interface IProblemDetails {
-    /** The problem type. */
-    type?: string | undefined;
-    /** A short, human-readable summary of the problem type. */
-    title?: string | undefined;
-    /** The HTTP status code. */
-    status: number;
-    /** A human-readable explanation specific to this occurrence of the problem. */
-    detail?: string | undefined;
-    /** A URI reference that identifies the specific occurrence of the problem. */
-    instance?: string | undefined;
-    /** The operation id. */
-    operationId?: string | undefined;
-    /** The error source. */
-    errorSource?: string | undefined;
-    /** The error code. */
-    errorCode?: number | undefined;
-    /** The trace id. */
-    traceId?: string | undefined;
-    /** The instance detail. */
-    instanceDetail?: string | undefined;
-    [key: string]: any;
+/** Represents a trustee attribute. */
+export interface IAttribute {
+    /** The attribute key. */
+    key?: string | undefined;
+    /** The attribute value. */
+    value?: string | undefined;
 }
 /** Response containing a collection of AuditReason. */
 export declare class AuditReasonCollectionResponse implements IAuditReasonCollectionResponse {
@@ -3878,6 +6316,7 @@ export declare class AuditReasonCollectionResponse implements IAuditReasonCollec
     odataNextLink?: string | undefined;
     /** The total count of items within a collection. */
     odataCount?: number | undefined;
+    /** Gets or sets the OData response content in the "value". */
     value?: AuditReason[] | undefined;
     constructor(data?: IAuditReasonCollectionResponse);
     init(_data?: any): void;
@@ -3890,6 +6329,7 @@ export interface IAuditReasonCollectionResponse {
     odataNextLink?: string | undefined;
     /** The total count of items within a collection. */
     odataCount?: number | undefined;
+    /** Gets or sets the OData response content in the "value". */
     value?: AuditReason[] | undefined;
 }
 /** Represents a user-defined audit reason for an audit event. */
@@ -4044,6 +6484,7 @@ export declare class FieldDefinitionCollectionResponse implements IFieldDefiniti
     odataNextLink?: string | undefined;
     /** The total count of items within a collection. */
     odataCount?: number | undefined;
+    /** Gets or sets the OData response content in the "value". */
     value?: FieldDefinition[] | undefined;
     constructor(data?: IFieldDefinitionCollectionResponse);
     init(_data?: any): void;
@@ -4056,6 +6497,7 @@ export interface IFieldDefinitionCollectionResponse {
     odataNextLink?: string | undefined;
     /** The total count of items within a collection. */
     odataCount?: number | undefined;
+    /** Gets or sets the OData response content in the "value". */
     value?: FieldDefinition[] | undefined;
 }
 /** Request body for creating a new field definition. Name and FieldType are required; all other properties are optional and fall back to repository defaults when omitted. */
@@ -4494,12 +6936,161 @@ LongInteger → Number). A lossy conversion without this flag returns 400
 (data_loss_expected). Lossless conversions ignore this flag. */
     allowDataLoss?: boolean;
 }
+/** The access control list (ACL) of a template field definition: its access control entries. Field ACLs have no parent inheritance, so there is no inherit-parents flag. */
+export declare class FieldAccessControlList implements IFieldAccessControlList {
+    /** The access control entries that make up the ACL. */
+    entries?: FieldAccessControlEntry[] | undefined;
+    constructor(data?: IFieldAccessControlList);
+    init(_data?: any): void;
+    static fromJS(data: any): FieldAccessControlList;
+    toJSON(data?: any): any;
+}
+/** The access control list (ACL) of a template field definition: its access control entries. Field ACLs have no parent inheritance, so there is no inherit-parents flag. */
+export interface IFieldAccessControlList {
+    /** The access control entries that make up the ACL. */
+    entries?: FieldAccessControlEntry[] | undefined;
+}
+/** A single access control entry (ACE) on a template field definition: one trustee, whether its rights are allowed or denied, and the rights themselves. A trustee that has both allowed and denied rights is represented as two ACEs. Unlike entry ACEs, field ACEs have no scope and are never inherited. */
+export declare class FieldAccessControlEntry implements IFieldAccessControlEntry {
+    /** The trustee this ACE applies to. On input, identify the trustee by either
+trustee.sid or trustee.accountName (the SID takes precedence when both are given). */
+    trustee?: TrusteeIdentity | undefined;
+    /** Whether the ACE grants (Allow) or denies (Deny) the listed rights. Required on
+input — a missing value is rejected (it must not silently default to Allow). */
+    accessControlType?: AccessControlType | undefined;
+    /** The rights granted or denied by this ACE. */
+    rights?: FieldRight[] | undefined;
+    /** True when this ACE is inherited. Always false for field ACEs (field definitions have no
+ACL inheritance); returned for contract symmetry and ignored on input. */
+    isInherited?: boolean;
+    /** When inherited, a description of where the ACE was inherited from. Output only; null for
+field ACEs. */
+    inheritedFrom?: string | undefined;
+    constructor(data?: IFieldAccessControlEntry);
+    init(_data?: any): void;
+    static fromJS(data: any): FieldAccessControlEntry;
+    toJSON(data?: any): any;
+}
+/** A single access control entry (ACE) on a template field definition: one trustee, whether its rights are allowed or denied, and the rights themselves. A trustee that has both allowed and denied rights is represented as two ACEs. Unlike entry ACEs, field ACEs have no scope and are never inherited. */
+export interface IFieldAccessControlEntry {
+    /** The trustee this ACE applies to. On input, identify the trustee by either
+trustee.sid or trustee.accountName (the SID takes precedence when both are given). */
+    trustee?: TrusteeIdentity | undefined;
+    /** Whether the ACE grants (Allow) or denies (Deny) the listed rights. Required on
+input — a missing value is rejected (it must not silently default to Allow). */
+    accessControlType?: AccessControlType | undefined;
+    /** The rights granted or denied by this ACE. */
+    rights?: FieldRight[] | undefined;
+    /** True when this ACE is inherited. Always false for field ACEs (field definitions have no
+ACL inheritance); returned for contract symmetry and ignored on input. */
+    isInherited?: boolean;
+    /** When inherited, a description of where the ACE was inherited from. Output only; null for
+field ACEs. */
+    inheritedFrom?: string | undefined;
+}
+/** Identifies a security trustee (a user or a group) referenced by an access control entry, an effective-rights query, or a trustee-lookup result. */
+export declare class TrusteeIdentity implements ITrusteeIdentity {
+    /** The trustee's security identifier (an SDDL string such as S-1-5-21-...). This is
+the canonical, stable id for a trustee. On input it is preferred and takes precedence over
+AccountName; always populated on output. */
+    sid?: string | undefined;
+    /** The trustee's account name. On input it may be supplied instead of Sid to
+address the trustee by name (resolved to a SID server-side); the SID wins when both are
+given. Always populated on output. */
+    accountName?: string | undefined;
+    /** The trustee type: one of LaserficheUser, LaserficheGroup,
+WindowsAccount, LdapAccount, LfdsAccount. */
+    trusteeType?: string | undefined;
+    /** True when the trustee is an individual user; false when it is a group. */
+    isUser?: boolean;
+    /** A human-readable display name. Populated by trustee-lookup results; omitted in
+access-control-entry contexts. */
+    displayName?: string | undefined;
+    /** True when the trustee account is disabled. Populated by trustee-lookup results. */
+    isDisabled?: boolean;
+    constructor(data?: ITrusteeIdentity);
+    init(_data?: any): void;
+    static fromJS(data: any): TrusteeIdentity;
+    toJSON(data?: any): any;
+}
+/** Identifies a security trustee (a user or a group) referenced by an access control entry, an effective-rights query, or a trustee-lookup result. */
+export interface ITrusteeIdentity {
+    /** The trustee's security identifier (an SDDL string such as S-1-5-21-...). This is
+the canonical, stable id for a trustee. On input it is preferred and takes precedence over
+AccountName; always populated on output. */
+    sid?: string | undefined;
+    /** The trustee's account name. On input it may be supplied instead of Sid to
+address the trustee by name (resolved to a SID server-side); the SID wins when both are
+given. Always populated on output. */
+    accountName?: string | undefined;
+    /** The trustee type: one of LaserficheUser, LaserficheGroup,
+WindowsAccount, LdapAccount, LfdsAccount. */
+    trusteeType?: string | undefined;
+    /** True when the trustee is an individual user; false when it is a group. */
+    isUser?: boolean;
+    /** A human-readable display name. Populated by trustee-lookup results; omitted in
+access-control-entry contexts. */
+    displayName?: string | undefined;
+    /** True when the trustee account is disabled. Populated by trustee-lookup results. */
+    isDisabled?: boolean;
+}
+/** Whether an access control entry (ACE) grants or denies its rights. Serialized by name. */
+export declare enum AccessControlType {
+    Allow = "Allow",
+    Deny = "Deny"
+}
+/** An individual access right that can be granted to or denied a trustee on a template field definition. Serialized by name; emitted as a string enum in the OpenAPI schema so clients can reference it directly. */
+export declare enum FieldRight {
+    ReadValue = "ReadValue",
+    SetValue = "SetValue",
+    SetValueOnce = "SetValueOnce",
+    ModifyDefinition = "ModifyDefinition",
+    Delete = "Delete",
+    ReadPermissions = "ReadPermissions",
+    ChangePermissions = "ChangePermissions",
+    TakeOwnership = "TakeOwnership"
+}
+/** Request body for replacing a template field definition's access control list. The supplied entries fully replace the field's existing explicit ACL. Inherited entries are not accepted. */
+export declare class SetFieldAccessControlRequest implements ISetFieldAccessControlRequest {
+    /** The access control entries to set. Replaces the field's entire explicit ACL. */
+    entries?: FieldAccessControlEntry[] | undefined;
+    constructor(data?: ISetFieldAccessControlRequest);
+    init(_data?: any): void;
+    static fromJS(data: any): SetFieldAccessControlRequest;
+    toJSON(data?: any): any;
+}
+/** Request body for replacing a template field definition's access control list. The supplied entries fully replace the field's existing explicit ACL. Inherited entries are not accepted. */
+export interface ISetFieldAccessControlRequest {
+    /** The access control entries to set. Replaces the field's entire explicit ACL. */
+    entries?: FieldAccessControlEntry[] | undefined;
+}
+/** A trustee's rights to a template field definition. Depending on the aclOnly option on the request, these are either the effective rights (the net result after group membership, allow/deny resolution, and the repository's privilege overlay) or the rights granted by the field's access control list alone. */
+export declare class FieldRights implements IFieldRights {
+    /** The rights granted to the trustee on the field. */
+    rights?: FieldRight[] | undefined;
+    /** True when the session is read-only, so no write operations are possible regardless of
+the granted rights. */
+    isReadOnly?: boolean;
+    constructor(data?: IFieldRights);
+    init(_data?: any): void;
+    static fromJS(data: any): FieldRights;
+    toJSON(data?: any): any;
+}
+/** A trustee's rights to a template field definition. Depending on the aclOnly option on the request, these are either the effective rights (the net result after group membership, allow/deny resolution, and the repository's privilege overlay) or the rights granted by the field's access control list alone. */
+export interface IFieldRights {
+    /** The rights granted to the trustee on the field. */
+    rights?: FieldRight[] | undefined;
+    /** True when the session is read-only, so no write operations are possible regardless of
+the granted rights. */
+    isReadOnly?: boolean;
+}
 /** Response containing a collection of LinkDefinition. */
 export declare class LinkDefinitionCollectionResponse implements ILinkDefinitionCollectionResponse {
     /** A URL to retrieve the next page of the requested collection. */
