@openremote/rest 1.31.0-snapshot.20260924080557 → 1.31.0

package/build/lib/restclient.d.ts

@@ -9,674 +9,622 @@ export interface HttpClient<O> {
         options?: O;
     }): RestResponse<R>;
 }
-export declare class AppResourceClient<O> {
+export declare class RealmResourceClient<O> {
     protected httpClient: HttpClient<O>;
     constructor(httpClient: HttpClient<O>);
     /**
-     * Returns the identifiers of applications installed in the Manager web root.
-     * HTTP GET /apps
-     * Java method: org.openremote.model.apps.AppResource.getApps
+     * Creates and configures a realm in the identity provider. This operation is restricted to a super user.
+     * HTTP POST /realm
+     * Java method: org.openremote.model.security.RealmResource.create
      */
-    getApps(options?: O): RestResponse<string[]>;
+    create(realm: Model.Realm, options?: O): RestResponse<void>;
     /**
-     * Loads the public console_config.json document used to configure console clients before sign-in.
-     * HTTP GET /apps/consoleConfig
-     * Java method: org.openremote.model.apps.AppResource.getConsoleConfig
+     * Returns complete realm records from the identity provider. This operation is restricted to a super user.
+     * HTTP GET /realm
+     * Java method: org.openremote.model.security.RealmResource.getAll
      */
-    getConsoleConfig(options?: O): RestResponse<any>;
+    getAll(options?: O): RestResponse<Model.Realm[]>;
     /**
-     * Loads each installed application's info.json file and returns the documents keyed by application identifier.
-     * HTTP GET /apps/info
-     * Java method: org.openremote.model.apps.AppResource.getAppInfos
+     * Returns only realm name and display name. Super users receive all realms; authenticated users receive their realm; anonymous callers receive the request realm.
+     * HTTP GET /realm/accessible
+     * Java method: org.openremote.model.security.RealmResource.getAccessible
      */
-    getAppInfos(options?: O): RestResponse<{
-        [index: string]: any;
-    }>;
+    getAccessible(options?: O): RestResponse<Model.Realm[]>;
+    /**
+     * Permanently deletes a realm from the identity provider. The master realm cannot be deleted; related Manager data is not automatically removed.
+     * Response code 405 - The master realm cannot be deleted
+     * HTTP DELETE /realm/{name}
+     * Java method: org.openremote.model.security.RealmResource.delete
+     */
+    delete(name: string, options?: O): RestResponse<void>;
+    /**
+     * Returns complete details for a named active realm when it is accessible to the caller. Regular users cannot use this endpoint to inspect other realms.
+     * HTTP GET /realm/{name}
+     * Java method: org.openremote.model.security.RealmResource.get
+     */
+    get(name: string, options?: O): RestResponse<Model.Realm>;
+    /**
+     * Updates a realm through the identity provider. Super-user access is required; the master realm cannot be renamed or disabled.
+     * Response code 405 - The requested mutation is not allowed for the master realm
+     * HTTP PUT /realm/{name}
+     * Java method: org.openremote.model.security.RealmResource.update
+     */
+    update(name: string, realm: Model.Realm, options?: O): RestResponse<void>;
 }
-export declare class GatewayClientResourceClient<O> {
+export declare class DashboardResourceClient<O> {
     protected httpClient: HttpClient<O>;
     constructor(httpClient: HttpClient<O>);
     /**
-     * Removes connections for all repeated realm query parameters. Deleting multiple realms is restricted to super users.
-     * HTTP DELETE /gateway/connection
-     * Java method: org.openremote.model.gateway.GatewayClientResource.deleteConnections
+     * Creates a dashboard in an accessible realm. The server assigns the authenticated user as owner and initially stores the dashboard with shared access.
+     * HTTP POST /dashboard
+     * Java method: org.openremote.model.dashboard.DashboardResource.create
      */
-    deleteConnections(queryParams?: {
-        realm?: string[];
-    }, options?: O): RestResponse<void>;
+    create(dashboard: Model.Dashboard, options?: O): RestResponse<Model.Dashboard>;
     /**
-     * Returns every configured central-manager connection. Unlike the single-realm endpoint, this operation is restricted to super users.
-     * HTTP GET /gateway/connection
-     * Java method: org.openremote.model.gateway.GatewayClientResource.getConnections
+     * Updates an existing dashboard when the authenticated user can modify it in the dashboard's realm.
+     * HTTP PUT /dashboard
+     * Java method: org.openremote.model.dashboard.DashboardResource.update
      */
-    getConnections(options?: O): RestResponse<Model.GatewayConnection[]>;
+    update(dashboard: Model.Dashboard, options?: O): RestResponse<Model.Dashboard>;
     /**
-     * Removes the central-manager connection for one realm. Realm administrators can remove their own connection; super users can remove any connection.
-     * HTTP DELETE /gateway/connection/{realm}
-     * Java method: org.openremote.model.gateway.GatewayClientResource.deleteConnection
+     * Returns dashboards visible to the caller in the requested realm. Anonymous callers receive public dashboards only; authenticated access also depends on roles, ownership, and linked assets.
+     * HTTP GET /dashboard/all/{realm}
+     * Java method: org.openremote.model.dashboard.DashboardResource.getAllRealmDashboards
      */
-    deleteConnection(realm: string, options?: O): RestResponse<void>;
+    getAllRealmDashboards(realm: string, options?: O): RestResponse<Model.Dashboard[]>;
     /**
-     * Returns the central-manager connection configured for a realm, or null when none exists. Realm administrators can read their own realm; super users can read any realm.
-     * Response code 204 - No gateway connection is configured for the realm
-     * HTTP GET /gateway/connection/{realm}
-     * Java method: org.openremote.model.gateway.GatewayClientResource.getConnection
+     * Executes a dashboard query after constraining it to the caller's realm, roles, ownership, and asset access. A missing body uses the request realm and default visibility rules.
+     * HTTP POST /dashboard/query
+     * Java method: org.openremote.model.dashboard.DashboardResource.query
      */
-    getConnection(realm: string, options?: O): RestResponse<Model.GatewayConnection>;
+    query(dashboardQuery: Model.DashboardQuery, options?: O): RestResponse<Model.Dashboard[]>;
     /**
-     * Creates or replaces the connection for the path realm. The server forces the local realm, including realm predicates in attribute filters, to match the path.
-     * HTTP PUT /gateway/connection/{realm}
-     * Java method: org.openremote.model.gateway.GatewayClientResource.setConnection
+     * Permanently removes a dashboard when the authenticated user can modify it in the requested realm.
+     * HTTP DELETE /dashboard/{realm}/{dashboardId}
+     * Java method: org.openremote.model.dashboard.DashboardResource.delete
      */
-    setConnection(realm: string, connection: Model.GatewayConnection, options?: O): RestResponse<void>;
+    delete(realm: string, dashboardId: string, options?: O): RestResponse<void>;
     /**
-     * Returns the live connection state for the requested local realm.
-     * HTTP GET /gateway/status/{realm}
-     * Java method: org.openremote.model.gateway.GatewayClientResource.getConnectionStatus
+     * Returns one dashboard only when it is visible to the caller. Inaccessible and nonexistent dashboards both return 404 to avoid disclosing their existence.
+     * HTTP GET /dashboard/{realm}/{dashboardId}
+     * Java method: org.openremote.model.dashboard.DashboardResource.get
      */
-    getConnectionStatus(realm: string, options?: O): RestResponse<Model.ConnectionStatus>;
+    get(realm: string, dashboardId: string, options?: O): RestResponse<Model.Dashboard>;
 }
-export declare class AssetModelResourceClient<O> {
+export declare class AssetResourceClient<O> {
     protected httpClient: HttpClient<O>;
     constructor(httpClient: HttpClient<O>);
     /**
-     * Returns the descriptors used to construct supported asset types, using a gateway model when the optional parent context resolves below a gateway.
-     * HTTP GET /model/assetDescriptors
-     * Java method: org.openremote.model.asset.AssetModelResource.getAssetDescriptors
+     * Creates an asset in an accessible realm and returns the persisted representation. The server generates an ID when absent; supplied IDs must be globally unique and 22 characters long.
+     * HTTP POST /asset
+     * Java method: org.openremote.model.asset.AssetResource.create
      */
-    getAssetDescriptors(queryParams?: {
-        parentId?: string;
-        parentType?: string;
-    }, options?: O): RestResponse<Model.AssetDescriptor[]>;
+    create(asset: Model.Asset, options?: O): RestResponse<Model.Asset>;
     /**
-     * Returns metadata for one asset type from this Manager or, when parentId is below a gateway, from that gateway's model. An unknown or gateway-provided type that is not locally available returns no content.
-     * Response code 204 - No model information is available for the requested asset type
-     * HTTP GET /model/assetInfo/{assetType}
-     * Java method: org.openremote.model.asset.AssetModelResource.getAssetInfo
+     * Permanently deletes every asset identified by repeated assetId query parameters, subject to realm and restricted-user access rules.
+     * HTTP DELETE /asset
+     * Java method: org.openremote.model.asset.AssetResource.delete
      */
-    getAssetInfo(assetType: string, queryParams?: {
-        parentId?: string;
-    }, options?: O): RestResponse<Model.AssetTypeInfo>;
+    delete(queryParams?: {
+        assetId?: string[];
+    }, options?: O): RestResponse<void>;
     /**
-     * Returns type metadata from this Manager by default. When parentId identifies an asset below a gateway, the gateway's model is used instead; parentType can provide type context for a new parent that does not yet exist.
-     * HTTP GET /model/assetInfos
-     * Java method: org.openremote.model.asset.AssetModelResource.getAssetInfos
+     * Submits a batch of attribute states using current server time and returns one result per input item. Authorization and processing failures are encoded in each AttributeWriteResult rather than returned as an HTTP error.
+     * HTTP PUT /asset/attributes
+     * Java method: org.openremote.model.asset.AssetResource.writeAttributeValues
      */
-    getAssetInfos(queryParams?: {
-        parentId?: string;
-        parentType?: string;
-    }, options?: O): RestResponse<Model.AssetTypeInfo[]>;
+    writeAttributeValues(attributeStates: Model.AttributeState[], options?: O): RestResponse<Model.AttributeWriteResult[]>;
     /**
-     * Returns the JSON Schema and a weak ETag for the named value descriptor. Send If-None-Match on later requests to receive 304 when the schema has not changed.
-     * Response code 200 - The current JSON Schema
-     * Response code 304 - The supplied ETag still identifies the current schema
-     * HTTP GET /model/getValueDescriptorSchema
-     * Java method: org.openremote.model.asset.AssetModelResource.getValueDescriptorSchema
+     * Submits a batch of complete attribute events and returns one result per input item. Supplied timestamps are preserved; authorization and processing failures are encoded per result rather than returned as an HTTP error.
+     * HTTP PUT /asset/attributes/timestamp
+     * Java method: org.openremote.model.asset.AssetResource.writeAttributeEvents
      */
-    getValueDescriptorSchema(queryParams?: {
-        name?: string;
-    }, options?: O): RestResponse<any>;
+    writeAttributeEvents(attributeEvents: Model.AttributeEvent[], options?: O): RestResponse<Model.AttributeWriteResult[]>;
     /**
-     * Returns attribute metadata descriptors keyed by descriptor name, using a gateway model when parentId resolves below a gateway.
-     * HTTP GET /model/metaItemDescriptors
-     * Java method: org.openremote.model.asset.AssetModelResource.getMetaItemDescriptors
+     * Returns only the number of assets matching an AssetQuery after applying the caller's realm, public, and linked-asset access constraints.
+     * HTTP POST /asset/count
+     * Java method: org.openremote.model.asset.AssetResource.queryCount
      */
-    getMetaItemDescriptors(queryParams?: {
-        parentId?: string;
-    }, options?: O): RestResponse<{
-        [index: string]: Model.MetaItemDescriptor;
-    }>;
+    queryCount(query: Model.AssetQuery, options?: O): RestResponse<number>;
     /**
-     * Returns attribute value descriptors keyed by descriptor name, using a gateway model when parentId resolves below a gateway.
-     * HTTP GET /model/valueDescriptors
-     * Java method: org.openremote.model.asset.AssetModelResource.getValueDescriptors
+     * Clears the parent reference of every asset listed in repeated assetIds query parameters.
+     * HTTP DELETE /asset/parent
+     * Java method: org.openremote.model.asset.AssetResource.updateNoneParent
      */
-    getValueDescriptors(queryParams?: {
-        parentId?: string;
-    }, options?: O): RestResponse<{
-        [index: string]: Model.ValueDescriptor;
-    }>;
-}
-export declare class AgentResourceClient<O> {
-    protected httpClient: HttpClient<O>;
-    constructor(httpClient: HttpClient<O>);
+    updateNoneParent(queryParams?: {
+        assetIds?: string[];
+    }, options?: O): RestResponse<void>;
     /**
-     * Runs the agent protocol's asset discovery, waits up to ten seconds for results, returns the discovered tree, and asynchronously persists discovered assets below the agent.
-     * HTTP GET /agent/assetDiscovery/{agentId}
-     * Java method: org.openremote.model.asset.agent.AgentResource.doProtocolAssetDiscovery
+     * Returns the asset identity and properties without loading attributes or path data. The same access rules as getAsset apply.
+     * HTTP GET /asset/partial/{assetId}
+     * Java method: org.openremote.model.asset.AssetResource.getPartial
      */
-    doProtocolAssetDiscovery(agentId: string, queryParams?: {
-        realm?: string;
-    }, options?: O): RestResponse<Model.AssetTreeNode[]>;
+    getPartial(assetId: string, options?: O): RestResponse<Model.Asset>;
     /**
-     * Decodes the supplied FileInfo, asks the agent protocol to import it, persists the returned asset tree below the agent, and returns that tree.
-     * Response code 405 - The selected agent protocol does not support asset import
-     * HTTP POST /agent/assetImport/{agentId}
-     * Java method: org.openremote.model.asset.agent.AgentResource.doProtocolAssetImport
+     * Executes an AssetQuery after constraining realm and linked-asset access. Anonymous callers receive public-readable assets only; the query select clause controls which fields are populated.
