@openremote/rest 1.32.0 → 1.32.1

package/build/lib/restclient.d.ts

@@ -9,180 +9,69 @@ export interface HttpClient<O> {
         options?: O;
     }): RestResponse<R>;
 }
-export declare class StatusResourceClient<O> {
-    protected httpClient: HttpClient<O>;
-    constructor(httpClient: HttpClient<O>);
-    /**
-     * Returns health data keyed by registered health-provider name. A null provider result is represented as JSON null.
-     * HTTP GET /health
-     * Java method: org.openremote.model.system.StatusResource.getHealthStatus
-     */
-    getHealthStatus(options?: O): RestResponse<{
-        [index: string]: any;
-    }>;
-    /**
-     * Returns public bootstrap information, including the Manager version and identity-provider URL.
-     * HTTP GET /info
-     * Java method: org.openremote.model.system.StatusResource.getInfo
-     */
-    getInfo(options?: O): RestResponse<{
-        [index: string]: any;
-    }>;
-}
-export declare class UserResourceClient<O> {
+export declare class DashboardResourceClient<O> {
     protected httpClient: HttpClient<O>;
     constructor(httpClient: HttpClient<O>);
     /**
-     * Stores the supplied non-empty locale string as the caller's identity-provider locale attribute. The target realm must be active unless the caller is a superuser.
-     * HTTP PUT /user/locale
-     * Java method: org.openremote.model.security.UserResource.updateCurrentUserLocale
-     */
-    updateCurrentUserLocale(locale: string, options?: O): RestResponse<void>;
-    /**
-     * Executes a UserQuery. Non-super users are forced into their authenticated realm and cannot see system accounts; callers with read-users but not read-admin receive basic fields only. The target realm must be active unless the caller is a superuser.
-     * HTTP POST /user/query
-     * Java method: org.openremote.model.security.UserResource.query
-     */
-    query(query: Model.UserQuery, options?: O): RestResponse<Model.User[]>;
-    /**
-     * Initiates the identity provider's configured password-reset action for the caller's own account. The target realm must be active unless the caller is a superuser.
-     * HTTP PUT /user/request-password-reset
-     * Java method: org.openremote.model.security.UserResource.requestPasswordResetCurrent
-     */
-    requestPasswordResetCurrent(options?: O): RestResponse<void>;
-    /**
-     * Replaces the caller's own identity-provider credential using the supplied credential representation. The target realm must be active unless the caller is a superuser.
-     * HTTP PUT /user/reset-password
-     * Java method: org.openremote.model.security.UserResource.updatePasswordCurrent
-     */
-    updatePasswordCurrent(credential: Model.Credential, options?: O): RestResponse<void>;
-    /**
-     * Updates the caller's own profile. A supplied user ID must match the access token; role and realm administration are not provided by this endpoint. The target realm must be active unless the caller is a superuser.
-     * HTTP PUT /user/update
-     * Java method: org.openremote.model.security.UserResource.updateCurrent
-     */
-    updateCurrent(user: Model.User, options?: O): RestResponse<Model.User>;
-    /**
-     * Returns the identity-provider record corresponding to the current access token. The target realm must be active unless the caller is a superuser.
-     * HTTP GET /user/user
-     * Java method: org.openremote.model.security.UserResource.getCurrent
-     */
-    getCurrent(options?: O): RestResponse<Model.User>;
-    /**
-     * Returns realm-level role names assigned to the caller. The target realm must be active unless the caller is a superuser.
-     * HTTP GET /user/userRealmRoles
-     * Java method: org.openremote.model.security.UserResource.getCurrentUserRealmRoles
-     */
-    getCurrentUserRealmRoles(options?: O): RestResponse<string[]>;
-    /**
-     * Returns role names assigned to the caller for the named identity-provider client. The target realm must be active unless the caller is a superuser.
-     * HTTP GET /user/userRoles/{clientId}
-     * Java method: org.openremote.model.security.UserResource.getCurrentUserClientRoles
-     */
-    getCurrentUserClientRoles(clientId: string, options?: O): RestResponse<string[]>;
-    /**
-     * Terminates the active MQTT connection identified by sessionID. The realm must match the session owner's realm. Authenticated users may disconnect their own sessions without an additional client role. Disconnecting another user's session requires the openremote client role write:admin or superuser status. Non-superusers are limited to their own active realm; superusers may disconnect sessions across realms, including inactive realms.
-     * Response code 403 - The realm is inactive for a non-superuser, or the caller is neither the session owner, a user with write:admin, nor a superuser
-     * Response code 404 - The session or its owning user does not exist, or the session does not belong to the specified realm
-     * Response code 405 - A non-superuser cannot access the session owner's realm
-     * HTTP DELETE /user/{realm}/disconnect/{sessionID}
-     * Java method: org.openremote.model.security.UserResource.disconnectUserSession
-     */
-    disconnectUserSession(realm: string, sessionID: string, options?: O): RestResponse<void>;
-    /**
-     * Asks the identity provider to send or initiate its configured password-reset action for the specified user. The target realm must be active unless the caller is a superuser.