     odataNextLink?: string | undefined;
     /** The total count of items within a collection. */
     odataCount?: number | undefined;
+    /** Gets or sets the OData response content in the "value". */
     value?: LinkDefinition[] | undefined;
     constructor(data?: ILinkDefinitionCollectionResponse);
     init(_data?: any): void;
@@ -4512,6 +7103,7 @@ export interface ILinkDefinitionCollectionResponse {
     odataNextLink?: string | undefined;
     /** The total count of items within a collection. */
     odataCount?: number | undefined;
+    /** Gets or sets the OData response content in the "value". */
     value?: LinkDefinition[] | undefined;
 }
 /** Represents an entry link definition. */
@@ -5308,6 +7900,7 @@ Does not affect pages generated from `file` — use `pdfOptions.generateText` fo
 }
 /** Response containing a link to download the exported entry. */
 export declare class ExportEntryResponse implements IExportEntryResponse {
+    /** Gets or sets the OData response content in the "value". */
     value?: string | undefined;
     constructor(data?: IExportEntryResponse);
     init(_data?: any): void;
@@ -5316,6 +7909,7 @@ export declare class ExportEntryResponse implements IExportEntryResponse {
 }
 /** Response containing a link to download the exported entry. */
 export interface IExportEntryResponse {
+    /** Gets or sets the OData response content in the "value". */
     value?: string | undefined;
 }
 /** Request body for exporting an entry. */
@@ -5394,6 +7988,7 @@ export declare class EntryCollectionResponse implements IEntryCollectionResponse
     odataNextLink?: string | undefined;
     /** The total count of items within a collection. */
     odataCount?: number | undefined;
+    /** Gets or sets the OData response content in the "value". */
     value?: Entry[] | undefined;
     constructor(data?: IEntryCollectionResponse);
     init(_data?: any): void;
@@ -5406,6 +8001,7 @@ export interface IEntryCollectionResponse {
     odataNextLink?: string | undefined;
     /** The total count of items within a collection. */
     odataCount?: number | undefined;
+    /** Gets or sets the OData response content in the "value". */
     value?: Entry[] | undefined;
 }
 /** Response containing a collection of Field. */
@@ -5414,6 +8010,7 @@ export declare class FieldCollectionResponse implements IFieldCollectionResponse
     odataNextLink?: string | undefined;
     /** The total count of items within a collection. */
     odataCount?: number | undefined;
+    /** Gets or sets the OData response content in the "value". */
     value?: Field[] | undefined;
     constructor(data?: IFieldCollectionResponse);
     init(_data?: any): void;
@@ -5426,6 +8023,7 @@ export interface IFieldCollectionResponse {
     odataNextLink?: string | undefined;
     /** The total count of items within a collection. */
     odataCount?: number | undefined;
+    /** Gets or sets the OData response content in the "value". */
     value?: Field[] | undefined;
 }
 /** Request body for assigning fields to an entry. */
@@ -5448,6 +8046,7 @@ export declare class TagCollectionResponse implements ITagCollectionResponse {
     odataNextLink?: string | undefined;
     /** The total count of items within a collection. */
     odataCount?: number | undefined;
+    /** Gets or sets the OData response content in the "value". */
     value?: Tag[] | undefined;
     constructor(data?: ITagCollectionResponse);
     init(_data?: any): void;
@@ -5460,6 +8059,7 @@ export interface ITagCollectionResponse {
     odataNextLink?: string | undefined;
     /** The total count of items within a collection. */
     odataCount?: number | undefined;
+    /** Gets or sets the OData response content in the "value". */
     value?: Tag[] | undefined;
 }
 /** Represents a tag set on an entry. */
@@ -5550,6 +8150,7 @@ export declare class LinkCollectionResponse implements ILinkCollectionResponse {
     odataNextLink?: string | undefined;
     /** The total count of items within a collection. */
     odataCount?: number | undefined;
+    /** Gets or sets the OData response content in the "value". */
     value?: Link[] | undefined;
     constructor(data?: ILinkCollectionResponse);
     init(_data?: any): void;
@@ -5562,6 +8163,7 @@ export interface ILinkCollectionResponse {
     odataNextLink?: string | undefined;
     /** The total count of items within a collection. */
     odataCount?: number | undefined;
+    /** Gets or sets the OData response content in the "value". */
     value?: Link[] | undefined;
 }
 /** Represents a link between a source entry and a target entry. */
@@ -5857,6 +8459,7 @@ export declare class PageInfoCollectionResponse implements IPageInfoCollectionRe
     odataNextLink?: string | undefined;
     /** The total count of items within a collection. */
     odataCount?: number | undefined;
+    /** Gets or sets the OData response content in the "value". */
     value?: PageInfoResponse[] | undefined;
     constructor(data?: IPageInfoCollectionResponse);
     init(_data?: any): void;
@@ -5869,6 +8472,7 @@ export interface IPageInfoCollectionResponse {
     odataNextLink?: string | undefined;
     /** The total count of items within a collection. */
     odataCount?: number | undefined;
+    /** Gets or sets the OData response content in the "value". */
     value?: PageInfoResponse[] | undefined;
 }
 export declare class PageInfoResponse implements IPageInfoResponse {
@@ -6007,8 +8611,8 @@ Account renames change this value over time — do not use for stable identity c
 export declare class LockDocumentRequest implements ILockDocumentRequest {
     /** An optional comment for the persistent lock. */
     comment?: string | undefined;
-    /** The lock extent. Defaults to All when omitted. */
-    extent?: LockExtent | undefined;
+    /** The lock extent. One of: Page, Edoc, Metadata, All. Defaults to All when omitted. */
+    extent?: string | undefined;
     constructor(data?: ILockDocumentRequest);
     init(_data?: any): void;
     static fromJS(data: any): LockDocumentRequest;
@@ -6018,15 +8622,8 @@ export declare class LockDocumentRequest implements ILockDocumentRequest {
 export interface ILockDocumentRequest {
     /** An optional comment for the persistent lock. */
     comment?: string | undefined;
-    /** The lock extent. Defaults to All when omitted. */
-    extent?: LockExtent | undefined;
-}
-/** The portion of a document that a persistent lock covers. */
-export declare enum LockExtent {
-    Page = "Page",
-    Edoc = "Edoc",
-    Metadata = "Metadata",
-    All = "All"
+    /** The lock extent. One of: Page, Edoc, Metadata, All. Defaults to All when omitted. */
+    extent?: string | undefined;
 }
 /** Request body for checking out a document. */
 export declare class CheckOutDocumentRequest implements ICheckOutDocumentRequest {
@@ -6060,8 +8657,619 @@ export interface ICheckInDocumentRequest {
     /** Whether to automatically release the persistent lock as part of the check-in. Defaults to true. */
     unlock?: boolean;
 }
+/** An entry's access control list: the explicit and inherited access control entries plus whether the entry inherits rights from its parent(s). */
+export declare class AccessControlList implements IAccessControlList {
+    /** The access control entries. Includes both explicitly-set and inherited ACEs;
+inherited ACEs carry isInherited = true. */
+    entries?: AccessControlEntry[] | undefined;
+    /** Whether the entry inherits access rights from its parent(s). When false, the entry's
+ACL is protected from parent inheritance. */
+    inheritParents?: boolean;
+    constructor(data?: IAccessControlList);
+    init(_data?: any): void;
+    static fromJS(data: any): AccessControlList;
+    toJSON(data?: any): any;
+}
+/** An entry's access control list: the explicit and inherited access control entries plus whether the entry inherits rights from its parent(s). */
+export interface IAccessControlList {
+    /** The access control entries. Includes both explicitly-set and inherited ACEs;
+inherited ACEs carry isInherited = true. */
+    entries?: AccessControlEntry[] | undefined;
+    /** Whether the entry inherits access rights from its parent(s). When false, the entry's
+ACL is protected from parent inheritance. */
+    inheritParents?: boolean;
+}
+/** A single access control entry (ACE): one trustee, whether its rights are allowed or denied, and the rights themselves. A trustee that has both allowed and denied rights is represented as two ACEs. */
+export declare class AccessControlEntry implements IAccessControlEntry {
+    /** The trustee this ACE applies to. On input, identify the trustee by either
+trustee.sid or trustee.accountName (the SID takes precedence when both are given). */
+    trustee?: TrusteeIdentity | undefined;
+    /** Whether the ACE grants (Allow) or denies (Deny) the listed rights. */
+    accessControlType?: AccessControlType;
+    /** The rights granted or denied by this ACE. */
+    rights?: EntryRight[] | undefined;
+    /** How the ACE propagates to descendant entries. Defaults to All when omitted on input. */
+    scope?: EntryAccessScope;
+    /** True when this ACE is inherited from an ancestor. Read-only — inherited ACEs are
+returned by GET but are ignored on input (the set operation manages explicit ACEs only). */
+    isInherited?: boolean;
+    /** When inherited, a description of where the ACE was inherited from. Output only. */
+    inheritedFrom?: string | undefined;
+    constructor(data?: IAccessControlEntry);
+    init(_data?: any): void;
+    static fromJS(data: any): AccessControlEntry;
+    toJSON(data?: any): any;
+}
+/** A single access control entry (ACE): one trustee, whether its rights are allowed or denied, and the rights themselves. A trustee that has both allowed and denied rights is represented as two ACEs. */
+export interface IAccessControlEntry {
+    /** The trustee this ACE applies to. On input, identify the trustee by either
+trustee.sid or trustee.accountName (the SID takes precedence when both are given). */
+    trustee?: TrusteeIdentity | undefined;
+    /** Whether the ACE grants (Allow) or denies (Deny) the listed rights. */
+    accessControlType?: AccessControlType;
+    /** The rights granted or denied by this ACE. */
+    rights?: EntryRight[] | undefined;
+    /** How the ACE propagates to descendant entries. Defaults to All when omitted on input. */
+    scope?: EntryAccessScope;
+    /** True when this ACE is inherited from an ancestor. Read-only — inherited ACEs are
+returned by GET but are ignored on input (the set operation manages explicit ACEs only). */
+    isInherited?: boolean;
+    /** When inherited, a description of where the ACE was inherited from. Output only. */
+    inheritedFrom?: string | undefined;
+}
+/** An individual access right that can be granted to or denied a trustee on an entry. Serialized by name; emitted as a string enum in the OpenAPI schema so clients can reference it directly. */
+export declare enum EntryRight {
+    Browse = "Browse",
+    Read = "Read",
+    WriteContent = "WriteContent",
+    AddPage = "AddPage",
+    Rename = "Rename",
+    RemovePage = "RemovePage",
+    Freeze = "Freeze",
+    Annotate = "Annotate",
+    SeeThroughRedactions = "SeeThroughRedactions",
+    SeeAnnotations = "SeeAnnotations",
+    SetReviewDate = "SetReviewDate",
+    WriteMetadata = "WriteMetadata",
+    CreateFolder = "CreateFolder",
+    CreateDocument = "CreateDocument",
+    SetEventDate = "SetEventDate",
+    Close = "Close",
+    Delete = "Delete",
+    ReadPermissions = "ReadPermissions",
+    ChangePermissions = "ChangePermissions",
+    TakeOwnership = "TakeOwnership"
+}
+/** Controls how an entry access control entry (ACE) propagates to descendant entries. Applies to entry ACEs only (field/template ACEs have no scope). Serialized by name. */
+export declare enum EntryAccessScope {
+    ThisEntry = "ThisEntry",
+    Folders = "Folders",
+    All = "All",
+    NotThisEntry = "NotThisEntry",
+    FoldersOnly = "FoldersOnly",
+    DocumentsOnly = "DocumentsOnly",
+    Immediate = "Immediate",
+    ImmediateChildren = "ImmediateChildren",
+    ImmediateDocuments = "ImmediateDocuments"
+}
+/** Request body to replace an entry's explicit access control list. This is a full replace: the supplied entries become the entry's complete set of explicit ACEs (any explicit ACE not included is removed). Inherited ACEs cannot be supplied and are managed via inheritParents. */
+export declare class SetAccessControlRequest implements ISetAccessControlRequest {
+    /** The explicit access control entries to apply. An empty array clears all explicit ACEs.