+     * HTTP POST /asset/query
+     * Java method: org.openremote.model.asset.AssetResource.queryAssets
      */
-    doProtocolAssetImport(agentId: string, fileInfo: Model.FileInfo, queryParams?: {
-        realm?: string;
-    }, options?: O): RestResponse<Model.AssetTreeNode[]>;
+    queryAssets(query: Model.AssetQuery, options?: O): RestResponse<Model.Asset[]>;
     /**
-     * Runs instance discovery for an agent type and returns candidate Agent assets. parentId selects local versus edge-gateway discovery; non-super users are always constrained to their authenticated realm.
-     * Response code 415 - The selected agent protocol does not support instance discovery
-     * HTTP GET /agent/instanceDiscovery/{agentType}
-     * Java method: org.openremote.model.asset.agent.AgentResource.doProtocolInstanceDiscovery
+     * Applies the same authorization and selection rules as queryAssets, then returns a hierarchy optimized for tree display rather than a flat asset array.
+     * HTTP POST /asset/tree
+     * Java method: org.openremote.model.asset.AssetResource.queryAssetTree
      */
-    doProtocolInstanceDiscovery(agentType: string, queryParams?: {
-        parentId?: string;
-        realm?: string;
-    }, options?: O): RestResponse<Model.Agent[]>;
-}
-export declare class AssetPredictedDatapointResourceClient<O> {
-    protected httpClient: HttpClient<O>;
-    constructor(httpClient: HttpClient<O>);
+    queryAssetTree(query: Model.AssetQuery, options?: O): RestResponse<Model.AssetTree>;
     /**
-     * Queries predicted values for one attribute using the supplied time-range and aggregation criteria. Anonymous access requires public-read access on both asset and attribute.
-     * HTTP POST /asset/predicted/{assetId}/{attributeName}
-     * Java method: org.openremote.model.datapoint.AssetPredictedDatapointResource.getPredictedDatapoints
+     * Returns partial linked assets for a restricted user, root assets for an unrestricted realm user, and an empty array for a super user. Attributes and paths are omitted; use getAsset for full details.
+     * HTTP GET /asset/user/current
+     * Java method: org.openremote.model.asset.AssetResource.getCurrentUserAssets
      */
-    getPredictedDatapoints(assetId: string, attributeName: string, query: Model.AssetDatapointQueryUnion, options?: O): RestResponse<Model.ValueDatapoint<any>[]>;
+    getCurrentUserAssets(options?: O): RestResponse<Model.Asset[]>;
     /**
-     * Replaces or adds predicted values for one attribute. Anonymous access is allowed only when the asset and attribute are public-write; authenticated callers require attribute-write access.
-     * HTTP PUT /asset/predicted/{assetId}/{attributeName}
-     * Java method: org.openremote.model.datapoint.AssetPredictedDatapointResource.writePredictedDatapoints
+     * Creates all supplied links as one operation. Every item must identify the same realm and user, and every referenced realm, user, and asset must exist.
+     * HTTP POST /asset/user/link
+     * Java method: org.openremote.model.asset.AssetResource.createUserAssetLinks
      */
-    writePredictedDatapoints(assetId: string, attributeName: string, predictedDatapoints: Model.ValueDatapoint<any>[], options?: O): RestResponse<void>;
-}
-export declare class StatusResourceClient<O> {
-    protected httpClient: HttpClient<O>;
-    constructor(httpClient: HttpClient<O>);
+    createUserAssetLinks(userAssets: Model.UserAssetLink[], options?: O): RestResponse<void>;
     /**
-     * Returns health data keyed by registered health-provider name. A null provider result is represented as JSON null.
-     * HTTP GET /health
-     * Java method: org.openremote.model.system.StatusResource.getHealthStatus
+     * Returns user-asset links in the required realm, optionally filtered by userId and assetId. Missing users or assets produce an empty result; restricted users cannot call this operation.
+     * HTTP GET /asset/user/link
+     * Java method: org.openremote.model.asset.AssetResource.getUserAssetLinks
      */
-    getHealthStatus(options?: O): RestResponse<{
-        [index: string]: any;
-    }>;
+    getUserAssetLinks(queryParams?: {
+        realm?: string;
+        userId?: string;
+        assetId?: string;
+    }, options?: O): RestResponse<Model.UserAssetLink[]>;
     /**
-     * Returns public bootstrap information, including the Manager version and identity-provider URL.
-     * HTTP GET /info
-     * Java method: org.openremote.model.system.StatusResource.getInfo
-     */
-    getInfo(options?: O): RestResponse<{
-        [index: string]: any;
-    }>;
-}
-export declare class ConsoleResourceClient<O> {
-    protected httpClient: HttpClient<O>;
-    constructor(httpClient: HttpClient<O>);
-    /**
-     * Creates an anonymous console registration when id is absent, or updates an existing registration when id is present. Authenticated new registrations are linked to the caller; updates require that link. The returned registration contains the durable asset ID for later calls.
-     * HTTP POST /console/register
-     * Java method: org.openremote.model.console.ConsoleResource.register
-     */
-    register(consoleRegistration: Model.ConsoleRegistration, options?: O): RestResponse<Model.ConsoleRegistration>;
-}
-export declare class GatewayServiceResourceClient<O> {
-    protected httpClient: HttpClient<O>;
-    constructor(httpClient: HttpClient<O>);
-    /**
-     * Requests a TCP tunnel through a connected gateway and returns its allocated local endpoint. When realm is omitted, the authenticated realm is used.
-     * Response code 417 - The gateway could not establish the requested tunnel
-     * HTTP POST /gateway/tunnel
-     * Java method: org.openremote.model.gateway.GatewayServiceResource.startTunnel
-     */
-    startTunnel(tunnelInfo: Model.GatewayTunnelInfo, options?: O): RestResponse<Model.GatewayTunnelInfo>;
-    /**
-     * Stops the tunnel identified by the supplied gateway, target, and port information. When realm is omitted, the authenticated realm is used.
-     * HTTP DELETE /gateway/tunnel
-     * Java method: org.openremote.model.gateway.GatewayServiceResource.stopTunnel
-     */
-    stopTunnel(tunnelInfo: Model.GatewayTunnelInfo, options?: O): RestResponse<void>;
-    /**
-     * Returns active tunnels for all gateway assets in the requested realm. Restricted users cannot list an entire realm.
-     * HTTP GET /gateway/tunnel/{realm}
-     * Java method: org.openremote.model.gateway.GatewayServiceResource.getAllActiveTunnelInfos
-     */
-    getAllActiveTunnelInfos(realm: string, options?: O): RestResponse<Model.GatewayTunnelInfo[]>;
-    /**
-     * Returns active tunnels for one gateway asset. Restricted users may query only a linked gateway.
-     * HTTP GET /gateway/tunnel/{realm}/{id}
-     * Java method: org.openremote.model.gateway.GatewayServiceResource.getGatewayActiveTunnelInfos
-     */
-    getGatewayActiveTunnelInfos(realm: string, id: string, options?: O): RestResponse<Model.GatewayTunnelInfo[]>;
-    /**
-     * Returns the tunnel matching realm, gateway, target host, and target port, or null when no active tunnel matches.
-     * Response code 204 - No active tunnel matches the requested endpoint
-     * HTTP GET /gateway/tunnel/{realm}/{id}/{target}/{targetPort}
-     * Java method: org.openremote.model.gateway.GatewayServiceResource.getActiveTunnelInfo
-     */
-    getActiveTunnelInfo(realm: string, id: string, target: string, targetPort: number, options?: O): RestResponse<Model.GatewayTunnelInfo>;
-}
-export declare class ExternalServiceResourceClient<O> {
-    protected httpClient: HttpClient<O>;
-    constructor(httpClient: HttpClient<O>);
-    /**
-     * Returns all active realm-scoped service registrations for an active realm accessible to the caller.
-     * Response code 200 - List of registered external services
-     * HTTP GET /service
-     * Java method: org.openremote.model.services.ExternalServiceResource.getServices
-     */
-    getServices(queryParams?: {
-        realm?: string;
-    }, options?: O): RestResponse<Model.ExternalService[]>;
-    /**
-     * Registers a realm-scoped service instance for the request realm. The caller must be a service account; the returned object contains the assigned instance ID and initial lease state.
-     * Response code 200 - Service registered successfully
-     * Response code 400 - Invalid external service object
-     * Response code 409 - ExternalService instance already registered
-     * HTTP POST /service
-     * Java method: org.openremote.model.services.ExternalServiceResource.registerService
-     */
-    registerService(service: Model.ExternalService, options?: O): RestResponse<Model.ExternalService>;
-    /**
-     * Returns active registrations marked as globally available across realms.
-     * Response code 200 - List of registered external services
-     * HTTP GET /service/global
-     * Java method: org.openremote.model.services.ExternalServiceResource.getGlobalServices
+     * Removes all supplied links. Every item must identify the same realm and user.
+     * HTTP POST /asset/user/link/delete
+     * Java method: org.openremote.model.asset.AssetResource.deleteUserAssetLinks
      */
-    getGlobalServices(options?: O): RestResponse<Model.ExternalService[]>;
+    deleteUserAssetLinks(userAssets: Model.UserAssetLink[], options?: O): RestResponse<void>;
     /**
-     * Registers a service visible in every realm. The caller must be a super-user service account and the request must use the master realm.
-     * Response code 200 - Service registered successfully
-     * Response code 400 - Invalid external service object
-     * Response code 409 - ExternalService instance already registered
-     * HTTP POST /service/global
-     * Java method: org.openremote.model.services.ExternalServiceResource.registerGlobalService
+     * Removes every asset link belonging to the user in the requested realm.
+     * HTTP DELETE /asset/user/link/{realm}/{userId}
+     * Java method: org.openremote.model.asset.AssetResource.deleteAllUserAssetLinks
      */
-    registerGlobalService(service: Model.ExternalService, options?: O): RestResponse<Model.ExternalService>;
+    deleteAllUserAssetLinks(realm: string, userId: string, options?: O): RestResponse<void>;
     /**
-     * Removes an active service registration. The caller must be the service account that registered it; global-service removal additionally requires a super user.
-     * Response code 204 - Service deregistered successfully
-     * Response code 404 - Service instance not found
-     * HTTP DELETE /service/{serviceId}/{instanceId}
-     * Java method: org.openremote.model.services.ExternalServiceResource.deregisterService
+     * Removes the link identified by realm, user, and asset. The caller must be allowed to administer asset links in that realm.
+     * HTTP DELETE /asset/user/link/{realm}/{userId}/{assetId}
+     * Java method: org.openremote.model.asset.AssetResource.deleteUserAssetLink
      */
-    deregisterService(serviceId: string, instanceId: number, options?: O): RestResponse<void>;
+    deleteUserAssetLink(realm: string, userId: string, assetId: string, options?: O): RestResponse<void>;
     /**
-     * Returns one registered instance by stable service ID and numeric instance ID, after verifying access to the service's realm.
-     * Response code 200 - ExternalService retrieved successfully
-     * Response code 404 - ExternalService not found
-     * HTTP GET /service/{serviceId}/{instanceId}
-     * Java method: org.openremote.model.services.ExternalServiceResource.getService
+     * Returns a fully loaded asset including its path and attributes. Access is constrained to the caller's realm and, for restricted users, linked assets.
+     * HTTP GET /asset/{assetId}
+     * Java method: org.openremote.model.asset.AssetResource.get
      */
-    getService(serviceId: string, instanceId: number, options?: O): RestResponse<Model.ExternalService>;
+    get(assetId: string, options?: O): RestResponse<Model.Asset>;
     /**
-     * Extends the lease of one service instance. The caller must be the service account that registered it; global-service heartbeats additionally require a super user.
-     * Response code 204 - Heartbeat sent successfully
-     * Response code 404 - Service instance not found
-     * HTTP PUT /service/{serviceId}/{instanceId}
-     * Java method: org.openremote.model.services.ExternalServiceResource.heartbeat
+     * Replaces mutable asset data while preserving the path identifier. Realm, parent, restricted-user, and private-metadata rules are validated; disallowed restricted-user fields may be ignored.
+     * HTTP PUT /asset/{assetId}
+     * Java method: org.openremote.model.asset.AssetResource.update
      */
-    heartbeat(serviceId: string, instanceId: number, options?: O): RestResponse<void>;
-}
-export declare class AssetDatapointResourceClient<O> {
-    protected httpClient: HttpClient<O>;
-    constructor(httpClient: HttpClient<O>);
+    update(assetId: string, asset: Model.Asset, options?: O): RestResponse<Model.Asset>;
     /**
-     * Streams a ZIP archive containing exported datapoints for one or more attribute references over the requested inclusive time range. attributeRefs is a JSON-encoded array of objects with id and name fields.
-     * Response code 200 - A ZIP archive containing the exported data
-     * HTTP GET /asset/datapoint/export
-     * Java method: org.openremote.model.datapoint.AssetDatapointResource.getDatapointExport
+     * Submits an asynchronous attribute write using the current server time. The result reports whether the event was accepted, not whether downstream processing ultimately succeeded. Anonymous writes require public-write metadata.
+     * Response code 400 - The attribute write failed
+     * Response code 406 - The supplied value is not valid for the attribute
+     * Response code 429 - The attribute event queue is full; retry the write later
+     * HTTP PUT /asset/{assetId}/attribute/{attributeName}
+     * Java method: org.openremote.model.asset.AssetResource.writeAttributeValue
      */
-    getDatapointExport(queryParams?: {
-        attributeRefs?: string;
-        fromTimestamp?: number;
-        toTimestamp?: number;
-        format?: Model.DatapointExportFormat;
-    }, options?: O): RestResponse<any>;
+    writeAttributeValue$PUT$asset_assetId_attribute_attributeName(assetId: string, attributeName: string, value: any, options?: O): RestResponse<Model.AttributeWriteResult>;
     /**
-     * Returns the oldest and newest stored timestamps for one attribute. The asset and attribute must be readable by the authenticated user and configured for datapoint storage.
-     * HTTP GET /asset/datapoint/periods
-     * Java method: org.openremote.model.datapoint.AssetDatapointResource.getDatapointPeriod
+     * Submits an asynchronous attribute write using the supplied Unix timestamp in milliseconds. The result reports acceptance only; anonymous writes require public-write metadata.
+     * Response code 400 - The attribute write failed
+     * Response code 406 - The supplied value is not valid for the attribute
+     * Response code 429 - The attribute event queue is full; retry the write later
+     * HTTP PUT /asset/{assetId}/attribute/{attributeName}/{timestamp}
+     * Java method: org.openremote.model.asset.AssetResource.writeAttributeValue
      */
-    getDatapointPeriod(queryParams?: {
-        assetId?: string;
-        attributeName?: string;
-    }, options?: O): RestResponse<Model.DatapointPeriod>;
+    writeAttributeValue$PUT$asset_assetId_attribute_attributeName_timestamp(assetId: string, attributeName: string, timestamp: number, value: any, options?: O): RestResponse<Model.AttributeWriteResult>;
     /**
-     * Returns stored historical values for one attribute. A null body returns the available series; a polymorphic query body controls the time range and retrieval or aggregation strategy. Anonymous access requires public-read access on both asset and attribute.
-     * HTTP POST /asset/datapoint/{assetId}/{attributeName}
-     * Java method: org.openremote.model.datapoint.AssetDatapointResource.getDatapoints
+     * Sets parentAssetId as the parent of every asset listed in repeated assetIds query parameters. Parent and children must satisfy realm, access, and hierarchy constraints.
+     * HTTP PUT /asset/{parentAssetId}/child
+     * Java method: org.openremote.model.asset.AssetResource.updateParent
      */
-    getDatapoints(assetId: string, attributeName: string, query: Model.AssetDatapointQueryUnion, options?: O): RestResponse<Model.ValueDatapoint<any>[]>;
+    updateParent(parentAssetId: string, queryParams?: {
+        assetIds?: string[];
+    }, options?: O): RestResponse<void>;
 }
-export declare class ProvisioningResourceClient<O> {
+export declare class ConfigurationResourceClient<O> {
     protected httpClient: HttpClient<O>;
     constructor(httpClient: HttpClient<O>);
     /**
-     * Persists a new provisioning configuration and returns its generated numeric identifier. This operation is restricted to a super administrator.
-     * HTTP POST /provisioning
-     * Java method: org.openremote.model.provisioning.ProvisioningResource.createProvisioningConfig
+     * Returns the public Manager application configuration used by clients before and after authentication.
+     * HTTP GET /configuration/manager
+     * Java method: org.openremote.model.manager.ConfigurationResource.getManagerConfig
      */
-    createProvisioningConfig(provisioningConfig: Model.ProvisioningConfigUnion<any, any>, options?: O): RestResponse<number>;
+    getManagerConfig(options?: O): RestResponse<Model.ManagerAppConfig>;
     /**
-     * Returns every provisioning configuration. This operation is restricted to a super administrator.
-     * HTTP GET /provisioning
-     * Java method: org.openremote.model.provisioning.ProvisioningResource.getProvisioningConfigs
+     * Replaces manager_config.json and returns the stored configuration. This administrative change affects Manager UI branding and behavior.
+     * HTTP PUT /configuration/manager
+     * Java method: org.openremote.model.manager.ConfigurationResource.update
      */
-    getProvisioningConfigs(options?: O): RestResponse<Model.ProvisioningConfigUnion<any, any>[]>;
+    update(managerConfiguration: Model.ManagerAppConfig, options?: O): RestResponse<Model.ManagerAppConfig>;
     /**
-     * Permanently removes the provisioning configuration identified by the path. This operation is restricted to a super administrator.
-     * HTTP DELETE /provisioning/{id}
-     * Java method: org.openremote.model.provisioning.ProvisioningResource.deleteProvisioningConfig
+     * Decodes and stores the supplied FileInfo under the requested relative path, then returns its Manager API path.
+     * HTTP POST /configuration/manager/file
+     * Java method: org.openremote.model.manager.ConfigurationResource.fileUpload
      */
-    deleteProvisioningConfig(id: number, options?: O): RestResponse<void>;
+    fileUpload(fileInfo: Model.FileInfo, queryParams?: {
+        path?: string;
+    }, options?: O): RestResponse<string>;
     /**
-     * Replaces the provisioning configuration identified by the path. This operation is restricted to a super administrator.
-     * HTTP PUT /provisioning/{id}
-     * Java method: org.openremote.model.provisioning.ProvisioningResource.updateProvisioningConfig
+     * Streams a previously uploaded configuration image using its detected media type.
+     * Response code 200 - The image file
+     * HTTP GET /configuration/manager/image/{filename: .+}
+     * Java method: org.openremote.model.manager.ConfigurationResource.getManagerConfigImage
      */
-    updateProvisioningConfig(id: number, provisioningConfig: Model.ProvisioningConfigUnion<any, any>, options?: O): RestResponse<void>;
+    getManagerConfigImage(filename: string, options?: O): RestResponse<any>;
 }
-export declare class MapResourceClient<O> {
+export declare class NotificationResourceClient<O> {
     protected httpClient: HttpClient<O>;
     constructor(httpClient: HttpClient<O>);
     /**
-     * Returns realm-aware public MapLibre settings with externally reachable URLs derived from proxy headers.
-     * HTTP GET /map
-     * Java method: org.openremote.model.map.MapResource.getSettings
-     */
-    getSettings(options?: O): RestResponse<{
-        [id: string]: unknown;
-    }>;
-    /**
-     * Stores the map configuration and returns the resulting public MapLibre settings.
-     * HTTP PUT /map
-     * Java method: org.openremote.model.map.MapResource.saveSettings
-     */
-    saveSettings(mapConfig: Model.MapConfig, options?: O): RestResponse<{
-        [id: string]: unknown;
-    }>;
-    /**
-     * Deletes the installed custom MBTiles database and returns the fallback public map settings.
-     * HTTP DELETE /map/deleteMap
-     * Java method: org.openremote.model.map.MapResource.deleteMap
-     */
-    deleteMap(options?: O): RestResponse<{
-        [id: string]: unknown;
-    }>;
-    /**
-     * Reports whether custom MBTiles data is installed and the maximum accepted upload size.
-     * HTTP GET /map/getCustomMapInfo
-     * Java method: org.openremote.model.map.MapResource.getCustomMapInfo
-     */
-    getCustomMapInfo(options?: O): RestResponse<{
-        [id: string]: unknown;
-    }>;
-    /**
-     * Returns a pre-compressed Mapbox vector tile for the requested zoom, column, and row coordinates.
-     * Response code 200 - Gzip-compressed vector tile
-     * Response code 204 - No tile exists at the requested coordinates
-     * HTTP GET /map/tile/{zoom}/{column}/{row}
-     * Java method: org.openremote.model.map.MapResource.getTile
-     */
-    getTile(zoom: number, column: number, row: number, options?: O): RestResponse<any>;
-    /**
-     * Stores the raw request body as the realm's custom MBTiles database and returns the resulting public map settings.
-     * HTTP POST /map/upload
-     * Java method: org.openremote.model.map.MapResource.uploadMap
+     * Returns sent-notification records filtered by identity, message type, time, realm, target, source, sorting, and pagination. Results are realm-scoped and sensitive target/source identifiers are redacted when the caller lacks user or asset read permission.
+     * HTTP GET /notification
+     * Java method: org.openremote.model.notification.NotificationResource.getNotifications
      */
-    uploadMap(queryParams?: {
-        filename?: string;
-    }, options?: O): RestResponse<{
-        [id: string]: unknown;
-    }>;
-}
-export declare class RealmResourceClient<O> {
-    protected httpClient: HttpClient<O>;
-    constructor(httpClient: HttpClient<O>);
+    getNotifications(queryParams?: {
+        id?: number;
+        type?: string;
+        from?: number;
+        to?: number;
+        realmId?: string;
+        userId?: string;
+        assetId?: string;
+        source?: Model.NotificationSource;
+        sort?: Model.SentNotificationSortField;
+        descending?: boolean;
+        offset?: number;
+        limit?: number;
+    }, options?: O): RestResponse<Model.SentNotification[]>;
     /**
-     * Creates and configures a realm in the identity provider. This operation is restricted to a super user.
-     * HTTP POST /realm
-     * Java method: org.openremote.model.security.RealmResource.create
+     * Permanently removes all records matching the optional ID, type, time, realm, user, and asset filters. This bulk operation is restricted to a super user.
+     * HTTP DELETE /notification
+     * Java method: org.openremote.model.notification.NotificationResource.removeNotifications
      */
-    create(realm: Model.Realm, options?: O): RestResponse<void>;
+    removeNotifications(queryParams?: {
+        id?: number;
+        type?: string;
+        from?: number;
+        to?: number;
+        realmId?: string;
+        userId?: string;
+        assetId?: string;
+    }, options?: O): RestResponse<void>;
     /**
-     * Returns complete realm records from the identity provider. This operation is restricted to a super user.
-     * HTTP GET /realm
-     * Java method: org.openremote.model.security.RealmResource.getAll
+     * Queues a notification for delivery. Authorization is checked for every target; if any target is inaccessible, the complete request fails rather than sending a partial set.
+     * HTTP POST /notification/alert
+     * Java method: org.openremote.model.notification.NotificationResource.sendNotification
      */
-    getAll(options?: O): RestResponse<Model.Realm[]>;
+    sendNotification(notification: Model.Notification, options?: O): RestResponse<void>;
     /**
-     * Returns only realm name and display name. Super users receive all realms; authenticated users receive their realm; anonymous callers receive the request realm.
-     * HTTP GET /realm/accessible
-     * Java method: org.openremote.model.security.RealmResource.getAccessible
+     * Returns the count for the same realm-scoped type, time, target, and source filters supported by getNotifications without loading notification records.
+     * HTTP GET /notification/count
+     * Java method: org.openremote.model.notification.NotificationResource.getNotificationsCount
      */
-    getAccessible(options?: O): RestResponse<Model.Realm[]>;
-    /**
-     * Permanently deletes a realm from the identity provider. The master realm cannot be deleted; related Manager data is not automatically removed.
-     * Response code 405 - The master realm cannot be deleted
-     * HTTP DELETE /realm/{name}
-     * Java method: org.openremote.model.security.RealmResource.delete
+    getNotificationsCount(queryParams?: {
+        type?: string;
+        from?: number;
+        to?: number;
+        realmId?: string;
+        userId?: string;
+        assetId?: string;
+        source?: Model.NotificationSource;
+    }, options?: O): RestResponse<number>;
+    /**
+     * Permanently removes one sent-notification record. This operation is restricted to a super user and is idempotent when the ID does not exist.
+     * HTTP DELETE /notification/{notificationId}
+     * Java method: org.openremote.model.notification.NotificationResource.removeNotification
      */
-    delete(name: string, options?: O): RestResponse<void>;
+    removeNotification(notificationId: number, options?: O): RestResponse<void>;
     /**
-     * Returns complete details for a named active realm when it is accessible to the caller. Regular users cannot use this endpoint to inspect other realms.
-     * HTTP GET /realm/{name}
-     * Java method: org.openremote.model.security.RealmResource.get
+     * Marks one target's notification as acknowledged and stores the optional JSON acknowledgement value. Access rules are identical to notificationDelivered.
+     * HTTP PUT /notification/{notificationId}/acknowledged
+     * Java method: org.openremote.model.notification.NotificationResource.notificationAcknowledged
      */
-    get(name: string, options?: O): RestResponse<Model.Realm>;
+    notificationAcknowledged(notificationId: number, acknowledgement: any, queryParams?: {
+        targetId?: string;
+    }, options?: O): RestResponse<void>;
     /**
-     * Updates a realm through the identity provider. Super-user access is required; the master realm cannot be renamed or disabled.
-     * Response code 405 - The requested mutation is not allowed for the master realm
-     * HTTP PUT /realm/{name}
-     * Java method: org.openremote.model.security.RealmResource.update
+     * Marks one target's notification as delivered after matching both notificationId and targetId. Anonymous callers may update notifications sent to a public asset; authenticated callers are constrained to their own user, realm, or accessible assets.
+     * HTTP PUT /notification/{notificationId}/delivered
+     * Java method: org.openremote.model.notification.NotificationResource.notificationDelivered
      */
-    update(name: string, realm: Model.Realm, options?: O): RestResponse<void>;
+    notificationDelivered(notificationId: number, queryParams?: {
+        targetId?: string;
+    }, options?: O): RestResponse<void>;
 }
-export declare class FlowResourceClient<O> {
+export declare class ExternalServiceResourceClient<O> {
     protected httpClient: HttpClient<O>;
     constructor(httpClient: HttpClient<O>);
     /**
-     * Returns every supported flow node definition except the internal LOG_OUTPUT node.
-     * HTTP GET /flow
-     * Java method: org.openremote.model.rules.flow.FlowResource.getAllNodeDefinitions
+     * Returns all active realm-scoped service registrations for an active realm accessible to the caller.
+     * Response code 200 - List of registered external services
+     * HTTP GET /service
+     * Java method: org.openremote.model.services.ExternalServiceResource.getServices
      */
-    getAllNodeDefinitions(options?: O): RestResponse<Model.Node[]>;
+    getServices(queryParams?: {
+        realm?: string;
+    }, options?: O): RestResponse<Model.ExternalService[]>;
     /**
-     * Resolves one flow node definition by its model name.
-     * HTTP GET /flow/{name}
-     * Java method: org.openremote.model.rules.flow.FlowResource.getNodeDefinition
+     * Registers a realm-scoped service instance for the request realm. The caller must be a service account; the returned object contains the assigned instance ID and initial lease state.
+     * Response code 200 - Service registered successfully
+     * Response code 400 - Invalid external service object
+     * Response code 409 - ExternalService instance already registered
+     * HTTP POST /service
+     * Java method: org.openremote.model.services.ExternalServiceResource.registerService
      */
-    getNodeDefinition(name: string, options?: O): RestResponse<Model.Node>;
+    registerService(service: Model.ExternalService, options?: O): RestResponse<Model.ExternalService>;
     /**
-     * Returns supported flow node definitions whose category matches the requested node type.
-     * HTTP GET /flow/{type}
-     * Java method: org.openremote.model.rules.flow.FlowResource.getAllNodeDefinitionsByType
+     * Returns active registrations marked as globally available across realms.
+     * Response code 200 - List of registered external services
+     * HTTP GET /service/global
+     * Java method: org.openremote.model.services.ExternalServiceResource.getGlobalServices
      */
-    getAllNodeDefinitionsByType(type: Model.NodeType, options?: O): RestResponse<Model.Node[]>;
-}
-export declare class SyslogResourceClient<O> {
-    protected httpClient: HttpClient<O>;
-    constructor(httpClient: HttpClient<O>);
+    getGlobalServices(options?: O): RestResponse<Model.ExternalService[]>;
     /**
-     * Returns the current log-storage and retention configuration.