+Entries flagged isInherited = true are rejected. */
+    entries?: AccessControlEntry[] | undefined;
+    /** Whether the entry should inherit access rights from its parent(s). When omitted, the
+entry's current inheritance setting is preserved. When false, the ACL is protected
+from parent inheritance; when true, parent rights are inherited. */
+    inheritParents?: boolean | undefined;
+    constructor(data?: ISetAccessControlRequest);
+    init(_data?: any): void;
+    static fromJS(data: any): SetAccessControlRequest;
+    toJSON(data?: any): any;
+}
+/** Request body to replace an entry's explicit access control list. This is a full replace: the supplied entries become the entry's complete set of explicit ACEs (any explicit ACE not included is removed). Inherited ACEs cannot be supplied and are managed via inheritParents. */
+export interface ISetAccessControlRequest {
+    /** The explicit access control entries to apply. An empty array clears all explicit ACEs.
+Entries flagged isInherited = true are rejected. */
+    entries?: AccessControlEntry[] | undefined;
+    /** Whether the entry should inherit access rights from its parent(s). When omitted, the
+entry's current inheritance setting is preserved. When false, the ACL is protected
+from parent inheritance; when true, parent rights are inherited. */
+    inheritParents?: boolean | undefined;
+}
+/** A trustee's rights to an entry. Depending on the aclOnly option on the request, these are either the effective rights (the net result after allow/deny resolution, group membership, and the repository's privilege and records-management overlays) or the rights granted by the entry's access control list alone. */
+export declare class EntryRights implements IEntryRights {
+    /** The rights granted to the trustee on the entry. */
+    rights?: EntryRight[] | undefined;
+    /** True when the session is read-only, so no write operations are possible regardless of
+the granted rights. */
+    isReadOnly?: boolean;
+    constructor(data?: IEntryRights);
+    init(_data?: any): void;
+    static fromJS(data: any): EntryRights;
+    toJSON(data?: any): any;
+}
+/** A trustee's rights to an entry. Depending on the aclOnly option on the request, these are either the effective rights (the net result after allow/deny resolution, group membership, and the repository's privilege and records-management overlays) or the rights granted by the entry's access control list alone. */
+export interface IEntryRights {
+    /** The rights granted to the trustee on the entry. */
+    rights?: EntryRight[] | undefined;
+    /** True when the session is read-only, so no write operations are possible regardless of
+the granted rights. */
+    isReadOnly?: boolean;
+}
+/** The records management properties of an entry. This is the abstract base; the concrete shape is RecordProperties for a document record (RecordType = Record) or RecordFolderProperties for a record folder (RecordFolder). Members common to both record and record folder live here; type-specific members live on the subtypes. Many members are computed by the repository and are read-only — they are noted as such and are ignored on update. */
+export declare abstract class RecordsManagementProperties implements IRecordsManagementProperties {
+    /** Whether these properties describe a document record or a record folder. Determines the
+concrete subtype (RecordProperties or RecordFolderProperties)
+and which type-specific members are present. */
+    recordType?: RecordEntryType;
+    /** The current lifecycle state. Computed (read-only). */
+    dispositionState?: DispositionState | undefined;
+    /** True when the entry has been cut off. Computed (read-only). */
+    isCutoff?: boolean;
+    /** True when the entry is currently eligible for cutoff. Computed (read-only). */
+    isEligibleForCutoff?: boolean;
+    /** True when the entry is currently eligible for final disposition. Computed (read-only). */
+    isEligibleForFinalDisposition?: boolean;
+    /** The date the entry was cut off, or null if not cut off. Computed (read-only). */
+    cutoffDate?: Date | undefined;
+    /** The date the entry becomes eligible for cutoff, or null. Computed (read-only). */
+    cutoffEligibility?: Date | undefined;
+    /** The date the entry becomes eligible for final disposition, or null. Computed (read-only). */
+    finalDispositionEligibility?: Date | undefined;
+    /** The date final disposition was confirmed, or null. Computed (read-only). */
+    dispositionConfirmationDate?: Date | undefined;
+    /** Projected and completed interim transfers. Computed (read-only). */
+    transferDates?: RecordsManagementTransferDate[] | undefined;
+    /** The records management location the entry currently resides at, or null. Computed (read-only). */
+    locationId?: number | undefined;
+    /** The disposition schedule currently governing the entry (own or inherited), or null. Computed (read-only). */
+    activeDispositionScheduleId?: number | undefined;
+    /** The cutoff criterion assigned to the entry, or null when none. */
+    cutoffCriterionId?: number | undefined;
+    /** The disposition schedule assigned to the entry, or null when none. */
+    dispositionScheduleId?: number | undefined;
+    /** The filing date, or null when unset. */
+    filingDate?: Date | undefined;
+    /** The alternate-retention trigger date, or null when unset. */
+    triggerDate?: Date | undefined;
+    protected _discriminator: string;
+    constructor(data?: IRecordsManagementProperties);
+    init(_data?: any): void;
+    static fromJS(data: any): RecordsManagementProperties;
+    toJSON(data?: any): any;
+}
+/** The records management properties of an entry. This is the abstract base; the concrete shape is RecordProperties for a document record (RecordType = Record) or RecordFolderProperties for a record folder (RecordFolder). Members common to both record and record folder live here; type-specific members live on the subtypes. Many members are computed by the repository and are read-only — they are noted as such and are ignored on update. */
+export interface IRecordsManagementProperties {
+    /** Whether these properties describe a document record or a record folder. Determines the
+concrete subtype (RecordProperties or RecordFolderProperties)
+and which type-specific members are present. */
+    recordType?: RecordEntryType;
+    /** The current lifecycle state. Computed (read-only). */
+    dispositionState?: DispositionState | undefined;
+    /** True when the entry has been cut off. Computed (read-only). */
+    isCutoff?: boolean;
+    /** True when the entry is currently eligible for cutoff. Computed (read-only). */
+    isEligibleForCutoff?: boolean;
+    /** True when the entry is currently eligible for final disposition. Computed (read-only). */
+    isEligibleForFinalDisposition?: boolean;
+    /** The date the entry was cut off, or null if not cut off. Computed (read-only). */
+    cutoffDate?: Date | undefined;
+    /** The date the entry becomes eligible for cutoff, or null. Computed (read-only). */
+    cutoffEligibility?: Date | undefined;
+    /** The date the entry becomes eligible for final disposition, or null. Computed (read-only). */
+    finalDispositionEligibility?: Date | undefined;
+    /** The date final disposition was confirmed, or null. Computed (read-only). */
+    dispositionConfirmationDate?: Date | undefined;
+    /** Projected and completed interim transfers. Computed (read-only). */
+    transferDates?: RecordsManagementTransferDate[] | undefined;
+    /** The records management location the entry currently resides at, or null. Computed (read-only). */
+    locationId?: number | undefined;
+    /** The disposition schedule currently governing the entry (own or inherited), or null. Computed (read-only). */
+    activeDispositionScheduleId?: number | undefined;
+    /** The cutoff criterion assigned to the entry, or null when none. */
+    cutoffCriterionId?: number | undefined;
+    /** The disposition schedule assigned to the entry, or null when none. */
+    dispositionScheduleId?: number | undefined;
+    /** The filing date, or null when unset. */
+    filingDate?: Date | undefined;
+    /** The alternate-retention trigger date, or null when unset. */
+    triggerDate?: Date | undefined;
+}
+/** Discriminates which kind of records management entry a set of records management properties describes. Serialized by name. */
+export declare enum RecordEntryType {
+    Record = "Record",
+    RecordFolder = "RecordFolder"
+}
+/** The current lifecycle state of a record or record folder. Serialized by name. */
+export declare enum DispositionState {
+    Open = "Open",
+    Closed = "Closed",
+    InRetention = "InRetention",
+    Transferred = "Transferred",
+    Eligible = "Eligible",
+    Partial = "Partial",
+    Final = "Final"
+}
+/** A single interim-transfer step's dates for a record or record folder. A step is either a completed transfer or a projected one (see Transferred). Output only. */
+export declare class RecordsManagementTransferDate implements IRecordsManagementTransferDate {
+    /** The id of the disposition schedule transfer step this date corresponds to. */
+    transferId?: number;
+    /** The ordinal transfer number within the disposition schedule. */
+    transferNumber?: number;
+    /** The date the transfer occurred, or null when it has not yet taken place. */
+    date?: Date | undefined;
+    /** The date the entry becomes (or became) eligible for this transfer. */
+    eligibleDate?: Date | undefined;
+    /** True when the transfer has taken place; false when this is a projected date. */
+    transferred?: boolean;
+    constructor(data?: IRecordsManagementTransferDate);
+    init(_data?: any): void;
+    static fromJS(data: any): RecordsManagementTransferDate;
+    toJSON(data?: any): any;
+}
+/** A single interim-transfer step's dates for a record or record folder. A step is either a completed transfer or a projected one (see Transferred). Output only. */
+export interface IRecordsManagementTransferDate {
+    /** The id of the disposition schedule transfer step this date corresponds to. */
+    transferId?: number;
+    /** The ordinal transfer number within the disposition schedule. */
+    transferNumber?: number;
+    /** The date the transfer occurred, or null when it has not yet taken place. */
+    date?: Date | undefined;
+    /** The date the entry becomes (or became) eligible for this transfer. */
+    eligibleDate?: Date | undefined;
+    /** True when the transfer has taken place; false when this is a projected date. */
+    transferred?: boolean;
+}
+/** The records management properties of a document record (RecordType = Record). Adds the document-record-only members to the common RecordsManagementProperties shape. */
+export declare class RecordProperties extends RecordsManagementProperties implements IRecordProperties {