-     * HTTP GET /syslog/config
-     * Java method: org.openremote.model.syslog.SyslogResource.getConfig
+     * Registers a service visible in every realm. The caller must be a super-user service account and the request must use the master realm.
+     * Response code 200 - Service registered successfully
+     * Response code 400 - Invalid external service object
+     * Response code 409 - ExternalService instance already registered
+     * HTTP POST /service/global
+     * Java method: org.openremote.model.services.ExternalServiceResource.registerGlobalService
      */
-    getConfig(options?: O): RestResponse<Model.SyslogConfig>;
+    registerGlobalService(service: Model.ExternalService, options?: O): RestResponse<Model.ExternalService>;
     /**
-     * Validates and applies log-storage and retention settings.
-     * HTTP PUT /syslog/config
-     * Java method: org.openremote.model.syslog.SyslogResource.updateConfig
+     * Removes an active service registration. The caller must be the service account that registered it; global-service removal additionally requires a super user.
+     * Response code 204 - Service deregistered successfully
+     * Response code 404 - Service instance not found
+     * HTTP DELETE /service/{serviceId}/{instanceId}
+     * Java method: org.openremote.model.services.ExternalServiceResource.deregisterService
      */
-    updateConfig(config: Model.SyslogConfig, options?: O): RestResponse<void>;
+    deregisterService(serviceId: string, instanceId: number, options?: O): RestResponse<void>;
     /**
-     * Permanently removes all events from the configured syslog storage.
-     * HTTP DELETE /syslog/event
-     * Java method: org.openremote.model.syslog.SyslogResource.clearEvents
+     * Returns one registered instance by stable service ID and numeric instance ID, after verifying access to the service's realm.
+     * Response code 200 - ExternalService retrieved successfully
+     * Response code 404 - ExternalService not found
+     * HTTP GET /service/{serviceId}/{instanceId}
+     * Java method: org.openremote.model.services.ExternalServiceResource.getService
      */
-    clearEvents(options?: O): RestResponse<void>;
+    getService(serviceId: string, instanceId: number, options?: O): RestResponse<Model.ExternalService>;
     /**
-     * Returns a page of log events filtered by severity, Unix-millisecond time range, categories, and subcategories. RFC 8288 Link headers point to the next and last pages.
-     * Response code 200 - The requested page of syslog events
-     * HTTP GET /syslog/event
-     * Java method: org.openremote.model.syslog.SyslogResource.getEvents
+     * Extends the lease of one service instance. The caller must be the service account that registered it; global-service heartbeats additionally require a super user.
+     * Response code 204 - Heartbeat sent successfully
+     * Response code 404 - Service instance not found
+     * HTTP PUT /service/{serviceId}/{instanceId}
+     * Java method: org.openremote.model.services.ExternalServiceResource.heartbeat
      */
-    getEvents(queryParams?: {
-        level?: Model.SyslogLevel;
-        per_page?: number;
-        page?: number;
-        from?: number;
-        to?: number;
-        category?: Model.SyslogCategory[];
-        subCategory?: string[];
-    }, options?: O): RestResponse<any>;
+    heartbeat(serviceId: string, instanceId: number, options?: O): RestResponse<void>;
 }
-export declare class UserResourceClient<O> {
+export declare class AgentResourceClient<O> {
     protected httpClient: HttpClient<O>;
     constructor(httpClient: HttpClient<O>);
     /**
-     * Stores the supplied non-empty locale string as the caller's identity-provider locale attribute.
-     * HTTP PUT /user/locale
-     * Java method: org.openremote.model.security.UserResource.updateCurrentUserLocale
+     * Runs the agent protocol's asset discovery, waits up to ten seconds for results, returns the discovered tree, and asynchronously persists discovered assets below the agent.
+     * HTTP GET /agent/assetDiscovery/{agentId}
+     * Java method: org.openremote.model.asset.agent.AgentResource.doProtocolAssetDiscovery
      */
-    updateCurrentUserLocale(locale: string, options?: O): RestResponse<void>;
+    doProtocolAssetDiscovery(agentId: string, queryParams?: {
+        realm?: string;
+    }, options?: O): RestResponse<Model.AssetTreeNode[]>;
     /**
-     * Executes a UserQuery. Non-super users are forced into their authenticated realm and cannot see system accounts; callers with read-users but not read-admin receive basic fields only.
-     * HTTP POST /user/query
-     * Java method: org.openremote.model.security.UserResource.query
+     * Decodes the supplied FileInfo, asks the agent protocol to import it, persists the returned asset tree below the agent, and returns that tree.
+     * Response code 405 - The selected agent protocol does not support asset import
+     * HTTP POST /agent/assetImport/{agentId}
+     * Java method: org.openremote.model.asset.agent.AgentResource.doProtocolAssetImport
      */
-    query(query: Model.UserQuery, options?: O): RestResponse<Model.User[]>;
+    doProtocolAssetImport(agentId: string, fileInfo: Model.FileInfo, queryParams?: {
+        realm?: string;
+    }, options?: O): RestResponse<Model.AssetTreeNode[]>;
     /**
-     * Initiates the identity provider's configured password-reset action for the caller's own account.
-     * HTTP PUT /user/request-password-reset
-     * Java method: org.openremote.model.security.UserResource.requestPasswordResetCurrent
+     * Runs instance discovery for an agent type and returns candidate Agent assets. parentId selects local versus edge-gateway discovery; non-super users are always constrained to their authenticated realm.
+     * Response code 415 - The selected agent protocol does not support instance discovery
+     * HTTP GET /agent/instanceDiscovery/{agentType}
+     * Java method: org.openremote.model.asset.agent.AgentResource.doProtocolInstanceDiscovery
      */
-    requestPasswordResetCurrent(options?: O): RestResponse<void>;
+    doProtocolInstanceDiscovery(agentType: string, queryParams?: {
+        parentId?: string;
+        realm?: string;
+    }, options?: O): RestResponse<Model.Agent[]>;
+}
+export declare class ConsoleResourceClient<O> {
+    protected httpClient: HttpClient<O>;
+    constructor(httpClient: HttpClient<O>);
     /**
-     * Replaces the caller's own identity-provider credential using the supplied credential representation.
-     * HTTP PUT /user/reset-password
-     * Java method: org.openremote.model.security.UserResource.updatePasswordCurrent
+     * Creates an anonymous console registration when id is absent, or updates an existing registration when id is present. Authenticated new registrations are linked to the caller; updates require that link. The returned registration contains the durable asset ID for later calls.
+     * HTTP POST /console/register
+     * Java method: org.openremote.model.console.ConsoleResource.register
      */
-    updatePasswordCurrent(credential: Model.Credential, options?: O): RestResponse<void>;
+    register(consoleRegistration: Model.ConsoleRegistration, options?: O): RestResponse<Model.ConsoleRegistration>;
+}
+export declare class AssetPredictedDatapointResourceClient<O> {
+    protected httpClient: HttpClient<O>;
+    constructor(httpClient: HttpClient<O>);
     /**
-     * Updates the caller's own profile. A supplied user ID must match the access token; role and realm administration are not provided by this endpoint.
-     * HTTP PUT /user/update
-     * Java method: org.openremote.model.security.UserResource.updateCurrent
+     * Queries predicted values for one attribute using the supplied time-range and aggregation criteria. Anonymous access requires public-read access on both asset and attribute.
+     * HTTP POST /asset/predicted/{assetId}/{attributeName}
+     * Java method: org.openremote.model.datapoint.AssetPredictedDatapointResource.getPredictedDatapoints
      */
-    updateCurrent(user: Model.User, options?: O): RestResponse<Model.User>;
+    getPredictedDatapoints(assetId: string, attributeName: string, query: Model.AssetDatapointQueryUnion, options?: O): RestResponse<Model.ValueDatapoint<any>[]>;
     /**
-     * Returns the identity-provider record corresponding to the current access token.
-     * HTTP GET /user/user
-     * Java method: org.openremote.model.security.UserResource.getCurrent
+     * Replaces or adds predicted values for one attribute. Anonymous access is allowed only when the asset and attribute are public-write; authenticated callers require attribute-write access.
+     * HTTP PUT /asset/predicted/{assetId}/{attributeName}
+     * Java method: org.openremote.model.datapoint.AssetPredictedDatapointResource.writePredictedDatapoints
      */
-    getCurrent(options?: O): RestResponse<Model.User>;
+    writePredictedDatapoints(assetId: string, attributeName: string, predictedDatapoints: Model.ValueDatapoint<any>[], options?: O): RestResponse<void>;
+}
+export declare class AlarmResourceClient<O> {
+    protected httpClient: HttpClient<O>;
+    constructor(httpClient: HttpClient<O>);
     /**
-     * Returns realm-level role names assigned to the caller.
-     * HTTP GET /user/userRealmRoles
-     * Java method: org.openremote.model.security.UserResource.getCurrentUserRealmRoles
+     * Creates a manual alarm in an accessible realm and optionally links it to the supplied asset IDs. The authenticated user or client becomes the alarm source.
+     * HTTP POST /alarm
+     * Java method: org.openremote.model.alarm.AlarmResource.createAlarm
      */
-    getCurrentUserRealmRoles(options?: O): RestResponse<string[]>;
+    createAlarm(alarm: Model.Alarm, queryParams?: {
+        assetIds?: string[];
+    }, options?: O): RestResponse<Model.SentAlarm>;
     /**
-     * Returns role names assigned to the caller for the named identity-provider client.
-     * HTTP GET /user/userRoles/{clientId}
-     * Java method: org.openremote.model.security.UserResource.getCurrentUserClientRoles
+     * Returns alarms in the requested accessible realm, optionally filtered by status, linked asset, or assignee. When realm is omitted, the authenticated realm is used.
+     * HTTP GET /alarm
+     * Java method: org.openremote.model.alarm.AlarmResource.getAlarms
      */
-    getCurrentUserClientRoles(clientId: string, options?: O): RestResponse<string[]>;
+    getAlarms(queryParams?: {
+        realm?: string;
+        status?: Model.AlarmStatus;
+        assetId?: string;
+        assigneeId?: string;
+    }, options?: O): RestResponse<Model.SentAlarm[]>;
     /**
-     * Terminates the active MQTT connection identified by sessionID.
-     * HTTP GET /user/{realm}/disconnect/{sessionID}
-     * Java method: org.openremote.model.security.UserResource.disconnectUserSession
+     * Permanently removes all alarms identified by the request body after verifying access to every alarm's realm.
+     * HTTP DELETE /alarm
+     * Java method: org.openremote.model.alarm.AlarmResource.removeAlarms
      */
-    disconnectUserSession(realm: string, sessionID: string, options?: O): RestResponse<void>;
+    removeAlarms(ids: number[], options?: O): RestResponse<void>;
     /**
-     * Asks the identity provider to send or initiate its configured password-reset action for the specified user.
-     * Response code 405 - The caller cannot mutate a user in the requested realm
-     * HTTP PUT /user/{realm}/request-password-reset/{userId}
-     * Java method: org.openremote.model.security.UserResource.requestPasswordReset
+     * Adds links between assets and one existing alarm.
+
+The request body is a list for backward compatibility, but this operation now has single-alarm semantics:
+every item must contain the same `id.realm` and the same `id.alarmId`. The alarm must exist in that realm,
+every asset must exist in the same realm, and the authenticated user must have access to that realm. Requests
+containing mixed alarm IDs or realms are rejected as bad requests.
+
+Existing links are left unchanged; duplicate links in the request or links that already exist are ignored.
+This operation does not remove existing links from the alarm.
+
+     * HTTP PUT /alarm/assets
+     * Java method: org.openremote.model.alarm.AlarmResource.setAssetLinks
      */
-    requestPasswordReset(realm: string, userId: string, options?: O): RestResponse<void>;
+    setAssetLinks(links: Model.AlarmAssetLink[], options?: O): RestResponse<void>;
     /**
-     * Replaces a user's credential in an administered realm using the supplied credential representation.
-     * Response code 405 - The caller cannot mutate a user in the requested realm
-     * HTTP PUT /user/{realm}/reset-password/{userId}
-     * Java method: org.openremote.model.security.UserResource.updatePassword
+     * Returns one alarm when its realm is active and accessible to the authenticated user.
+     * HTTP GET /alarm/{alarmId}
+     * Java method: org.openremote.model.alarm.AlarmResource.getAlarm
      */
-    updatePassword(realm: string, userId: string, credential: Model.Credential, options?: O): RestResponse<void>;
+    getAlarm(alarmId: number, options?: O): RestResponse<Model.SentAlarm>;
     /**
-     * Generates and returns a new client secret for a service user in an administered realm.
-     * HTTP GET /user/{realm}/reset-secret/{userId}
-     * Java method: org.openremote.model.security.UserResource.resetSecret
+     * Permanently removes one alarm after verifying access to its realm.
+     * HTTP DELETE /alarm/{alarmId}
+     * Java method: org.openremote.model.alarm.AlarmResource.removeAlarm
      */
-    resetSecret(realm: string, userId: string, options?: O): RestResponse<string>;
+    removeAlarm(alarmId: number, options?: O): RestResponse<void>;
     /**
-     * Creates, updates, or removes role definitions for the default OpenRemote client in the requested realm.
-     * HTTP PUT /user/{realm}/roles
-     * Java method: org.openremote.model.security.UserResource.updateRoles
+     * Updates the mutable state of an existing alarm after verifying access to its current realm.
+     * HTTP PUT /alarm/{alarmId}
+     * Java method: org.openremote.model.alarm.AlarmResource.updateAlarm
      */
-    updateRoles(realm: string, roles: Model.Role[], options?: O): RestResponse<void>;
+    updateAlarm(alarmId: number, alarm: Model.SentAlarm, options?: O): RestResponse<void>;
+    /**
+     * Returns links from the alarm to assets in the explicitly supplied accessible realm.
+     * HTTP GET /alarm/{alarmId}/assets
+     * Java method: org.openremote.model.alarm.AlarmResource.getAssetLinks
+     */
+    getAssetLinks(alarmId: number, queryParams?: {
+        realm?: string;
+    }, options?: O): RestResponse<Model.AlarmAssetLink[]>;
+}
+export declare class ProvisioningResourceClient<O> {
+    protected httpClient: HttpClient<O>;
+    constructor(httpClient: HttpClient<O>);
     /**
-     * Returns realm-level role names assigned to one user. Without read-admin permission, callers may retrieve only their own roles.
-     * HTTP GET /user/{realm}/userRealmRoles/{userId}
-     * Java method: org.openremote.model.security.UserResource.getUserRealmRoles
+     * Persists a new provisioning configuration and returns its generated numeric identifier. This operation is restricted to a super administrator.
+     * HTTP POST /provisioning
+     * Java method: org.openremote.model.provisioning.ProvisioningResource.createProvisioningConfig
      */
-    getUserRealmRoles(realm: string, userId: string, options?: O): RestResponse<string[]>;
+    createProvisioningConfig(provisioningConfig: Model.ProvisioningConfigUnion<any, any>, options?: O): RestResponse<number>;
     /**
-     * Replaces the user's assigned realm-level role names in an administered realm.
-     * HTTP PUT /user/{realm}/userRealmRoles/{userId}
-     * Java method: org.openremote.model.security.UserResource.updateUserRealmRoles
+     * Returns every provisioning configuration. This operation is restricted to a super administrator.
+     * HTTP GET /provisioning
+     * Java method: org.openremote.model.provisioning.ProvisioningResource.getProvisioningConfigs
      */
-    updateUserRealmRoles(realm: string, userId: string, roles: string[], options?: O): RestResponse<void>;
+    getProvisioningConfigs(options?: O): RestResponse<Model.ProvisioningConfigUnion<any, any>[]>;
     /**
-     * Returns role names assigned to one user for the named client. Without read-admin permission, callers may retrieve only their own roles.
-     * HTTP GET /user/{realm}/userRoles/{userId}/{clientId}
-     * Java method: org.openremote.model.security.UserResource.getUserClientRoles
+     * Permanently removes the provisioning configuration identified by the path. This operation is restricted to a super administrator.
+     * HTTP DELETE /provisioning/{id}
+     * Java method: org.openremote.model.provisioning.ProvisioningResource.deleteProvisioningConfig
      */
-    getUserClientRoles(realm: string, userId: string, clientId: string, options?: O): RestResponse<string[]>;
+    deleteProvisioningConfig(id: number, options?: O): RestResponse<void>;
     /**
-     * Replaces the user's assigned role names for the named client in an administered realm.
-     * HTTP PUT /user/{realm}/userRoles/{userId}/{clientId}
-     * Java method: org.openremote.model.security.UserResource.updateUserClientRoles
+     * Replaces the provisioning configuration identified by the path. This operation is restricted to a super administrator.
+     * HTTP PUT /provisioning/{id}
+     * Java method: org.openremote.model.provisioning.ProvisioningResource.updateProvisioningConfig
      */
-    updateUserClientRoles(realm: string, userId: string, clientId: string, roles: string[], options?: O): RestResponse<void>;
+    updateProvisioningConfig(id: number, provisioningConfig: Model.ProvisioningConfigUnion<any, any>, options?: O): RestResponse<void>;
+}
+export declare class AssetDatapointResourceClient<O> {
+    protected httpClient: HttpClient<O>;
+    constructor(httpClient: HttpClient<O>);
     /**
-     * Returns active MQTT sessions for one user, including connection ID, creation time, and remote address. Without read-admin permission, callers may inspect only themselves.
-     * HTTP GET /user/{realm}/userSessions/{userId}
-     * Java method: org.openremote.model.security.UserResource.getUserSessions
+     * Streams a ZIP archive containing exported datapoints for one or more attribute references over the requested inclusive time range. attributeRefs is a JSON-encoded array of objects with id and name fields.
+     * Response code 200 - A ZIP archive containing the exported data
+     * HTTP GET /asset/datapoint/export
+     * Java method: org.openremote.model.datapoint.AssetDatapointResource.getDatapointExport
      */
-    getUserSessions(realm: string, userId: string, options?: O): RestResponse<Model.UserSession[]>;
+    getDatapointExport(queryParams?: {
+        attributeRefs?: string;
+        fromTimestamp?: number;
+        toTimestamp?: number;
+        format?: Model.DatapointExportFormat;
+    }, options?: O): RestResponse<any>;
     /**
-     * Creates an identity-provider user in a realm administered by the caller and returns the resulting user record.
-     * HTTP POST /user/{realm}/users
-     * Java method: org.openremote.model.security.UserResource.create
+     * Returns the oldest and newest stored timestamps for one attribute. The asset and attribute must be readable by the authenticated user and configured for datapoint storage.
+     * HTTP GET /asset/datapoint/periods
+     * Java method: org.openremote.model.datapoint.AssetDatapointResource.getDatapointPeriod
      */
-    create(realm: string, user: Model.User, options?: O): RestResponse<Model.User>;
+    getDatapointPeriod(queryParams?: {
+        assetId?: string;
+        attributeName?: string;
+    }, options?: O): RestResponse<Model.DatapointPeriod>;
     /**
-     * Updates an existing identity-provider user in an administered realm. The master administrator cannot be disabled.
-     * Response code 405 - The requested cross-realm or protected master-administrator mutation is not allowed
-     * HTTP PUT /user/{realm}/users
-     * Java method: org.openremote.model.security.UserResource.update
+     * Returns stored historical values for one attribute. A null body returns the available series; a polymorphic query body controls the time range and retrieval or aggregation strategy. Anonymous access requires public-read access on both asset and attribute.
+     * HTTP POST /asset/datapoint/{assetId}/{attributeName}
+     * Java method: org.openremote.model.datapoint.AssetDatapointResource.getDatapoints
      */
-    update(realm: string, user: Model.User, options?: O): RestResponse<Model.User>;
+    getDatapoints(assetId: string, attributeName: string, query: Model.AssetDatapointQueryUnion, options?: O): RestResponse<Model.ValueDatapoint<any>[]>;
+}
+export declare class SyslogResourceClient<O> {
+    protected httpClient: HttpClient<O>;
+    constructor(httpClient: HttpClient<O>);
     /**
-     * Permanently deletes a user from an administered realm. The master-realm administrator cannot be deleted.
-     * Response code 405 - The master-realm administrator cannot be deleted
-     * HTTP DELETE /user/{realm}/users/{userId}
-     * Java method: org.openremote.model.security.UserResource.delete
+     * Returns the current log-storage and retention configuration.
+     * HTTP GET /syslog/config
+     * Java method: org.openremote.model.syslog.SyslogResource.getConfig
      */
-    delete(realm: string, userId: string, options?: O): RestResponse<void>;
+    getConfig(options?: O): RestResponse<Model.SyslogConfig>;
     /**
-     * Returns all role definitions exposed by the named identity-provider client. Realm-administrator access is required.
-     * HTTP GET /user/{realm}/{clientId}/roles
-     * Java method: org.openremote.model.security.UserResource.getClientRoles
+     * Validates and applies log-storage and retention settings.
+     * HTTP PUT /syslog/config
+     * Java method: org.openremote.model.syslog.SyslogResource.updateConfig
      */
-    getClientRoles(realm: string, clientId: string, options?: O): RestResponse<Model.Role[]>;
+    updateConfig(config: Model.SyslogConfig, options?: O): RestResponse<void>;
     /**
-     * Creates, updates, or removes role definitions for a named identity-provider client.
-     * HTTP PUT /user/{realm}/{clientId}/roles
-     * Java method: org.openremote.model.security.UserResource.updateClientRoles
+     * Permanently removes all events from the configured syslog storage.
+     * HTTP DELETE /syslog/event
+     * Java method: org.openremote.model.syslog.SyslogResource.clearEvents
      */
-    updateClientRoles(realm: string, clientId: string, roles: Model.Role[], options?: O): RestResponse<void>;
+    clearEvents(options?: O): RestResponse<void>;
     /**
-     * Returns one user when it belongs to the requested accessible realm. Without read-admin permission, callers may retrieve only their own user.
-     * HTTP GET /user/{realm}/{userId}
-     * Java method: org.openremote.model.security.UserResource.get
+     * Returns a page of log events filtered by severity, Unix-millisecond time range, categories, and subcategories. RFC 8288 Link headers point to the next and last pages.
+     * Response code 200 - The requested page of syslog events
+     * HTTP GET /syslog/event
+     * Java method: org.openremote.model.syslog.SyslogResource.getEvents
      */
-    get(realm: string, userId: string, options?: O): RestResponse<Model.User>;
+    getEvents(queryParams?: {
+        level?: Model.SyslogLevel;
+        per_page?: number;
+        page?: number;
+        from?: number;
+        to?: number;
+        category?: Model.SyslogCategory[];
+        subCategory?: string[];
+    }, options?: O): RestResponse<any>;
 }
 export declare class RulesResourceClient<O> {
     protected httpClient: HttpClient<O>;
@@ -808,413 +756,468 @@ export declare class RulesResourceClient<O> {
      */
     updateGlobalRuleset(id: number, ruleset: Model.GlobalRuleset, options?: O): RestResponse<void>;
 }
-export declare class NotificationResourceClient<O> {
+export declare class FlowResourceClient<O> {
     protected httpClient: HttpClient<O>;
     constructor(httpClient: HttpClient<O>);
     /**
-     * Returns sent-notification records filtered by identity, message type, time, realm, target, source, sorting, and pagination. Results are realm-scoped and sensitive target/source identifiers are redacted when the caller lacks user or asset read permission.
-     * HTTP GET /notification
-     * Java method: org.openremote.model.notification.NotificationResource.getNotifications
+     * Returns every supported flow node definition except the internal LOG_OUTPUT node.
+     * HTTP GET /flow
+     * Java method: org.openremote.model.rules.flow.FlowResource.getAllNodeDefinitions
      */
-    getNotifications(queryParams?: {
-        id?: number;
-        type?: string;
-        from?: number;
-        to?: number;
-        realmId?: string;
-        userId?: string;
-        assetId?: string;
-        source?: Model.NotificationSource;
-        sort?: Model.SentNotificationSortField;
-        descending?: boolean;
-        offset?: number;
-        limit?: number;
-    }, options?: O): RestResponse<Model.SentNotification[]>;
+    getAllNodeDefinitions(options?: O): RestResponse<Model.Node[]>;
     /**
-     * Permanently removes all records matching the optional ID, type, time, realm, user, and asset filters. This bulk operation is restricted to a super user.
-     * HTTP DELETE /notification
-     * Java method: org.openremote.model.notification.NotificationResource.removeNotifications
+     * Resolves one flow node definition by its model name.
+     * HTTP GET /flow/{name}
+     * Java method: org.openremote.model.rules.flow.FlowResource.getNodeDefinition
      */
-    removeNotifications(queryParams?: {
-        id?: number;
-        type?: string;
-        from?: number;
-        to?: number;
-        realmId?: string;
-        userId?: string;
-        assetId?: string;
-    }, options?: O): RestResponse<void>;
+    getNodeDefinition(name: string, options?: O): RestResponse<Model.Node>;
     /**
-     * Queues a notification for delivery. Authorization is checked for every target; if any target is inaccessible, the complete request fails rather than sending a partial set.
-     * HTTP POST /notification/alert
-     * Java method: org.openremote.model.notification.NotificationResource.sendNotification
+     * Returns supported flow node definitions whose category matches the requested node type.
+     * HTTP GET /flow/{type}
+     * Java method: org.openremote.model.rules.flow.FlowResource.getAllNodeDefinitionsByType
      */
-    sendNotification(notification: Model.Notification, options?: O): RestResponse<void>;
+    getAllNodeDefinitionsByType(type: Model.NodeType, options?: O): RestResponse<Model.Node[]>;
+}
+export declare class MapResourceClient<O> {
+    protected httpClient: HttpClient<O>;
+    constructor(httpClient: HttpClient<O>);
     /**
-     * Returns the count for the same realm-scoped type, time, target, and source filters supported by getNotifications without loading notification records.
-     * HTTP GET /notification/count
-     * Java method: org.openremote.model.notification.NotificationResource.getNotificationsCount
+     * Returns realm-aware public MapLibre settings with externally reachable URLs derived from proxy headers.
+     * HTTP GET /map
+     * Java method: org.openremote.model.map.MapResource.getSettings
      */
-    getNotificationsCount(queryParams?: {
-        type?: string;
-        from?: number;
-        to?: number;
-        realmId?: string;
-        userId?: string;
-        assetId?: string;
-        source?: Model.NotificationSource;
-    }, options?: O): RestResponse<number>;
+    getSettings(options?: O): RestResponse<{
+        [id: string]: unknown;
+    }>;
+    /**
+     * Stores the map configuration and returns the resulting public MapLibre settings.
+     * HTTP PUT /map
+     * Java method: org.openremote.model.map.MapResource.saveSettings
+     */
+    saveSettings(mapConfig: Model.MapConfig, options?: O): RestResponse<{
+        [id: string]: unknown;
+    }>;
+    /**
+     * Deletes the installed custom MBTiles database and returns the fallback public map settings.
+     * HTTP DELETE /map/deleteMap
+     * Java method: org.openremote.model.map.MapResource.deleteMap
+     */
+    deleteMap(options?: O): RestResponse<{
+        [id: string]: unknown;
+    }>;
+    /**
+     * Reports whether custom MBTiles data is installed and the maximum accepted upload size.
+     * HTTP GET /map/getCustomMapInfo
+     * Java method: org.openremote.model.map.MapResource.getCustomMapInfo
+     */
+    getCustomMapInfo(options?: O): RestResponse<{
+        [id: string]: unknown;
+    }>;
+    /**
+     * Returns a pre-compressed Mapbox vector tile for the requested zoom, column, and row coordinates.
+     * Response code 200 - Gzip-compressed vector tile
+     * Response code 204 - No tile exists at the requested coordinates
+     * HTTP GET /map/tile/{zoom}/{column}/{row}
+     * Java method: org.openremote.model.map.MapResource.getTile
+     */
+    getTile(zoom: number, column: number, row: number, options?: O): RestResponse<any>;
+    /**
+     * Stores the raw request body as the realm's custom MBTiles database and returns the resulting public map settings.