+    /** The record folder this record is filed under, or null when independent. Computed (read-only). */
+    recordFolderId?: number | undefined;
+    /** True when the record is filed under a record folder. Computed (read-only). */
+    underRecordFolder?: boolean | undefined;
+    /** True when the record was cut off individually rather than with its folder. Computed (read-only). */
+    isIndividuallyCutoff?: boolean | undefined;
+    /** True when the cutoff criterion is inherited from the record folder. */
+    isCutoffCriterionInherited?: boolean | undefined;
+    /** True when the disposition schedule is inherited from the record folder. */
+    isDispositionScheduleInherited?: boolean | undefined;
+    /** The reviewer recorded for the last vital-record review, or null. Computed (read-only). */
+    reviewer?: string | undefined;
+    /** The last vital-record review date, or null when unset. */
+    lastReviewDate?: Date | undefined;
+    /** The next scheduled vital-record review date, or null. Computed (read-only). */
+    nextReviewDate?: Date | undefined;
+    constructor(data?: IRecordProperties);
+    init(_data?: any): void;
+    static fromJS(data: any): RecordProperties;
+    toJSON(data?: any): any;
+}
+/** The records management properties of a document record (RecordType = Record). Adds the document-record-only members to the common RecordsManagementProperties shape. */
+export interface IRecordProperties extends IRecordsManagementProperties {
+    /** The record folder this record is filed under, or null when independent. Computed (read-only). */
+    recordFolderId?: number | undefined;
+    /** True when the record is filed under a record folder. Computed (read-only). */
+    underRecordFolder?: boolean | undefined;
+    /** True when the record was cut off individually rather than with its folder. Computed (read-only). */
+    isIndividuallyCutoff?: boolean | undefined;
+    /** True when the cutoff criterion is inherited from the record folder. */
+    isCutoffCriterionInherited?: boolean | undefined;
+    /** True when the disposition schedule is inherited from the record folder. */
+    isDispositionScheduleInherited?: boolean | undefined;
+    /** The reviewer recorded for the last vital-record review, or null. Computed (read-only). */
+    reviewer?: string | undefined;
+    /** The last vital-record review date, or null when unset. */
+    lastReviewDate?: Date | undefined;
+    /** The next scheduled vital-record review date, or null. Computed (read-only). */
+    nextReviewDate?: Date | undefined;
+}
+/** The records management properties of a record folder (RecordType = RecordFolder). Adds the record-folder-only members to the common RecordsManagementProperties shape. */
+export declare class RecordFolderProperties extends RecordsManagementProperties implements IRecordFolderProperties {
+    /** True when the record folder is closed to new filings. */
+    isClosed?: boolean | undefined;
+    /** True when the record folder is permanent (never destroyed). */
+    isPermanent?: boolean | undefined;
+    /** The disposition authority name, or null. */
+    dispositionAuthority?: string | undefined;
+    /** The vital-record review cycle (calendar cycle) id, or null. */
+    reviewCycleId?: number | undefined;
+    /** The vital-record review interval, or null. */
+    reviewInterval?: number | undefined;
+    /** The review interval unit. */
+    reviewIntervalUnit?: ReviewIntervalUnit | undefined;
+    constructor(data?: IRecordFolderProperties);
+    init(_data?: any): void;
+    static fromJS(data: any): RecordFolderProperties;
+    toJSON(data?: any): any;
+}
+/** The records management properties of a record folder (RecordType = RecordFolder). Adds the record-folder-only members to the common RecordsManagementProperties shape. */
+export interface IRecordFolderProperties extends IRecordsManagementProperties {
+    /** True when the record folder is closed to new filings. */
+    isClosed?: boolean | undefined;
+    /** True when the record folder is permanent (never destroyed). */
+    isPermanent?: boolean | undefined;
+    /** The disposition authority name, or null. */
+    dispositionAuthority?: string | undefined;
+    /** The vital-record review cycle (calendar cycle) id, or null. */
+    reviewCycleId?: number | undefined;
+    /** The vital-record review interval, or null. */
+    reviewInterval?: number | undefined;
+    /** The review interval unit. */
+    reviewIntervalUnit?: ReviewIntervalUnit | undefined;
+}
+/** The unit of a vital-record review interval. Serialized by name. */
+export declare enum ReviewIntervalUnit {
+    NotApplicable = "NotApplicable",
+    Day = "Day",
+    Month = "Month"
+}
+/** A list of entry ids returned by a records management folder query (for example, the records eligible for disposition or transfer, or the independent records under a record folder). Callers join these ids against the entry endpoints to retrieve the entries themselves. */
+export declare class RecordEntryIdCollection implements IRecordEntryIdCollection {
+    /** The matching entry ids. */
+    entryIds?: number[] | undefined;
+    constructor(data?: IRecordEntryIdCollection);
+    init(_data?: any): void;
+    static fromJS(data: any): RecordEntryIdCollection;
+    toJSON(data?: any): any;
+}
+/** A list of entry ids returned by a records management folder query (for example, the records eligible for disposition or transfer, or the independent records under a record folder). Callers join these ids against the entry endpoints to retrieve the entries themselves. */
+export interface IRecordEntryIdCollection {
+    /** The matching entry ids. */
+    entryIds?: number[] | undefined;
+}
+/** The records management action to query a record folder's eligible records for. Used as the for selector on GetEligibleRecords. Serialized by name. */
+export declare enum EligibleRecordsAction {
+    Disposition = "Disposition",
+    Transfer = "Transfer"
+}
+/** The alternate-retention trigger events resolved for a record folder. */
+export declare class AltRetentionEventCollection implements IAltRetentionEventCollection {
+    /** The alternate-retention trigger events. */
+    events?: AltRetentionEvent[] | undefined;
+    constructor(data?: IAltRetentionEventCollection);
+    init(_data?: any): void;
+    static fromJS(data: any): AltRetentionEventCollection;
+    toJSON(data?: any): any;
+}
+/** The alternate-retention trigger events resolved for a record folder. */
+export interface IAltRetentionEventCollection {
+    /** The alternate-retention trigger events. */
+    events?: AltRetentionEvent[] | undefined;
+}
+/** An alternate-retention trigger event resolved for a record folder — the event whose occurrence drives the folder's alternate disposition schedule. Output only. */
+export declare class AltRetentionEvent implements IAltRetentionEvent {
+    /** The entry the alternate-retention trigger applies to. */
+    entryId?: number;
+    /** The records management event definition id that triggers the alternate retention. */
+    eventId?: number;
+    /** The date the trigger event is set to occur, or null when unset. */
+    triggerDate?: Date | undefined;
+    constructor(data?: IAltRetentionEvent);
+    init(_data?: any): void;
+    static fromJS(data: any): AltRetentionEvent;
+    toJSON(data?: any): any;
+}
+/** An alternate-retention trigger event resolved for a record folder — the event whose occurrence drives the folder's alternate disposition schedule. Output only. */
+export interface IAltRetentionEvent {
+    /** The entry the alternate-retention trigger applies to. */
+    entryId?: number;
+    /** The records management event definition id that triggers the alternate retention. */
+    eventId?: number;
+    /** The date the trigger event is set to occur, or null when unset. */
+    triggerDate?: Date | undefined;
+}
+/** A record series' retention defaults. A record series provides cascading defaults (cutoff criterion, disposition schedule, review cycle, permanence, disposition authority) that the record folders and records beneath it resolve against. */
+export declare class RecordSeriesProperties implements IRecordSeriesProperties {
+    /** The record series code. */
+    code?: string | undefined;
+    /** The default cutoff criterion id, or null when none. */
+    cutoffCriterionId?: number | undefined;
+    /** The default disposition schedule id, or null when none. */
+    dispositionScheduleId?: number | undefined;
+    /** The disposition authority name, or null. */
+    dispositionAuthority?: string | undefined;
+    /** True when records under the series are permanent (never destroyed). */
+    isPermanent?: boolean;
+    /** The default vital-record review cycle (calendar cycle) id, or null when none. */
+    reviewCycleId?: number | undefined;
+    /** The default vital-record review interval, or null when none. */
+    reviewInterval?: number | undefined;
+    /** The default review interval unit. */
+    reviewIntervalUnit?: ReviewIntervalUnit | undefined;
+    constructor(data?: IRecordSeriesProperties);
+    init(_data?: any): void;
+    static fromJS(data: any): RecordSeriesProperties;
+    toJSON(data?: any): any;
+}
+/** A record series' retention defaults. A record series provides cascading defaults (cutoff criterion, disposition schedule, review cycle, permanence, disposition authority) that the record folders and records beneath it resolve against. */
+export interface IRecordSeriesProperties {
+    /** The record series code. */
+    code?: string | undefined;
+    /** The default cutoff criterion id, or null when none. */
+    cutoffCriterionId?: number | undefined;
+    /** The default disposition schedule id, or null when none. */
+    dispositionScheduleId?: number | undefined;
+    /** The disposition authority name, or null. */
+    dispositionAuthority?: string | undefined;
+    /** True when records under the series are permanent (never destroyed). */
+    isPermanent?: boolean;
+    /** The default vital-record review cycle (calendar cycle) id, or null when none. */
+    reviewCycleId?: number | undefined;
+    /** The default vital-record review interval, or null when none. */
+    reviewInterval?: number | undefined;
+    /** The default review interval unit. */
+    reviewIntervalUnit?: ReviewIntervalUnit | undefined;
+}
+/** Request body for partial-update of an entry's records management properties. Every member is optional: null = leave unchanged. Id members accept 0 to clear the assignment. Dates are set by supplying a value; the two clearable dates (record folder triggerDate and record lastReviewDate) are cleared via their explicit clear* flags. Applying this update to a plain document promotes it to a record, and to a plain folder promotes it to a record folder, before the properties are applied. Members that do not apply to the entry's resulting type (for example record-folder members on a document record) are rejected with 400. */