+     * HTTP POST /map/upload
+     * Java method: org.openremote.model.map.MapResource.uploadMap
+     */
+    uploadMap(queryParams?: {
+        filename?: string;
+    }, options?: O): RestResponse<{
+        [id: string]: unknown;
+    }>;
+}
+export declare class UserResourceClient<O> {
+    protected httpClient: HttpClient<O>;
+    constructor(httpClient: HttpClient<O>);
+    /**
+     * Stores the supplied non-empty locale string as the caller's identity-provider locale attribute. The target realm must be active unless the caller is a superuser.
+     * HTTP PUT /user/locale
+     * Java method: org.openremote.model.security.UserResource.updateCurrentUserLocale
+     */
+    updateCurrentUserLocale(locale: string, options?: O): RestResponse<void>;
+    /**
+     * Executes a UserQuery. Non-super users are forced into their authenticated realm and cannot see system accounts; callers with read-users but not read-admin receive basic fields only. The target realm must be active unless the caller is a superuser.
+     * HTTP POST /user/query
+     * Java method: org.openremote.model.security.UserResource.query
+     */
+    query(query: Model.UserQuery, options?: O): RestResponse<Model.User[]>;
+    /**
+     * Initiates the identity provider's configured password-reset action for the caller's own account. The target realm must be active unless the caller is a superuser.
+     * HTTP PUT /user/request-password-reset
+     * Java method: org.openremote.model.security.UserResource.requestPasswordResetCurrent
+     */
+    requestPasswordResetCurrent(options?: O): RestResponse<void>;
+    /**
+     * Replaces the caller's own identity-provider credential using the supplied credential representation. The target realm must be active unless the caller is a superuser.
+     * HTTP PUT /user/reset-password
+     * Java method: org.openremote.model.security.UserResource.updatePasswordCurrent
+     */
+    updatePasswordCurrent(credential: Model.Credential, options?: O): RestResponse<void>;
+    /**
+     * Updates the caller's own profile. A supplied user ID must match the access token; role and realm administration are not provided by this endpoint. The target realm must be active unless the caller is a superuser.
+     * HTTP PUT /user/update
+     * Java method: org.openremote.model.security.UserResource.updateCurrent
+     */
+    updateCurrent(user: Model.User, options?: O): RestResponse<Model.User>;
+    /**
+     * Returns the identity-provider record corresponding to the current access token. The target realm must be active unless the caller is a superuser.
+     * HTTP GET /user/user
+     * Java method: org.openremote.model.security.UserResource.getCurrent
+     */
+    getCurrent(options?: O): RestResponse<Model.User>;
+    /**
+     * Returns realm-level role names assigned to the caller. The target realm must be active unless the caller is a superuser.
+     * HTTP GET /user/userRealmRoles
+     * Java method: org.openremote.model.security.UserResource.getCurrentUserRealmRoles
+     */
+    getCurrentUserRealmRoles(options?: O): RestResponse<string[]>;
     /**
-     * Permanently removes one sent-notification record. This operation is restricted to a super user and is idempotent when the ID does not exist.
-     * HTTP DELETE /notification/{notificationId}
-     * Java method: org.openremote.model.notification.NotificationResource.removeNotification
+     * Returns role names assigned to the caller for the named identity-provider client. The target realm must be active unless the caller is a superuser.
+     * HTTP GET /user/userRoles/{clientId}
+     * Java method: org.openremote.model.security.UserResource.getCurrentUserClientRoles
      */
-    removeNotification(notificationId: number, options?: O): RestResponse<void>;
+    getCurrentUserClientRoles(clientId: string, options?: O): RestResponse<string[]>;
     /**
-     * Marks one target's notification as acknowledged and stores the optional JSON acknowledgement value. Access rules are identical to notificationDelivered.
-     * HTTP PUT /notification/{notificationId}/acknowledged
-     * Java method: org.openremote.model.notification.NotificationResource.notificationAcknowledged
+     * Terminates the active MQTT connection identified by sessionID. The realm must match the session owner's realm. Authenticated users may disconnect their own sessions without an additional client role. Disconnecting another user's session requires the openremote client role write:admin or superuser status. Non-superusers are limited to their own active realm; superusers may disconnect sessions across realms, including inactive realms.
+     * Response code 403 - The realm is inactive for a non-superuser, or the caller is neither the session owner, a user with write:admin, nor a superuser
+     * Response code 404 - The session or its owning user does not exist, or the session does not belong to the specified realm
+     * Response code 405 - A non-superuser cannot access the session owner's realm
+     * HTTP DELETE /user/{realm}/disconnect/{sessionID}
+     * Java method: org.openremote.model.security.UserResource.disconnectUserSession
      */
-    notificationAcknowledged(notificationId: number, acknowledgement: any, queryParams?: {
-        targetId?: string;
-    }, options?: O): RestResponse<void>;
+    disconnectUserSession(realm: string, sessionID: string, options?: O): RestResponse<void>;
     /**
-     * Marks one target's notification as delivered after matching both notificationId and targetId. Anonymous callers may update notifications sent to a public asset; authenticated callers are constrained to their own user, realm, or accessible assets.
-     * HTTP PUT /notification/{notificationId}/delivered
-     * Java method: org.openremote.model.notification.NotificationResource.notificationDelivered
+     * Asks the identity provider to send or initiate its configured password-reset action for the specified user. The target realm must be active unless the caller is a superuser.
+     * Response code 405 - The caller cannot mutate a user in the requested realm
+     * HTTP PUT /user/{realm}/request-password-reset/{userId}
+     * Java method: org.openremote.model.security.UserResource.requestPasswordReset
      */
-    notificationDelivered(notificationId: number, queryParams?: {
-        targetId?: string;
-    }, options?: O): RestResponse<void>;
-}
-export declare class AssetResourceClient<O> {
-    protected httpClient: HttpClient<O>;
-    constructor(httpClient: HttpClient<O>);
+    requestPasswordReset(realm: string, userId: string, options?: O): RestResponse<void>;
     /**
-     * Creates an asset in an accessible realm and returns the persisted representation. The server generates an ID when absent; supplied IDs must be globally unique and 22 characters long.
-     * HTTP POST /asset
-     * Java method: org.openremote.model.asset.AssetResource.create
+     * Replaces a user's credential in an administered realm using the supplied credential representation. The target realm must be active unless the caller is a superuser.
+     * Response code 405 - The caller cannot mutate a user in the requested realm
+     * HTTP PUT /user/{realm}/reset-password/{userId}
+     * Java method: org.openremote.model.security.UserResource.updatePassword
      */
-    create(asset: Model.Asset, options?: O): RestResponse<Model.Asset>;
+    updatePassword(realm: string, userId: string, credential: Model.Credential, options?: O): RestResponse<void>;
     /**
-     * Permanently deletes every asset identified by repeated assetId query parameters, subject to realm and restricted-user access rules.
-     * HTTP DELETE /asset
-     * Java method: org.openremote.model.asset.AssetResource.delete
+     * Generates and returns a new client secret for a service user in an administered realm. The target realm must be active unless the caller is a superuser.
+     * HTTP GET /user/{realm}/reset-secret/{userId}
+     * Java method: org.openremote.model.security.UserResource.resetSecret
      */
-    delete(queryParams?: {
-        assetId?: string[];
-    }, options?: O): RestResponse<void>;
+    resetSecret(realm: string, userId: string, options?: O): RestResponse<string>;
     /**
-     * Submits a batch of attribute states using current server time and returns one result per input item. Authorization and processing failures are encoded in each AttributeWriteResult rather than returned as an HTTP error.
-     * HTTP PUT /asset/attributes
-     * Java method: org.openremote.model.asset.AssetResource.writeAttributeValues
+     * Creates, updates, or removes role definitions for the default OpenRemote client in the requested realm. The target realm must be active unless the caller is a superuser.
+     * HTTP PUT /user/{realm}/roles
+     * Java method: org.openremote.model.security.UserResource.updateRoles
      */
-    writeAttributeValues(attributeStates: Model.AttributeState[], options?: O): RestResponse<Model.AttributeWriteResult[]>;
+    updateRoles(realm: string, roles: Model.Role[], options?: O): RestResponse<void>;
     /**
-     * Submits a batch of complete attribute events and returns one result per input item. Supplied timestamps are preserved; authorization and processing failures are encoded per result rather than returned as an HTTP error.
-     * HTTP PUT /asset/attributes/timestamp
-     * Java method: org.openremote.model.asset.AssetResource.writeAttributeEvents
+     * Returns realm-level role names assigned to one user. Without read-admin permission, callers may retrieve only their own roles. The target realm must be active unless the caller is a superuser.
+     * HTTP GET /user/{realm}/userRealmRoles/{userId}
+     * Java method: org.openremote.model.security.UserResource.getUserRealmRoles
      */
-    writeAttributeEvents(attributeEvents: Model.AttributeEvent[], options?: O): RestResponse<Model.AttributeWriteResult[]>;
+    getUserRealmRoles(realm: string, userId: string, options?: O): RestResponse<string[]>;
     /**
-     * Returns only the number of assets matching an AssetQuery after applying the caller's realm, public, and linked-asset access constraints.
-     * HTTP POST /asset/count
-     * Java method: org.openremote.model.asset.AssetResource.queryCount
+     * Replaces the user's assigned realm-level role names in an administered realm. The target realm must be active unless the caller is a superuser.
+     * HTTP PUT /user/{realm}/userRealmRoles/{userId}
+     * Java method: org.openremote.model.security.UserResource.updateUserRealmRoles
      */
-    queryCount(query: Model.AssetQuery, options?: O): RestResponse<number>;
+    updateUserRealmRoles(realm: string, userId: string, roles: string[], options?: O): RestResponse<void>;
     /**
-     * Clears the parent reference of every asset listed in repeated assetIds query parameters.
-     * HTTP DELETE /asset/parent
-     * Java method: org.openremote.model.asset.AssetResource.updateNoneParent
+     * Returns role names assigned to one user for the named client. Without read-admin permission, callers may retrieve only their own roles. The target realm must be active unless the caller is a superuser.
+     * HTTP GET /user/{realm}/userRoles/{userId}/{clientId}
+     * Java method: org.openremote.model.security.UserResource.getUserClientRoles
      */
-    updateNoneParent(queryParams?: {
-        assetIds?: string[];
-    }, options?: O): RestResponse<void>;
+    getUserClientRoles(realm: string, userId: string, clientId: string, options?: O): RestResponse<string[]>;
     /**
-     * Returns the asset identity and properties without loading attributes or path data. The same access rules as getAsset apply.
-     * HTTP GET /asset/partial/{assetId}
-     * Java method: org.openremote.model.asset.AssetResource.getPartial
+     * Replaces the user's assigned role names for the named client in an administered realm. The target realm must be active unless the caller is a superuser.
+     * HTTP PUT /user/{realm}/userRoles/{userId}/{clientId}
+     * Java method: org.openremote.model.security.UserResource.updateUserClientRoles
      */
-    getPartial(assetId: string, options?: O): RestResponse<Model.Asset>;
+    updateUserClientRoles(realm: string, userId: string, clientId: string, roles: string[], options?: O): RestResponse<void>;
     /**
-     * Executes an AssetQuery after constraining realm and linked-asset access. Anonymous callers receive public-readable assets only; the query select clause controls which fields are populated.
-     * HTTP POST /asset/query
-     * Java method: org.openremote.model.asset.AssetResource.queryAssets
+     * Returns active MQTT sessions for one user, including connection ID, creation time, and remote address. Without read-admin permission, callers may inspect only themselves. The target realm must be active unless the caller is a superuser.
+     * HTTP GET /user/{realm}/userSessions/{userId}
+     * Java method: org.openremote.model.security.UserResource.getUserSessions
      */
-    queryAssets(query: Model.AssetQuery, options?: O): RestResponse<Model.Asset[]>;
+    getUserSessions(realm: string, userId: string, options?: O): RestResponse<Model.UserSession[]>;
     /**
-     * Applies the same authorization and selection rules as queryAssets, then returns a hierarchy optimized for tree display rather than a flat asset array.
-     * HTTP POST /asset/tree
-     * Java method: org.openremote.model.asset.AssetResource.queryAssetTree
+     * Creates an identity-provider user in a realm administered by the caller and returns the resulting user record. The target realm must be active unless the caller is a superuser.
+     * HTTP POST /user/{realm}/users
+     * Java method: org.openremote.model.security.UserResource.create
      */
-    queryAssetTree(query: Model.AssetQuery, options?: O): RestResponse<Model.AssetTree>;
+    create(realm: string, user: Model.User, options?: O): RestResponse<Model.User>;
     /**
-     * Returns partial linked assets for a restricted user, root assets for an unrestricted realm user, and an empty array for a super user. Attributes and paths are omitted; use getAsset for full details.
-     * HTTP GET /asset/user/current
-     * Java method: org.openremote.model.asset.AssetResource.getCurrentUserAssets
+     * Updates an existing identity-provider user in an administered realm. The master administrator cannot be disabled. The target realm must be active unless the caller is a superuser.
+     * Response code 405 - The requested cross-realm or protected master-administrator mutation is not allowed
+     * HTTP PUT /user/{realm}/users
+     * Java method: org.openremote.model.security.UserResource.update
      */
-    getCurrentUserAssets(options?: O): RestResponse<Model.Asset[]>;
+    update(realm: string, user: Model.User, options?: O): RestResponse<Model.User>;
     /**
-     * Creates all supplied links as one operation. Every item must identify the same realm and user, and every referenced realm, user, and asset must exist.
-     * HTTP POST /asset/user/link
-     * Java method: org.openremote.model.asset.AssetResource.createUserAssetLinks
+     * Permanently deletes a user from an administered realm. The master-realm administrator cannot be deleted. The target realm must be active unless the caller is a superuser.
+     * Response code 405 - The master-realm administrator cannot be deleted
+     * HTTP DELETE /user/{realm}/users/{userId}
+     * Java method: org.openremote.model.security.UserResource.delete
      */
-    createUserAssetLinks(userAssets: Model.UserAssetLink[], options?: O): RestResponse<void>;
+    delete(realm: string, userId: string, options?: O): RestResponse<void>;
     /**
-     * Returns user-asset links in the required realm, optionally filtered by userId and assetId. Missing users or assets produce an empty result; restricted users cannot call this operation.
-     * HTTP GET /asset/user/link
-     * Java method: org.openremote.model.asset.AssetResource.getUserAssetLinks
+     * Returns all role definitions exposed by the named identity-provider client. Realm-administrator access is required. The target realm must be active unless the caller is a superuser.
+     * HTTP GET /user/{realm}/{clientId}/roles
+     * Java method: org.openremote.model.security.UserResource.getClientRoles
      */
-    getUserAssetLinks(queryParams?: {
-        realm?: string;
-        userId?: string;
-        assetId?: string;
-    }, options?: O): RestResponse<Model.UserAssetLink[]>;
+    getClientRoles(realm: string, clientId: string, options?: O): RestResponse<Model.Role[]>;
     /**
-     * Removes all supplied links. Every item must identify the same realm and user.
-     * HTTP POST /asset/user/link/delete
-     * Java method: org.openremote.model.asset.AssetResource.deleteUserAssetLinks
+     * Creates, updates, or removes role definitions for a named identity-provider client. The target realm must be active unless the caller is a superuser.
+     * HTTP PUT /user/{realm}/{clientId}/roles
+     * Java method: org.openremote.model.security.UserResource.updateClientRoles
      */
-    deleteUserAssetLinks(userAssets: Model.UserAssetLink[], options?: O): RestResponse<void>;
+    updateClientRoles(realm: string, clientId: string, roles: Model.Role[], options?: O): RestResponse<void>;
     /**
-     * Removes every asset link belonging to the user in the requested realm.
-     * HTTP DELETE /asset/user/link/{realm}/{userId}
-     * Java method: org.openremote.model.asset.AssetResource.deleteAllUserAssetLinks
+     * Returns one user when it belongs to the requested accessible realm. Without read-admin permission, callers may retrieve only their own user. The target realm must be active unless the caller is a superuser.
+     * HTTP GET /user/{realm}/{userId}
+     * Java method: org.openremote.model.security.UserResource.get
      */
-    deleteAllUserAssetLinks(realm: string, userId: string, options?: O): RestResponse<void>;
+    get(realm: string, userId: string, options?: O): RestResponse<Model.User>;
+}
+export declare class AssetModelResourceClient<O> {
+    protected httpClient: HttpClient<O>;
+    constructor(httpClient: HttpClient<O>);
     /**
-     * Removes the link identified by realm, user, and asset. The caller must be allowed to administer asset links in that realm.
-     * HTTP DELETE /asset/user/link/{realm}/{userId}/{assetId}
-     * Java method: org.openremote.model.asset.AssetResource.deleteUserAssetLink
+     * Returns the descriptors used to construct supported asset types, using a gateway model when the optional parent context resolves below a gateway.
+     * HTTP GET /model/assetDescriptors
+     * Java method: org.openremote.model.asset.AssetModelResource.getAssetDescriptors
      */
-    deleteUserAssetLink(realm: string, userId: string, assetId: string, options?: O): RestResponse<void>;
+    getAssetDescriptors(queryParams?: {
+        parentId?: string;
+        parentType?: string;
+    }, options?: O): RestResponse<Model.AssetDescriptor[]>;
     /**
-     * Returns a fully loaded asset including its path and attributes. Access is constrained to the caller's realm and, for restricted users, linked assets.
-     * HTTP GET /asset/{assetId}
-     * Java method: org.openremote.model.asset.AssetResource.get
+     * Returns metadata for one asset type from this Manager or, when parentId is below a gateway, from that gateway's model. An unknown or gateway-provided type that is not locally available returns no content.
+     * Response code 204 - No model information is available for the requested asset type
+     * HTTP GET /model/assetInfo/{assetType}
+     * Java method: org.openremote.model.asset.AssetModelResource.getAssetInfo
      */
-    get(assetId: string, options?: O): RestResponse<Model.Asset>;
+    getAssetInfo(assetType: string, queryParams?: {
+        parentId?: string;
+    }, options?: O): RestResponse<Model.AssetTypeInfo>;
     /**
-     * Replaces mutable asset data while preserving the path identifier. Realm, parent, restricted-user, and private-metadata rules are validated; disallowed restricted-user fields may be ignored.
-     * HTTP PUT /asset/{assetId}
-     * Java method: org.openremote.model.asset.AssetResource.update
+     * Returns type metadata from this Manager by default. When parentId identifies an asset below a gateway, the gateway's model is used instead; parentType can provide type context for a new parent that does not yet exist.
+     * HTTP GET /model/assetInfos
+     * Java method: org.openremote.model.asset.AssetModelResource.getAssetInfos
      */
-    update(assetId: string, asset: Model.Asset, options?: O): RestResponse<Model.Asset>;
+    getAssetInfos(queryParams?: {
+        parentId?: string;
+        parentType?: string;
+    }, options?: O): RestResponse<Model.AssetTypeInfo[]>;
     /**
-     * Submits an asynchronous attribute write using the current server time. The result reports whether the event was accepted, not whether downstream processing ultimately succeeded. Anonymous writes require public-write metadata.
-     * Response code 400 - The attribute write failed
-     * Response code 406 - The supplied value is not valid for the attribute
-     * Response code 429 - The attribute event queue is full; retry the write later
-     * HTTP PUT /asset/{assetId}/attribute/{attributeName}
-     * Java method: org.openremote.model.asset.AssetResource.writeAttributeValue
+     * Returns the JSON Schema and a weak ETag for the named value descriptor. Send If-None-Match on later requests to receive 304 when the schema has not changed.
+     * Response code 200 - The current JSON Schema
+     * Response code 304 - The supplied ETag still identifies the current schema
+     * HTTP GET /model/getValueDescriptorSchema
+     * Java method: org.openremote.model.asset.AssetModelResource.getValueDescriptorSchema
      */
-    writeAttributeValue$PUT$asset_assetId_attribute_attributeName(assetId: string, attributeName: string, value: any, options?: O): RestResponse<Model.AttributeWriteResult>;
+    getValueDescriptorSchema(queryParams?: {
+        name?: string;
+    }, options?: O): RestResponse<any>;
     /**
-     * Submits an asynchronous attribute write using the supplied Unix timestamp in milliseconds. The result reports acceptance only; anonymous writes require public-write metadata.
-     * Response code 400 - The attribute write failed
-     * Response code 406 - The supplied value is not valid for the attribute
-     * Response code 429 - The attribute event queue is full; retry the write later
-     * HTTP PUT /asset/{assetId}/attribute/{attributeName}/{timestamp}
-     * Java method: org.openremote.model.asset.AssetResource.writeAttributeValue
+     * Returns attribute metadata descriptors keyed by descriptor name, using a gateway model when parentId resolves below a gateway.
+     * HTTP GET /model/metaItemDescriptors
+     * Java method: org.openremote.model.asset.AssetModelResource.getMetaItemDescriptors
      */
-    writeAttributeValue$PUT$asset_assetId_attribute_attributeName_timestamp(assetId: string, attributeName: string, timestamp: number, value: any, options?: O): RestResponse<Model.AttributeWriteResult>;
+    getMetaItemDescriptors(queryParams?: {
+        parentId?: string;
+    }, options?: O): RestResponse<{
+        [index: string]: Model.MetaItemDescriptor;
+    }>;
     /**
-     * Sets parentAssetId as the parent of every asset listed in repeated assetIds query parameters. Parent and children must satisfy realm, access, and hierarchy constraints.
-     * HTTP PUT /asset/{parentAssetId}/child
-     * Java method: org.openremote.model.asset.AssetResource.updateParent
+     * Returns attribute value descriptors keyed by descriptor name, using a gateway model when parentId resolves below a gateway.
+     * HTTP GET /model/valueDescriptors
+     * Java method: org.openremote.model.asset.AssetModelResource.getValueDescriptors
      */
-    updateParent(parentAssetId: string, queryParams?: {
-        assetIds?: string[];
-    }, options?: O): RestResponse<void>;
+    getValueDescriptors(queryParams?: {
+        parentId?: string;
+    }, options?: O): RestResponse<{
+        [index: string]: Model.ValueDescriptor;
+    }>;
 }
-export declare class ConfigurationResourceClient<O> {
+export declare class AppResourceClient<O> {
     protected httpClient: HttpClient<O>;
     constructor(httpClient: HttpClient<O>);
     /**
-     * Returns the public Manager application configuration used by clients before and after authentication.
-     * HTTP GET /configuration/manager
-     * Java method: org.openremote.model.manager.ConfigurationResource.getManagerConfig
-     */
-    getManagerConfig(options?: O): RestResponse<Model.ManagerAppConfig>;
-    /**
-     * Replaces manager_config.json and returns the stored configuration. This administrative change affects Manager UI branding and behavior.
-     * HTTP PUT /configuration/manager
-     * Java method: org.openremote.model.manager.ConfigurationResource.update
+     * Returns the identifiers of applications installed in the Manager web root.
+     * HTTP GET /apps
+     * Java method: org.openremote.model.apps.AppResource.getApps
      */
-    update(managerConfiguration: Model.ManagerAppConfig, options?: O): RestResponse<Model.ManagerAppConfig>;
+    getApps(options?: O): RestResponse<string[]>;
     /**
-     * Decodes and stores the supplied FileInfo under the requested relative path, then returns its Manager API path.
-     * HTTP POST /configuration/manager/file
-     * Java method: org.openremote.model.manager.ConfigurationResource.fileUpload
+     * Loads the public console_config.json document used to configure console clients before sign-in.
+     * HTTP GET /apps/consoleConfig
+     * Java method: org.openremote.model.apps.AppResource.getConsoleConfig
      */
-    fileUpload(fileInfo: Model.FileInfo, queryParams?: {
-        path?: string;
-    }, options?: O): RestResponse<string>;
+    getConsoleConfig(options?: O): RestResponse<any>;
     /**
-     * Streams a previously uploaded configuration image using its detected media type.
-     * Response code 200 - The image file
-     * HTTP GET /configuration/manager/image/{filename: .+}
-     * Java method: org.openremote.model.manager.ConfigurationResource.getManagerConfigImage
+     * Loads each installed application's info.json file and returns the documents keyed by application identifier.
+     * HTTP GET /apps/info
+     * Java method: org.openremote.model.apps.AppResource.getAppInfos
      */
-    getManagerConfigImage(filename: string, options?: O): RestResponse<any>;
+    getAppInfos(options?: O): RestResponse<{
+        [index: string]: any;
+    }>;
 }
-export declare class DashboardResourceClient<O> {
+export declare class GatewayClientResourceClient<O> {
     protected httpClient: HttpClient<O>;
     constructor(httpClient: HttpClient<O>);
     /**
-     * Creates a dashboard in an accessible realm. The server assigns the authenticated user as owner and initially stores the dashboard with shared access.
-     * HTTP POST /dashboard
-     * Java method: org.openremote.model.dashboard.DashboardResource.create
+     * Removes connections for all repeated realm query parameters. Deleting multiple realms is restricted to super users.
+     * HTTP DELETE /gateway/connection
+     * Java method: org.openremote.model.gateway.GatewayClientResource.deleteConnections
      */
-    create(dashboard: Model.Dashboard, options?: O): RestResponse<Model.Dashboard>;
+    deleteConnections(queryParams?: {
+        realm?: string[];
+    }, options?: O): RestResponse<void>;
     /**
-     * Updates an existing dashboard when the authenticated user can modify it in the dashboard's realm.
-     * HTTP PUT /dashboard
-     * Java method: org.openremote.model.dashboard.DashboardResource.update
+     * Returns every configured central-manager connection. Unlike the single-realm endpoint, this operation is restricted to super users.
+     * HTTP GET /gateway/connection
+     * Java method: org.openremote.model.gateway.GatewayClientResource.getConnections
      */
-    update(dashboard: Model.Dashboard, options?: O): RestResponse<Model.Dashboard>;
+    getConnections(options?: O): RestResponse<Model.GatewayConnection[]>;
     /**
-     * Returns dashboards visible to the caller in the requested realm. Anonymous callers receive public dashboards only; authenticated access also depends on roles, ownership, and linked assets.
-     * HTTP GET /dashboard/all/{realm}
-     * Java method: org.openremote.model.dashboard.DashboardResource.getAllRealmDashboards
+     * Removes the central-manager connection for one realm. Realm administrators can remove their own connection; super users can remove any connection.
+     * HTTP DELETE /gateway/connection/{realm}
+     * Java method: org.openremote.model.gateway.GatewayClientResource.deleteConnection
      */
-    getAllRealmDashboards(realm: string, options?: O): RestResponse<Model.Dashboard[]>;
+    deleteConnection(realm: string, options?: O): RestResponse<void>;
     /**
-     * Executes a dashboard query after constraining it to the caller's realm, roles, ownership, and asset access. A missing body uses the request realm and default visibility rules.
-     * HTTP POST /dashboard/query
-     * Java method: org.openremote.model.dashboard.DashboardResource.query
+     * Returns the central-manager connection configured for a realm, or null when none exists. Realm administrators can read their own realm; super users can read any realm.
+     * Response code 204 - No gateway connection is configured for the realm
+     * HTTP GET /gateway/connection/{realm}
+     * Java method: org.openremote.model.gateway.GatewayClientResource.getConnection
      */
-    query(dashboardQuery: Model.DashboardQuery, options?: O): RestResponse<Model.Dashboard[]>;
+    getConnection(realm: string, options?: O): RestResponse<Model.GatewayConnection>;
     /**
-     * Permanently removes a dashboard when the authenticated user can modify it in the requested realm.
-     * HTTP DELETE /dashboard/{realm}/{dashboardId}
-     * Java method: org.openremote.model.dashboard.DashboardResource.delete
+     * Creates or replaces the connection for the path realm. The server forces the local realm, including realm predicates in attribute filters, to match the path.
+     * HTTP PUT /gateway/connection/{realm}
+     * Java method: org.openremote.model.gateway.GatewayClientResource.setConnection
      */
-    delete(realm: string, dashboardId: string, options?: O): RestResponse<void>;
+    setConnection(realm: string, connection: Model.GatewayConnection, options?: O): RestResponse<void>;
     /**
-     * Returns one dashboard only when it is visible to the caller. Inaccessible and nonexistent dashboards both return 404 to avoid disclosing their existence.
-     * HTTP GET /dashboard/{realm}/{dashboardId}
-     * Java method: org.openremote.model.dashboard.DashboardResource.get
+     * Returns the live connection state for the requested local realm.