+export declare class UpdateRecordsManagementPropertiesRequest implements IUpdateRecordsManagementPropertiesRequest {
+    /** The cutoff criterion id to assign, or 0 to clear. */
+    cutoffCriterionId?: number | undefined;
+    /** The disposition schedule id to assign, or 0 to clear. */
+    dispositionScheduleId?: number | undefined;
+    /** The filing date to set. */
+    filingDate?: Date | undefined;
+    /** The alternate-retention trigger date to set. */
+    triggerDate?: Date | undefined;
+    /** Whether the cutoff criterion is inherited from the record folder. (record) */
+    isCutoffCriterionInherited?: boolean | undefined;
+    /** Whether the disposition schedule is inherited from the record folder. (record) */
+    isDispositionScheduleInherited?: boolean | undefined;
+    /** The last vital-record review date to set. (record) */
+    lastReviewDate?: Date | undefined;
+    /** When true, clear the last vital-record review date. (record) */
+    clearLastReviewDate?: boolean;
+    /** When true, clear the alternate-retention trigger date. (recordFolder) */
+    clearTriggerDate?: boolean;
+    /** Whether the record folder is closed to new filings. (recordFolder) */
+    isClosed?: boolean | undefined;
+    /** Whether the record folder is permanent (never destroyed). (recordFolder) */
+    isPermanent?: boolean | undefined;
+    /** The disposition authority name; empty string to clear. (recordFolder) */
+    dispositionAuthority?: string | undefined;
+    /** The vital-record review cycle (calendar cycle) id to assign, or 0 to clear. (recordFolder) */
+    reviewCycleId?: number | undefined;
+    /** The vital-record review interval to set. (recordFolder) */
+    reviewInterval?: number | undefined;
+    /** The review interval unit. (recordFolder) */
+    reviewIntervalUnit?: ReviewIntervalUnit | undefined;
+    constructor(data?: IUpdateRecordsManagementPropertiesRequest);
+    init(_data?: any): void;
+    static fromJS(data: any): UpdateRecordsManagementPropertiesRequest;
+    toJSON(data?: any): any;
+}
+/** Request body for partial-update of an entry's records management properties. Every member is optional: null = leave unchanged. Id members accept 0 to clear the assignment. Dates are set by supplying a value; the two clearable dates (record folder triggerDate and record lastReviewDate) are cleared via their explicit clear* flags. Applying this update to a plain document promotes it to a record, and to a plain folder promotes it to a record folder, before the properties are applied. Members that do not apply to the entry's resulting type (for example record-folder members on a document record) are rejected with 400. */
+export interface IUpdateRecordsManagementPropertiesRequest {
+    /** The cutoff criterion id to assign, or 0 to clear. */
+    cutoffCriterionId?: number | undefined;
+    /** The disposition schedule id to assign, or 0 to clear. */
+    dispositionScheduleId?: number | undefined;
+    /** The filing date to set. */
+    filingDate?: Date | undefined;
+    /** The alternate-retention trigger date to set. */
+    triggerDate?: Date | undefined;
+    /** Whether the cutoff criterion is inherited from the record folder. (record) */
+    isCutoffCriterionInherited?: boolean | undefined;
+    /** Whether the disposition schedule is inherited from the record folder. (record) */
+    isDispositionScheduleInherited?: boolean | undefined;
+    /** The last vital-record review date to set. (record) */
+    lastReviewDate?: Date | undefined;
+    /** When true, clear the last vital-record review date. (record) */
+    clearLastReviewDate?: boolean;
+    /** When true, clear the alternate-retention trigger date. (recordFolder) */
+    clearTriggerDate?: boolean;
+    /** Whether the record folder is closed to new filings. (recordFolder) */
+    isClosed?: boolean | undefined;
+    /** Whether the record folder is permanent (never destroyed). (recordFolder) */
+    isPermanent?: boolean | undefined;
+    /** The disposition authority name; empty string to clear. (recordFolder) */
+    dispositionAuthority?: string | undefined;
+    /** The vital-record review cycle (calendar cycle) id to assign, or 0 to clear. (recordFolder) */
+    reviewCycleId?: number | undefined;
+    /** The vital-record review interval to set. (recordFolder) */
+    reviewInterval?: number | undefined;
+    /** The review interval unit. (recordFolder) */
+    reviewIntervalUnit?: ReviewIntervalUnit | undefined;
+}
+/** Request body for setting a records management event date on a record or record folder. */
+export declare class SetRecordEventRequest implements ISetRecordEventRequest {
+    /** The records management event definition id whose date is being set. */
+    eventId?: number;
+    /** The date to record for the event. */
+    date?: Date;
+    constructor(data?: ISetRecordEventRequest);
+    init(_data?: any): void;
+    static fromJS(data: any): SetRecordEventRequest;
+    toJSON(data?: any): any;
+}
+/** Request body for setting a records management event date on a record or record folder. */
+export interface ISetRecordEventRequest {
+    /** The records management event definition id whose date is being set. */
+    eventId?: number;
+    /** The date to record for the event. */
+    date?: Date;
+}
+/** Request body for removing a records management event date from a record or record folder. */
+export declare class RemoveRecordEventRequest implements IRemoveRecordEventRequest {
+    /** The records management event definition id whose date is being removed. */
+    eventId?: number;
+    constructor(data?: IRemoveRecordEventRequest);
+    init(_data?: any): void;
+    static fromJS(data: any): RemoveRecordEventRequest;
+    toJSON(data?: any): any;
+}
+/** Request body for removing a records management event date from a record or record folder. */
+export interface IRemoveRecordEventRequest {
+    /** The records management event definition id whose date is being removed. */
+    eventId?: number;
+}
+/** Request body for partial-update of a record series' retention defaults. Every member is optional: null = leave unchanged. Id members accept 0 to clear the assignment. */
+export declare class UpdateRecordSeriesPropertiesRequest implements IUpdateRecordSeriesPropertiesRequest {
+    /** The default cutoff criterion id to assign, or 0 to clear. */
+    cutoffCriterionId?: number | undefined;
+    /** The default disposition schedule id to assign, or 0 to clear. */
+    dispositionScheduleId?: number | undefined;
+    /** The disposition authority name; empty string to clear. */
+    dispositionAuthority?: string | undefined;
+    /** Whether records under the series are permanent (never destroyed). */
+    isPermanent?: boolean | undefined;
+    /** The default vital-record review cycle (calendar cycle) id to assign, or 0 to clear. */
+    reviewCycleId?: number | undefined;
+    /** The default vital-record review interval to set. */
+    reviewInterval?: number | undefined;
+    /** The default review interval unit. */
+    reviewIntervalUnit?: ReviewIntervalUnit | undefined;
+    /** When true, cascade the changed defaults to the record folders and records beneath the
+series. When false (default), only the series' own defaults change. */
+    cascade?: boolean;
+    constructor(data?: IUpdateRecordSeriesPropertiesRequest);
+    init(_data?: any): void;
+    static fromJS(data: any): UpdateRecordSeriesPropertiesRequest;
+    toJSON(data?: any): any;
+}
+/** Request body for partial-update of a record series' retention defaults. Every member is optional: null = leave unchanged. Id members accept 0 to clear the assignment. */
+export interface IUpdateRecordSeriesPropertiesRequest {
+    /** The default cutoff criterion id to assign, or 0 to clear. */
+    cutoffCriterionId?: number | undefined;
+    /** The default disposition schedule id to assign, or 0 to clear. */
+    dispositionScheduleId?: number | undefined;
+    /** The disposition authority name; empty string to clear. */
+    dispositionAuthority?: string | undefined;
+    /** Whether records under the series are permanent (never destroyed). */
+    isPermanent?: boolean | undefined;
+    /** The default vital-record review cycle (calendar cycle) id to assign, or 0 to clear. */
+    reviewCycleId?: number | undefined;
+    /** The default vital-record review interval to set. */
+    reviewInterval?: number | undefined;
+    /** The default review interval unit. */
+    reviewIntervalUnit?: ReviewIntervalUnit | undefined;
+    /** When true, cascade the changed defaults to the record folders and records beneath the
+series. When false (default), only the series' own defaults change. */
+    cascade?: boolean;
+}
+/** Request body for creating a record series under a parent folder. */
+export declare class CreateRecordSeriesRequest implements ICreateRecordSeriesRequest {
+    /** The name of the new record series. */
+    name?: string | undefined;
+    /** The record series code. */
+    code?: string | undefined;
+    /** When true, the server appends a suffix to the name on a naming conflict instead of failing. */
+    autoRename?: boolean;
+    constructor(data?: ICreateRecordSeriesRequest);
+    init(_data?: any): void;
+    static fromJS(data: any): CreateRecordSeriesRequest;
+    toJSON(data?: any): any;
+}
+/** Request body for creating a record series under a parent folder. */
+export interface ICreateRecordSeriesRequest {
+    /** The name of the new record series. */
+    name?: string | undefined;
+    /** The record series code. */
+    code?: string | undefined;
+    /** When true, the server appends a suffix to the name on a naming conflict instead of failing. */
+    autoRename?: boolean;
+}
 /** Response containing a collection of Repository. */
 export declare class RepositoryCollectionResponse implements IRepositoryCollectionResponse {
+    /** Gets or sets the OData response content in the "value". */
     value?: Repository[] | undefined;
     constructor(data?: IRepositoryCollectionResponse);
     init(_data?: any): void;
@@ -6070,6 +9278,7 @@ export declare class RepositoryCollectionResponse implements IRepositoryCollecti
 }
 /** Response containing a collection of Repository. */
 export interface IRepositoryCollectionResponse {
+    /** Gets or sets the OData response content in the "value". */
     value?: Repository[] | undefined;
 }
 /** Represents a Laserfiche repository. */
@@ -6094,6 +9303,42 @@ export interface IRepository {
     /** The corresponding repository Web Client url. */
     webClientUrl?: string | undefined;
 }
+/** The current session's rights in a repository: the privileges and feature rights held by the session, plus whether the session is read-only. Reported as named booleans (each map is keyed by the right's name with a granted true/false) rather than a raw bitmask, for UI enablement and pre-flight checks. Reflects the current session only — per-trustee privilege administration is not part of this surface. */
+export declare class SessionRights implements ISessionRights {
+    /** The session's privileges, keyed by privilege name (e.g. EntryAccess,
+RecordManager), with the value indicating whether the session holds that privilege. */
+    privileges?: {
+        [key: string]: boolean;
+    } | undefined;
+    /** The session's feature rights, keyed by feature-right name (e.g. Search,
+Import), with the value indicating whether the session holds that feature right. */
+    featureRights?: {
+        [key: string]: boolean;
+    } | undefined;
+    /** True when the current session is read-only, so no write operations are possible regardless
+of the granted privileges or feature rights. */
+    isReadOnly?: boolean;
+    constructor(data?: ISessionRights);
+    init(_data?: any): void;
+    static fromJS(data: any): SessionRights;
+    toJSON(data?: any): any;
+}
+/** The current session's rights in a repository: the privileges and feature rights held by the session, plus whether the session is read-only. Reported as named booleans (each map is keyed by the right's name with a granted true/false) rather than a raw bitmask, for UI enablement and pre-flight checks. Reflects the current session only — per-trustee privilege administration is not part of this surface. */
+export interface ISessionRights {
+    /** The session's privileges, keyed by privilege name (e.g. EntryAccess,
+RecordManager), with the value indicating whether the session holds that privilege. */
+    privileges?: {
+        [key: string]: boolean;
+    } | undefined;
+    /** The session's feature rights, keyed by feature-right name (e.g. Search,
+Import), with the value indicating whether the session holds that feature right. */
+    featureRights?: {
+        [key: string]: boolean;
+    } | undefined;
+    /** True when the current session is read-only, so no write operations are possible regardless
+of the granted privileges or feature rights. */
+    isReadOnly?: boolean;
+}
 /** Request body for starting an asynchronous search entry task. */
 export declare class StartSearchEntryRequest implements IStartSearchEntryRequest {
     /** The search command to run. The search command should follow the Laserfiche search syntax. https://doc.laserfiche.com/laserfiche.documentation/en-us/Default.htm#Search_Syntax.htm */
@@ -6127,6 +9372,7 @@ export declare class SearchContextHitCollectionResponse implements ISearchContex
     odataNextLink?: string | undefined;
     /** The total count of items within a collection. */
     odataCount?: number | undefined;
+    /** Gets or sets the OData response content in the "value". */
     value?: SearchContextHit[] | undefined;
     constructor(data?: ISearchContextHitCollectionResponse);
     init(_data?: any): void;
@@ -6139,6 +9385,7 @@ export interface ISearchContextHitCollectionResponse {
     odataNextLink?: string | undefined;
     /** The total count of items within a collection. */
     odataCount?: number | undefined;
+    /** Gets or sets the OData response content in the "value". */
     value?: SearchContextHit[] | undefined;
 }
 /** Represents a context hit for a search result. */
@@ -6244,12 +9491,75 @@ export interface ISearchEntryRequest {
     /** The search command to run. The search command should follow the Laserfiche search syntax. https://doc.laserfiche.com/laserfiche.documentation/en-us/Default.htm#Search_Syntax.htm */
     searchCommand: string;
 }
+/** A stamp in the repository stamp catalog. The stamp image is retrieved separately as a PNG. */
+export declare class Stamp implements IStamp {
+    /** The ID of the stamp. */
+    id?: number;
+    /** The display name of the stamp. */
+    name?: string | undefined;
+    /** A boolean indicating whether the stamp is public (shared) rather than personal. */
+    isPublic?: boolean;
+    /** The security identifier (SID) of the stamp's owner. */
+    owner?: string | undefined;
+    /** Optional application-defined custom data stored with the stamp. */
+    customData?: string | undefined;
+    /** The width of the stamp image in pixels. */
+    imageWidth?: number;
+    /** The height of the stamp image in pixels. */
+    imageHeight?: number;
+    constructor(data?: IStamp);
+    init(_data?: any): void;
+    static fromJS(data: any): Stamp;
+    toJSON(data?: any): any;
+}
+/** A stamp in the repository stamp catalog. The stamp image is retrieved separately as a PNG. */
+export interface IStamp {
+    /** The ID of the stamp. */
+    id?: number;
+    /** The display name of the stamp. */
+    name?: string | undefined;
+    /** A boolean indicating whether the stamp is public (shared) rather than personal. */
+    isPublic?: boolean;
+    /** The security identifier (SID) of the stamp's owner. */
+    owner?: string | undefined;
+    /** Optional application-defined custom data stored with the stamp. */
+    customData?: string | undefined;
+    /** The width of the stamp image in pixels. */
+    imageWidth?: number;
+    /** The height of the stamp image in pixels. */
+    imageHeight?: number;
+}
+/** Which stamps to list. */
+export declare enum StampScope {
+    Public = 0,
+    Personal = 1,
+    All = 2
+}
+/** Request body for updating a stamp's metadata. The stamp image cannot be changed after creation. */
+export declare class UpdateStampRequest implements IUpdateStampRequest {
+    /** The new display name of the stamp. Omit to leave unchanged. */
+    name?: string | undefined;
+    /** New custom data for the stamp. Omit to leave unchanged. */
+    customData?: string | undefined;
+    constructor(data?: IUpdateStampRequest);
+    init(_data?: any): void;
+    static fromJS(data: any): UpdateStampRequest;
+    toJSON(data?: any): any;
+}
+/** Request body for updating a stamp's metadata. The stamp image cannot be changed after creation. */
+export interface IUpdateStampRequest {
+    /** The new display name of the stamp. Omit to leave unchanged. */
+    name?: string | undefined;
+    /** New custom data for the stamp. Omit to leave unchanged. */
+    customData?: string | undefined;
+}
 /** Response containing a collection of TagDefinition. */
 export declare class TagDefinitionCollectionResponse implements ITagDefinitionCollectionResponse {
     /** A URL to retrieve the next page of the requested collection. */
     odataNextLink?: string | undefined;
     /** The total count of items within a collection. */
     odataCount?: number | undefined;
+    /** Gets or sets the OData response content in the "value". */
     value?: TagDefinition[] | undefined;
     constructor(data?: ITagDefinitionCollectionResponse);
     init(_data?: any): void;
@@ -6262,6 +9572,7 @@ export interface ITagDefinitionCollectionResponse {
     odataNextLink?: string | undefined;
     /** The total count of items within a collection. */
     odataCount?: number | undefined;
+    /** Gets or sets the OData response content in the "value". */
     value?: TagDefinition[] | undefined;
 }
 /** Represents an entry tag definition. */
@@ -6300,6 +9611,7 @@ export interface ITagDefinition {
 }
 /** Response containing a collection of TaskProgress. */
 export declare class TaskCollectionResponse implements ITaskCollectionResponse {
+    /** Gets or sets the OData response content in the "value". */
     value?: TaskProgress[] | undefined;
     constructor(data?: ITaskCollectionResponse);
     init(_data?: any): void;
@@ -6308,6 +9620,7 @@ export declare class TaskCollectionResponse implements ITaskCollectionResponse {
 }
 /** Response containing a collection of TaskProgress. */
 export interface ITaskCollectionResponse {
+    /** Gets or sets the OData response content in the "value". */
     value?: TaskProgress[] | undefined;
 }
 /** Represents the progress of a long operation task. */
@@ -6388,6 +9701,7 @@ export interface ITaskResult {
 }
 /** Response containing a collection of CancelTaskResult. */
 export declare class CancelTasksResponse implements ICancelTasksResponse {
+    /** Gets or sets the OData response content in the "value". */
     value?: CancelTaskResult[] | undefined;
     constructor(data?: ICancelTasksResponse);
     init(_data?: any): void;
@@ -6396,6 +9710,7 @@ export declare class CancelTasksResponse implements ICancelTasksResponse {
 }
 /** Response containing a collection of CancelTaskResult. */
 export interface ICancelTasksResponse {
+    /** Gets or sets the OData response content in the "value". */
     value?: CancelTaskResult[] | undefined;
 }
 /** Represents the result of cancelling a long operation task. */
@@ -6426,6 +9741,7 @@ export declare class TemplateDefinitionCollectionResponse implements ITemplateDe
     odataNextLink?: string | undefined;
     /** The total count of items within a collection. */
     odataCount?: number | undefined;
+    /** Gets or sets the OData response content in the "value". */
     value?: TemplateDefinition[] | undefined;
     constructor(data?: ITemplateDefinitionCollectionResponse);
     init(_data?: any): void;
@@ -6438,6 +9754,7 @@ export interface ITemplateDefinitionCollectionResponse {
     odataNextLink?: string | undefined;
     /** The total count of items within a collection. */
     odataCount?: number | undefined;
+    /** Gets or sets the OData response content in the "value". */
     value?: TemplateDefinition[] | undefined;
 }
 /** Response containing a collection of TemplateFieldDefinition. */
@@ -6446,6 +9763,7 @@ export declare class TemplateFieldDefinitionCollectionResponse implements ITempl
     odataNextLink?: string | undefined;
     /** The total count of items within a collection. */
     odataCount?: number | undefined;
+    /** Gets or sets the OData response content in the "value". */
     value?: TemplateFieldDefinition[] | undefined;
     constructor(data?: ITemplateFieldDefinitionCollectionResponse);
     init(_data?: any): void;
@@ -6458,6 +9776,7 @@ export interface ITemplateFieldDefinitionCollectionResponse {
     odataNextLink?: string | undefined;
     /** The total count of items within a collection. */
     odataCount?: number | undefined;
+    /** Gets or sets the OData response content in the "value". */
     value?: TemplateFieldDefinition[] | undefined;
 }
 /** Represents a template field definition. */
@@ -6714,6 +10033,367 @@ export interface IMoveTemplateFieldRequest {
 current field count are rejected with 400. */
     newPosition: number;
 }
+/** The access control list (ACL) of a template definition: its access control entries. Template ACLs have no parent inheritance, so there is no inherit-parents flag. */
+export declare class TemplateAccessControlList implements ITemplateAccessControlList {
+    /** The access control entries that make up the ACL. */
+    entries?: TemplateAccessControlEntry[] | undefined;
+    constructor(data?: ITemplateAccessControlList);