+     * HTTP GET /gateway/status/{realm}
+     * Java method: org.openremote.model.gateway.GatewayClientResource.getConnectionStatus
      */
-    get(realm: string, dashboardId: string, options?: O): RestResponse<Model.Dashboard>;
+    getConnectionStatus(realm: string, options?: O): RestResponse<Model.ConnectionStatus>;
 }
-export declare class AlarmResourceClient<O> {
+export declare class StatusResourceClient<O> {
     protected httpClient: HttpClient<O>;
     constructor(httpClient: HttpClient<O>);
     /**
-     * Creates a manual alarm in an accessible realm and optionally links it to the supplied asset IDs. The authenticated user or client becomes the alarm source.
-     * HTTP POST /alarm
-     * Java method: org.openremote.model.alarm.AlarmResource.createAlarm
-     */
-    createAlarm(alarm: Model.Alarm, queryParams?: {
-        assetIds?: string[];
-    }, options?: O): RestResponse<Model.SentAlarm>;
-    /**
-     * Returns alarms in the requested accessible realm, optionally filtered by status, linked asset, or assignee. When realm is omitted, the authenticated realm is used.
-     * HTTP GET /alarm
-     * Java method: org.openremote.model.alarm.AlarmResource.getAlarms
+     * Returns health data keyed by registered health-provider name. A null provider result is represented as JSON null.
+     * HTTP GET /health
+     * Java method: org.openremote.model.system.StatusResource.getHealthStatus
      */
-    getAlarms(queryParams?: {
-        realm?: string;
-        status?: Model.AlarmStatus;
-        assetId?: string;
-        assigneeId?: string;
-    }, options?: O): RestResponse<Model.SentAlarm[]>;
+    getHealthStatus(options?: O): RestResponse<{
+        [index: string]: any;
+    }>;
     /**
-     * Permanently removes all alarms identified by the request body after verifying access to every alarm's realm.
-     * HTTP DELETE /alarm
-     * Java method: org.openremote.model.alarm.AlarmResource.removeAlarms
+     * Returns public bootstrap information, including the Manager version and identity-provider URL.
+     * HTTP GET /info
+     * Java method: org.openremote.model.system.StatusResource.getInfo
      */
-    removeAlarms(ids: number[], options?: O): RestResponse<void>;
+    getInfo(options?: O): RestResponse<{
+        [index: string]: any;
+    }>;
+}
+export declare class GatewayServiceResourceClient<O> {
+    protected httpClient: HttpClient<O>;
+    constructor(httpClient: HttpClient<O>);
     /**
-     * Adds links between assets and one existing alarm.
-
-The request body is a list for backward compatibility, but this operation now has single-alarm semantics:
-every item must contain the same `id.realm` and the same `id.alarmId`. The alarm must exist in that realm,
-every asset must exist in the same realm, and the authenticated user must have access to that realm. Requests
-containing mixed alarm IDs or realms are rejected as bad requests.
-
-Existing links are left unchanged; duplicate links in the request or links that already exist are ignored.
-This operation does not remove existing links from the alarm.
-
-     * HTTP PUT /alarm/assets
-     * Java method: org.openremote.model.alarm.AlarmResource.setAssetLinks
+     * Requests a TCP tunnel through a connected gateway and returns its allocated local endpoint. When realm is omitted, the authenticated realm is used.
+     * Response code 417 - The gateway could not establish the requested tunnel
+     * HTTP POST /gateway/tunnel
+     * Java method: org.openremote.model.gateway.GatewayServiceResource.startTunnel
      */
-    setAssetLinks(links: Model.AlarmAssetLink[], options?: O): RestResponse<void>;
+    startTunnel(tunnelInfo: Model.GatewayTunnelInfo, options?: O): RestResponse<Model.GatewayTunnelInfo>;
     /**
-     * Returns one alarm when its realm is active and accessible to the authenticated user.
-     * HTTP GET /alarm/{alarmId}
-     * Java method: org.openremote.model.alarm.AlarmResource.getAlarm
+     * Stops the tunnel identified by the supplied gateway, target, and port information. When realm is omitted, the authenticated realm is used.
+     * HTTP DELETE /gateway/tunnel
+     * Java method: org.openremote.model.gateway.GatewayServiceResource.stopTunnel
      */
-    getAlarm(alarmId: number, options?: O): RestResponse<Model.SentAlarm>;
+    stopTunnel(tunnelInfo: Model.GatewayTunnelInfo, options?: O): RestResponse<void>;
     /**
-     * Permanently removes one alarm after verifying access to its realm.
-     * HTTP DELETE /alarm/{alarmId}
-     * Java method: org.openremote.model.alarm.AlarmResource.removeAlarm
+     * Returns active tunnels for all gateway assets in the requested realm. Restricted users cannot list an entire realm.
+     * HTTP GET /gateway/tunnel/{realm}
+     * Java method: org.openremote.model.gateway.GatewayServiceResource.getAllActiveTunnelInfos
      */
-    removeAlarm(alarmId: number, options?: O): RestResponse<void>;
+    getAllActiveTunnelInfos(realm: string, options?: O): RestResponse<Model.GatewayTunnelInfo[]>;
     /**
-     * Updates the mutable state of an existing alarm after verifying access to its current realm.
-     * HTTP PUT /alarm/{alarmId}
-     * Java method: org.openremote.model.alarm.AlarmResource.updateAlarm
+     * Returns active tunnels for one gateway asset. Restricted users may query only a linked gateway.
+     * HTTP GET /gateway/tunnel/{realm}/{id}
+     * Java method: org.openremote.model.gateway.GatewayServiceResource.getGatewayActiveTunnelInfos
      */
-    updateAlarm(alarmId: number, alarm: Model.SentAlarm, options?: O): RestResponse<void>;
+    getGatewayActiveTunnelInfos(realm: string, id: string, options?: O): RestResponse<Model.GatewayTunnelInfo[]>;
     /**
-     * Returns links from the alarm to assets in the explicitly supplied accessible realm.
-     * HTTP GET /alarm/{alarmId}/assets
-     * Java method: org.openremote.model.alarm.AlarmResource.getAssetLinks
+     * Returns the tunnel matching realm, gateway, target host, and target port, or null when no active tunnel matches.
+     * Response code 204 - No active tunnel matches the requested endpoint
+     * HTTP GET /gateway/tunnel/{realm}/{id}/{target}/{targetPort}
+     * Java method: org.openremote.model.gateway.GatewayServiceResource.getActiveTunnelInfo
      */
-    getAssetLinks(alarmId: number, queryParams?: {
-        realm?: string;
-    }, options?: O): RestResponse<Model.AlarmAssetLink[]>;
+    getActiveTunnelInfo(realm: string, id: string, target: string, targetPort: number, options?: O): RestResponse<Model.GatewayTunnelInfo>;
 }
 export type RestResponse<R> = Promise<Axios.GenericAxiosResponse<R>>;
 export declare class ApiClient {
-    protected _appResource: AxiosAppResourceClient;
-    protected _gatewayClientResource: AxiosGatewayClientResourceClient;
-    protected _assetModelResource: AxiosAssetModelResourceClient;
+    protected _realmResource: AxiosRealmResourceClient;
+    protected _dashboardResource: AxiosDashboardResourceClient;
+    protected _assetResource: AxiosAssetResourceClient;
+    protected _configurationResource: AxiosConfigurationResourceClient;
+    protected _notificationResource: AxiosNotificationResourceClient;
+    protected _externalServiceResource: AxiosExternalServiceResourceClient;
     protected _agentResource: AxiosAgentResourceClient;
-    protected _assetPredictedDatapointResource: AxiosAssetPredictedDatapointResourceClient;
-    protected _statusResource: AxiosStatusResourceClient;
     protected _consoleResource: AxiosConsoleResourceClient;
-    protected _gatewayServiceResource: AxiosGatewayServiceResourceClient;
-    protected _externalServiceResource: AxiosExternalServiceResourceClient;
-    protected _assetDatapointResource: AxiosAssetDatapointResourceClient;
+    protected _assetPredictedDatapointResource: AxiosAssetPredictedDatapointResourceClient;
+    protected _alarmResource: AxiosAlarmResourceClient;
     protected _provisioningResource: AxiosProvisioningResourceClient;
-    protected _mapResource: AxiosMapResourceClient;
-    protected _realmResource: AxiosRealmResourceClient;
-    protected _flowResource: AxiosFlowResourceClient;
+    protected _assetDatapointResource: AxiosAssetDatapointResourceClient;
     protected _syslogResource: AxiosSyslogResourceClient;
-    protected _userResource: AxiosUserResourceClient;
     protected _rulesResource: AxiosRulesResourceClient;
-    protected _notificationResource: AxiosNotificationResourceClient;
-    protected _assetResource: AxiosAssetResourceClient;
-    protected _configurationResource: AxiosConfigurationResourceClient;
-    protected _dashboardResource: AxiosDashboardResourceClient;
-    protected _alarmResource: AxiosAlarmResourceClient;
+    protected _flowResource: AxiosFlowResourceClient;
+    protected _mapResource: AxiosMapResourceClient;
+    protected _userResource: AxiosUserResourceClient;
+    protected _assetModelResource: AxiosAssetModelResourceClient;
+    protected _appResource: AxiosAppResourceClient;
+    protected _gatewayClientResource: AxiosGatewayClientResourceClient;
+    protected _statusResource: AxiosStatusResourceClient;
+    protected _gatewayServiceResource: AxiosGatewayServiceResourceClient;
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
-    get AppResource(): AxiosAppResourceClient;
-    get GatewayClientResource(): AxiosGatewayClientResourceClient;
-    get AssetModelResource(): AxiosAssetModelResourceClient;
+    get RealmResource(): AxiosRealmResourceClient;
+    get DashboardResource(): AxiosDashboardResourceClient;
+    get AssetResource(): AxiosAssetResourceClient;
+    get ConfigurationResource(): AxiosConfigurationResourceClient;
+    get NotificationResource(): AxiosNotificationResourceClient;
+    get ExternalServiceResource(): AxiosExternalServiceResourceClient;
     get AgentResource(): AxiosAgentResourceClient;
-    get AssetPredictedDatapointResource(): AxiosAssetPredictedDatapointResourceClient;
-    get StatusResource(): AxiosStatusResourceClient;
     get ConsoleResource(): AxiosConsoleResourceClient;
-    get GatewayServiceResource(): AxiosGatewayServiceResourceClient;
-    get ExternalServiceResource(): AxiosExternalServiceResourceClient;
-    get AssetDatapointResource(): AxiosAssetDatapointResourceClient;
+    get AssetPredictedDatapointResource(): AxiosAssetPredictedDatapointResourceClient;
+    get AlarmResource(): AxiosAlarmResourceClient;
     get ProvisioningResource(): AxiosProvisioningResourceClient;
-    get MapResource(): AxiosMapResourceClient;
-    get RealmResource(): AxiosRealmResourceClient;
-    get FlowResource(): AxiosFlowResourceClient;
+    get AssetDatapointResource(): AxiosAssetDatapointResourceClient;
     get SyslogResource(): AxiosSyslogResourceClient;
-    get UserResource(): AxiosUserResourceClient;
     get RulesResource(): AxiosRulesResourceClient;
-    get NotificationResource(): AxiosNotificationResourceClient;
-    get AssetResource(): AxiosAssetResourceClient;
-    get ConfigurationResource(): AxiosConfigurationResourceClient;
-    get DashboardResource(): AxiosDashboardResourceClient;
-    get AlarmResource(): AxiosAlarmResourceClient;
+    get FlowResource(): AxiosFlowResourceClient;
+    get MapResource(): AxiosMapResourceClient;
+    get UserResource(): AxiosUserResourceClient;
+    get AssetModelResource(): AxiosAssetModelResourceClient;
+    get AppResource(): AxiosAppResourceClient;
+    get GatewayClientResource(): AxiosGatewayClientResourceClient;
+    get StatusResource(): AxiosStatusResourceClient;
+    get GatewayServiceResource(): AxiosGatewayServiceResourceClient;
 }
 import * as Axios from "axios";
 declare module "axios" {
@@ -1222,70 +1225,70 @@ declare module "axios" {
         data: R;
     }
 }
-export declare class AxiosAppResourceClient extends AppResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosRealmResourceClient extends RealmResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosGatewayClientResourceClient extends GatewayClientResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosDashboardResourceClient extends DashboardResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosAssetModelResourceClient extends AssetModelResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosAssetResourceClient extends AssetResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosAgentResourceClient extends AgentResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosConfigurationResourceClient extends ConfigurationResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosAssetPredictedDatapointResourceClient extends AssetPredictedDatapointResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosNotificationResourceClient extends NotificationResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosStatusResourceClient extends StatusResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosExternalServiceResourceClient extends ExternalServiceResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosConsoleResourceClient extends ConsoleResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosAgentResourceClient extends AgentResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosGatewayServiceResourceClient extends GatewayServiceResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosConsoleResourceClient extends ConsoleResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosExternalServiceResourceClient extends ExternalServiceResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosAssetPredictedDatapointResourceClient extends AssetPredictedDatapointResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosAssetDatapointResourceClient extends AssetDatapointResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosAlarmResourceClient extends AlarmResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
 export declare class AxiosProvisioningResourceClient extends ProvisioningResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosMapResourceClient extends MapResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosAssetDatapointResourceClient extends AssetDatapointResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosRealmResourceClient extends RealmResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosSyslogResourceClient extends SyslogResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosFlowResourceClient extends FlowResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosRulesResourceClient extends RulesResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosSyslogResourceClient extends SyslogResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosFlowResourceClient extends FlowResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosUserResourceClient extends UserResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosMapResourceClient extends MapResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosRulesResourceClient extends RulesResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosUserResourceClient extends UserResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosNotificationResourceClient extends NotificationResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosAssetModelResourceClient extends AssetModelResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosAssetResourceClient extends AssetResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosAppResourceClient extends AppResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosConfigurationResourceClient extends ConfigurationResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosGatewayClientResourceClient extends GatewayClientResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosDashboardResourceClient extends DashboardResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosStatusResourceClient extends StatusResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosAlarmResourceClient extends AlarmResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosGatewayServiceResourceClient extends GatewayServiceResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
 //# sourceMappingURL=restclient.d.ts.map