+    init(_data?: any): void;
+    static fromJS(data: any): TemplateAccessControlList;
+    toJSON(data?: any): any;
+}
+/** The access control list (ACL) of a template definition: its access control entries. Template ACLs have no parent inheritance, so there is no inherit-parents flag. */
+export interface ITemplateAccessControlList {
+    /** The access control entries that make up the ACL. */
+    entries?: TemplateAccessControlEntry[] | undefined;
+}
+/** A single access control entry (ACE) on a template definition: one trustee, whether its rights are allowed or denied, and the rights themselves. A trustee that has both allowed and denied rights is represented as two ACEs. Unlike entry ACEs, template ACEs have no scope and are never inherited. */
+export declare class TemplateAccessControlEntry implements ITemplateAccessControlEntry {
+    /** The trustee this ACE applies to. On input, identify the trustee by either
+trustee.sid or trustee.accountName (the SID takes precedence when both are given). */
+    trustee?: TrusteeIdentity | undefined;
+    /** Whether the ACE grants (Allow) or denies (Deny) the listed rights. Required on
+input — a missing value is rejected (it must not silently default to Allow). */
+    accessControlType?: AccessControlType | undefined;
+    /** The rights granted or denied by this ACE. */
+    rights?: TemplateRight[] | undefined;
+    /** True when this ACE is inherited. Always false for template ACEs (template definitions have
+no ACL inheritance); returned for contract symmetry and ignored on input. */
+    isInherited?: boolean;
+    /** When inherited, a description of where the ACE was inherited from. Output only; null for
+template ACEs. */
+    inheritedFrom?: string | undefined;
+    constructor(data?: ITemplateAccessControlEntry);
+    init(_data?: any): void;
+    static fromJS(data: any): TemplateAccessControlEntry;
+    toJSON(data?: any): any;
+}
+/** A single access control entry (ACE) on a template definition: one trustee, whether its rights are allowed or denied, and the rights themselves. A trustee that has both allowed and denied rights is represented as two ACEs. Unlike entry ACEs, template ACEs have no scope and are never inherited. */
+export interface ITemplateAccessControlEntry {
+    /** The trustee this ACE applies to. On input, identify the trustee by either
+trustee.sid or trustee.accountName (the SID takes precedence when both are given). */
+    trustee?: TrusteeIdentity | undefined;
+    /** Whether the ACE grants (Allow) or denies (Deny) the listed rights. Required on
+input — a missing value is rejected (it must not silently default to Allow). */
+    accessControlType?: AccessControlType | undefined;
+    /** The rights granted or denied by this ACE. */
+    rights?: TemplateRight[] | undefined;
+    /** True when this ACE is inherited. Always false for template ACEs (template definitions have
+no ACL inheritance); returned for contract symmetry and ignored on input. */
+    isInherited?: boolean;
+    /** When inherited, a description of where the ACE was inherited from. Output only; null for
+template ACEs. */
+    inheritedFrom?: string | undefined;
+}
+/** An individual access right that can be granted to or denied a trustee on a template definition. Serialized by name; emitted as a string enum in the OpenAPI schema so clients can reference it directly. */
+export declare enum TemplateRight {
+    ReadDefinition = "ReadDefinition",
+    Modify = "Modify",
+    Delete = "Delete",
+    ReadPermissions = "ReadPermissions",
+    ChangePermissions = "ChangePermissions",
+    TakeOwnership = "TakeOwnership"
+}
+/** Request body for replacing a template definition's access control list. The supplied entries fully replace the template's existing explicit ACL. Inherited entries are not accepted. */
+export declare class SetTemplateAccessControlRequest implements ISetTemplateAccessControlRequest {
+    /** The access control entries to set. Replaces the template's entire explicit ACL. */
+    entries?: TemplateAccessControlEntry[] | undefined;
+    constructor(data?: ISetTemplateAccessControlRequest);
+    init(_data?: any): void;
+    static fromJS(data: any): SetTemplateAccessControlRequest;
+    toJSON(data?: any): any;
+}
+/** Request body for replacing a template definition's access control list. The supplied entries fully replace the template's existing explicit ACL. Inherited entries are not accepted. */
+export interface ISetTemplateAccessControlRequest {
+    /** The access control entries to set. Replaces the template's entire explicit ACL. */
+    entries?: TemplateAccessControlEntry[] | undefined;
+}
+/** A trustee's rights to a template definition. Depending on the aclOnly option on the request, these are either the effective rights (the net result after group membership, allow/deny resolution, and the repository's privilege overlay) or the rights granted by the template's access control list alone. */
+export declare class TemplateRights implements ITemplateRights {
+    /** The rights granted to the trustee on the template. */
+    rights?: TemplateRight[] | undefined;
+    /** True when the session is read-only, so no write operations are possible regardless of
+the granted rights. */
+    isReadOnly?: boolean;
+    constructor(data?: ITemplateRights);
+    init(_data?: any): void;
+    static fromJS(data: any): TemplateRights;
+    toJSON(data?: any): any;
+}
+/** A trustee's rights to a template definition. Depending on the aclOnly option on the request, these are either the effective rights (the net result after group membership, allow/deny resolution, and the repository's privilege overlay) or the rights granted by the template's access control list alone. */
+export interface ITemplateRights {
+    /** The rights granted to the trustee on the template. */
+    rights?: TemplateRight[] | undefined;
+    /** True when the session is read-only, so no write operations are possible regardless of
+the granted rights. */
+    isReadOnly?: boolean;
+}
+/** A trustee's account security: the privileges and feature rights the trustee holds, the security tags assigned to it, the audit classes configured for it, and whether the trustee is read-only. Privileges, feature rights, and audit masks are reported as named booleans (each map keyed by the right's name with a granted true/false) rather than raw bitmasks. The values are either effective (the default — what applies once the trustee's group memberships are resolved) or direct (only what is assigned on the trustee record itself), selected by the request's includeInherited flag. The effective view is a documented best-effort computation: in rare cases it can differ from the trustee's real rights. The authoritative way to determine a trustee's security is to sign in as that trustee and read the resulting session's rights. */
+export declare class TrusteeSecurity implements ITrusteeSecurity {
+    /** The trustee's privileges, keyed by privilege name (e.g. EntryAccess,
+RecordManager), with the value indicating whether the trustee holds that privilege. */
+    privileges?: {
+        [key: string]: boolean;
+    } | undefined;
+    /** The trustee's feature rights, keyed by feature-right name (e.g. Search,
+Import), with the value indicating whether the trustee holds that feature right. */
+    featureRights?: {
+        [key: string]: boolean;
+    } | undefined;
+    /** True when the trustee is read-only, so no write operations are possible regardless of the
+granted privileges or feature rights. */
+    isReadOnly?: boolean;
+    /** The security tags assigned to the trustee. */
+    tags?: TrusteeTag[] | undefined;
+    /** The audit classes configured for the trustee, split into successful- and failed-operation
+masks. Each map is keyed by audit-class name with the value indicating whether that class is
+audited. */
+    auditMasks?: TrusteeAuditMasks | undefined;
+    constructor(data?: ITrusteeSecurity);
+    init(_data?: any): void;
+    static fromJS(data: any): TrusteeSecurity;
+    toJSON(data?: any): any;
+}
+/** A trustee's account security: the privileges and feature rights the trustee holds, the security tags assigned to it, the audit classes configured for it, and whether the trustee is read-only. Privileges, feature rights, and audit masks are reported as named booleans (each map keyed by the right's name with a granted true/false) rather than raw bitmasks. The values are either effective (the default — what applies once the trustee's group memberships are resolved) or direct (only what is assigned on the trustee record itself), selected by the request's includeInherited flag. The effective view is a documented best-effort computation: in rare cases it can differ from the trustee's real rights. The authoritative way to determine a trustee's security is to sign in as that trustee and read the resulting session's rights. */
+export interface ITrusteeSecurity {
+    /** The trustee's privileges, keyed by privilege name (e.g. EntryAccess,
+RecordManager), with the value indicating whether the trustee holds that privilege. */
+    privileges?: {
+        [key: string]: boolean;
+    } | undefined;
+    /** The trustee's feature rights, keyed by feature-right name (e.g. Search,
+Import), with the value indicating whether the trustee holds that feature right. */
+    featureRights?: {
+        [key: string]: boolean;
+    } | undefined;
+    /** True when the trustee is read-only, so no write operations are possible regardless of the
+granted privileges or feature rights. */
+    isReadOnly?: boolean;
+    /** The security tags assigned to the trustee. */
+    tags?: TrusteeTag[] | undefined;
+    /** The audit classes configured for the trustee, split into successful- and failed-operation
+masks. Each map is keyed by audit-class name with the value indicating whether that class is
+audited. */
+    auditMasks?: TrusteeAuditMasks | undefined;
+}
+/** A security tag assigned to a trustee. */
+export declare class TrusteeTag implements ITrusteeTag {
+    /** The tag's ID. */
+    id?: number;
+    /** The tag's name. */
+    name?: string | undefined;
+    /** True when the tag is a security tag. */
+    isSecure?: boolean;
+    constructor(data?: ITrusteeTag);
+    init(_data?: any): void;
+    static fromJS(data: any): TrusteeTag;
+    toJSON(data?: any): any;
+}
+/** A security tag assigned to a trustee. */
+export interface ITrusteeTag {
+    /** The tag's ID. */
+    id?: number;
+    /** The tag's name. */
+    name?: string | undefined;
+    /** True when the tag is a security tag. */
+    isSecure?: boolean;
+}
+/** The audit classes configured for a trustee, split by operation outcome. */
+export declare class TrusteeAuditMasks implements ITrusteeAuditMasks {
+    /** Audit classes audited on successful operations, keyed by audit-class name. */
+    success?: {
+        [key: string]: boolean;
+    } | undefined;
+    /** Audit classes audited on failed operations, keyed by audit-class name. */
+    failure?: {
+        [key: string]: boolean;
+    } | undefined;
+    constructor(data?: ITrusteeAuditMasks);
+    init(_data?: any): void;
+    static fromJS(data: any): TrusteeAuditMasks;
+    toJSON(data?: any): any;
+}
+/** The audit classes configured for a trustee, split by operation outcome. */
+export interface ITrusteeAuditMasks {
+    /** Audit classes audited on successful operations, keyed by audit-class name. */
+    success?: {
+        [key: string]: boolean;
+    } | undefined;
+    /** Audit classes audited on failed operations, keyed by audit-class name. */
+    failure?: {
+        [key: string]: boolean;
+    } | undefined;
+}
+/** Represents an entry referenced by a user's Recent Documents or Recent Folders list. */
+export declare class UserAreaEntry implements IUserAreaEntry {
+    /** The ID of the recently accessed entry. */
+    entryId?: number;
+    /** The full repository path of the recently accessed entry. */
+    fullPath?: string | undefined;
+    constructor(data?: IUserAreaEntry);
+    init(_data?: any): void;
+    static fromJS(data: any): UserAreaEntry;
+    toJSON(data?: any): any;
+}
+/** Represents an entry referenced by a user's Recent Documents or Recent Folders list. */
+export interface IUserAreaEntry {
+    /** The ID of the recently accessed entry. */
+    entryId?: number;
+    /** The full repository path of the recently accessed entry. */
+    fullPath?: string | undefined;
+}
+/** Request body for starring or unstarring one or more entries. */
+export declare class StarEntriesRequest implements IStarEntriesRequest {
+    /** The IDs of the entries to star or unstar. Must contain at least one entry ID. */
+    entryIds?: number[] | undefined;
+    constructor(data?: IStarEntriesRequest);
+    init(_data?: any): void;
+    static fromJS(data: any): StarEntriesRequest;
+    toJSON(data?: any): any;
+}
+/** Request body for starring or unstarring one or more entries. */
+export interface IStarEntriesRequest {
+    /** The IDs of the entries to star or unstar. Must contain at least one entry ID. */
+    entryIds?: number[] | undefined;
+}
+/** Represents a user's Personal Collection — a named, per-user set of entries. */
+export declare class PersonalCollection implements IPersonalCollection {
+    /** The stable identifier of the collection (the underlying user-area name). */
+    id?: string | undefined;
+    /** The display name of the collection. */
+    name?: string | undefined;
+    /** The IDs of the entries contained in the collection. */
+    entryIds?: number[] | undefined;
+    constructor(data?: IPersonalCollection);
+    init(_data?: any): void;
+    static fromJS(data: any): PersonalCollection;
+    toJSON(data?: any): any;
+}
+/** Represents a user's Personal Collection — a named, per-user set of entries. */
+export interface IPersonalCollection {
+    /** The stable identifier of the collection (the underlying user-area name). */
+    id?: string | undefined;
+    /** The display name of the collection. */
+    name?: string | undefined;
+    /** The IDs of the entries contained in the collection. */
+    entryIds?: number[] | undefined;
+}
+/** Request body for creating a Personal Collection. */
+export declare class CreatePersonalCollectionRequest implements ICreatePersonalCollectionRequest {
+    /** The display name for the new collection. Required, must be 256 characters or fewer, and must not
+duplicate an existing collection name or a reserved name. */
+    name?: string | undefined;
+    constructor(data?: ICreatePersonalCollectionRequest);
+    init(_data?: any): void;
+    static fromJS(data: any): CreatePersonalCollectionRequest;
+    toJSON(data?: any): any;
+}
+/** Request body for creating a Personal Collection. */
+export interface ICreatePersonalCollectionRequest {
+    /** The display name for the new collection. Required, must be 256 characters or fewer, and must not
+duplicate an existing collection name or a reserved name. */
+    name?: string | undefined;
+}
+/** Request body for renaming a Personal Collection. */
+export declare class RenamePersonalCollectionRequest implements IRenamePersonalCollectionRequest {
+    /** The new display name for the collection. Same constraints as creation. */
+    name?: string | undefined;
+    constructor(data?: IRenamePersonalCollectionRequest);
+    init(_data?: any): void;
+    static fromJS(data: any): RenamePersonalCollectionRequest;
+    toJSON(data?: any): any;
+}
+/** Request body for renaming a Personal Collection. */
+export interface IRenamePersonalCollectionRequest {
+    /** The new display name for the collection. Same constraints as creation. */
+    name?: string | undefined;
+}
+/** Request body carrying a set of entry IDs (used to add or remove entries from a collection). */
+export declare class EntryIdsRequest implements IEntryIdsRequest {
+    /** The IDs of the entries to add or remove. Must contain at least one entry ID. */
+    entryIds?: number[] | undefined;
+    constructor(data?: IEntryIdsRequest);
+    init(_data?: any): void;
+    static fromJS(data: any): EntryIdsRequest;
+    toJSON(data?: any): any;
+}
+/** Request body carrying a set of entry IDs (used to add or remove entries from a collection). */
+export interface IEntryIdsRequest {
+    /** The IDs of the entries to add or remove. Must contain at least one entry ID. */
+    entryIds?: number[] | undefined;
+}
+/** Represents a generic, owner-scoped user area (the raw primitive). Application-managed areas (Personal Collections, Starred, Recent) are excluded from this surface. */
+export declare class UserArea implements IUserArea {
+    /** The ID of the user area. */
+    id?: number;
+    /** The name of the user area. */
+    name?: string | undefined;
+    /** An optional comment associated with the user area. */
+    comment?: string | undefined;
+    /** An optional opaque application-defined data string associated with the user area. */
+    data?: string | undefined;
+    constructor(data?: IUserArea);
+    init(_data?: any): void;
+    static fromJS(data: any): UserArea;
+    toJSON(data?: any): any;
+}
+/** Represents a generic, owner-scoped user area (the raw primitive). Application-managed areas (Personal Collections, Starred, Recent) are excluded from this surface. */
+export interface IUserArea {
+    /** The ID of the user area. */
+    id?: number;
+    /** The name of the user area. */
+    name?: string | undefined;
+    /** An optional comment associated with the user area. */
+    comment?: string | undefined;
+    /** An optional opaque application-defined data string associated with the user area. */
+    data?: string | undefined;
+}
+/** Request body for creating a generic user area. */
+export declare class CreateUserAreaRequest implements ICreateUserAreaRequest {
+    /** The name for the new user area. Required. Names reserved for application-managed areas
+(the pc_ prefix and the well-known Starred/Recent area names) are rejected. */
+    name?: string | undefined;
+    /** An optional comment for the user area. */
+    comment?: string | undefined;
+    /** An optional opaque application-defined data string for the user area. */
+    data?: string | undefined;
+    constructor(data?: ICreateUserAreaRequest);
+    init(_data?: any): void;
+    static fromJS(data: any): CreateUserAreaRequest;
+    toJSON(data?: any): any;
+}
+/** Request body for creating a generic user area. */
+export interface ICreateUserAreaRequest {
+    /** The name for the new user area. Required. Names reserved for application-managed areas
+(the pc_ prefix and the well-known Starred/Recent area names) are rejected. */
+    name?: string | undefined;
+    /** An optional comment for the user area. */
+    comment?: string | undefined;
+    /** An optional opaque application-defined data string for the user area. */
+    data?: string | undefined;
+}
+/** Request body for updating a generic user area. Only non-null properties are applied. */
+export declare class UpdateUserAreaRequest implements IUpdateUserAreaRequest {
+    /** The new name for the user area. null leaves it unchanged. Reserved names are rejected. */
+    name?: string | undefined;
+    /** The new comment. null leaves it unchanged. */
+    comment?: string | undefined;
+    /** The new data string. null leaves it unchanged. */
+    data?: string | undefined;
+    constructor(data?: IUpdateUserAreaRequest);
+    init(_data?: any): void;
+    static fromJS(data: any): UpdateUserAreaRequest;
+    toJSON(data?: any): any;
+}
+/** Request body for updating a generic user area. Only non-null properties are applied. */
+export interface IUpdateUserAreaRequest {
+    /** The new name for the user area. null leaves it unchanged. Reserved names are rejected. */
+    name?: string | undefined;
+    /** The new comment. null leaves it unchanged. */
+    comment?: string | undefined;
+    /** The new data string. null leaves it unchanged. */
+    data?: string | undefined;
+}
 export interface FileParameter {
     data: any;
     fileName: string;
@@ -6727,32 +10407,42 @@ export interface FileResponse {
     };
 }
 export interface IRepositoryApiClient {
+    accessControlClient: IAccessControlClient;
+    annotationsClient: IAnnotationsClient;
     attributesClient: IAttributesClient;
     auditReasonsClient: IAuditReasonsClient;
     entriesClient: IEntriesClient;
     fieldDefinitionsClient: IFieldDefinitionsClient;
+    recordsManagementClient: IRecordsManagementClient;
     repositoriesClient: IRepositoriesClient;
     searchesClient: ISearchesClient;
     simpleSearchesClient: ISimpleSearchesClient;
+    stampsClient: IStampsClient;
     tagDefinitionsClient: ITagDefinitionsClient;
     tasksClient: ITasksClient;
     templateDefinitionsClient: ITemplateDefinitionsClient;
     linkDefinitionsClient: ILinkDefinitionsClient;
+    userAreasClient: IUserAreasClient;
     defaultRequestHeaders: Record<string, string>;
 }
 export declare class RepositoryApiClient implements IRepositoryApiClient {
     private baseUrl;
+    accessControlClient: IAccessControlClient;
+    annotationsClient: IAnnotationsClient;
     attributesClient: IAttributesClient;
     auditReasonsClient: IAuditReasonsClient;
     entriesClient: IEntriesClient;
     fieldDefinitionsClient: IFieldDefinitionsClient;
+    recordsManagementClient: IRecordsManagementClient;
     repositoriesClient: IRepositoriesClient;
     searchesClient: ISearchesClient;
     simpleSearchesClient: ISimpleSearchesClient;
+    stampsClient: IStampsClient;
     tagDefinitionsClient: ITagDefinitionsClient;
     tasksClient: ITasksClient;
     templateDefinitionsClient: ITemplateDefinitionsClient;
     linkDefinitionsClient: ILinkDefinitionsClient;
+    userAreasClient: IUserAreasClient;
     private repoClientHandler;
     /**
      * Get the headers which will be sent with each request.