-     * Response code 405 - The caller cannot mutate a user in the requested realm
-     * HTTP PUT /user/{realm}/request-password-reset/{userId}
-     * Java method: org.openremote.model.security.UserResource.requestPasswordReset
-     */
-    requestPasswordReset(realm: string, userId: string, options?: O): RestResponse<void>;
-    /**
-     * Replaces a user's credential in an administered realm using the supplied credential representation. The target realm must be active unless the caller is a superuser.
-     * Response code 405 - The caller cannot mutate a user in the requested realm
-     * HTTP PUT /user/{realm}/reset-password/{userId}
-     * Java method: org.openremote.model.security.UserResource.updatePassword
-     */
-    updatePassword(realm: string, userId: string, credential: Model.Credential, options?: O): RestResponse<void>;
-    /**
-     * Generates and returns a new client secret for a service user in an administered realm. The target realm must be active unless the caller is a superuser.
-     * HTTP GET /user/{realm}/reset-secret/{userId}
-     * Java method: org.openremote.model.security.UserResource.resetSecret
-     */
-    resetSecret(realm: string, userId: string, options?: O): RestResponse<string>;
-    /**
-     * Creates, updates, or removes role definitions for the default OpenRemote client in the requested realm. The target realm must be active unless the caller is a superuser.
-     * HTTP PUT /user/{realm}/roles
-     * Java method: org.openremote.model.security.UserResource.updateRoles
-     */
-    updateRoles(realm: string, roles: Model.Role[], options?: O): RestResponse<void>;
-    /**
-     * Returns realm-level role names assigned to one user. Without read-admin permission, callers may retrieve only their own roles. The target realm must be active unless the caller is a superuser.
-     * HTTP GET /user/{realm}/userRealmRoles/{userId}
-     * Java method: org.openremote.model.security.UserResource.getUserRealmRoles
-     */
-    getUserRealmRoles(realm: string, userId: string, options?: O): RestResponse<string[]>;
-    /**
-     * Replaces the user's assigned realm-level role names in an administered realm. The target realm must be active unless the caller is a superuser.
-     * HTTP PUT /user/{realm}/userRealmRoles/{userId}
-     * Java method: org.openremote.model.security.UserResource.updateUserRealmRoles
-     */
-    updateUserRealmRoles(realm: string, userId: string, roles: string[], options?: O): RestResponse<void>;
-    /**
-     * Returns role names assigned to one user for the named client. Without read-admin permission, callers may retrieve only their own roles. The target realm must be active unless the caller is a superuser.
-     * HTTP GET /user/{realm}/userRoles/{userId}/{clientId}
-     * Java method: org.openremote.model.security.UserResource.getUserClientRoles
+     * Creates a dashboard in an accessible realm. The server assigns the authenticated user as owner and initially stores the dashboard with shared access.
+     * HTTP POST /dashboard
+     * Java method: org.openremote.model.dashboard.DashboardResource.create
      */
-    getUserClientRoles(realm: string, userId: string, clientId: string, options?: O): RestResponse<string[]>;
+    create(dashboard: Model.Dashboard, options?: O): RestResponse<Model.Dashboard>;
     /**
-     * Replaces the user's assigned role names for the named client in an administered realm. The target realm must be active unless the caller is a superuser.
-     * HTTP PUT /user/{realm}/userRoles/{userId}/{clientId}
-     * Java method: org.openremote.model.security.UserResource.updateUserClientRoles
+     * Updates an existing dashboard when the authenticated user can modify it in the dashboard's realm.
+     * HTTP PUT /dashboard
+     * Java method: org.openremote.model.dashboard.DashboardResource.update
      */
-    updateUserClientRoles(realm: string, userId: string, clientId: string, roles: string[], options?: O): RestResponse<void>;
+    update(dashboard: Model.Dashboard, options?: O): RestResponse<Model.Dashboard>;
     /**
-     * Returns active MQTT sessions for one user, including connection ID, creation time, and remote address. Without read-admin permission, callers may inspect only themselves. The target realm must be active unless the caller is a superuser.
-     * HTTP GET /user/{realm}/userSessions/{userId}
-     * Java method: org.openremote.model.security.UserResource.getUserSessions
+     * Returns dashboards visible to the caller in the requested realm. Anonymous callers receive public dashboards only; authenticated access also depends on roles, ownership, and linked assets.
+     * HTTP GET /dashboard/all/{realm}
+     * Java method: org.openremote.model.dashboard.DashboardResource.getAllRealmDashboards
      */
-    getUserSessions(realm: string, userId: string, options?: O): RestResponse<Model.UserSession[]>;
+    getAllRealmDashboards(realm: string, options?: O): RestResponse<Model.Dashboard[]>;
     /**
-     * Creates an identity-provider user in a realm administered by the caller and returns the resulting user record. The target realm must be active unless the caller is a superuser.
-     * HTTP POST /user/{realm}/users
-     * Java method: org.openremote.model.security.UserResource.create
+     * Executes a dashboard query after constraining it to the caller's realm, roles, ownership, and asset access. A missing body uses the request realm and default visibility rules.
+     * HTTP POST /dashboard/query
+     * Java method: org.openremote.model.dashboard.DashboardResource.query
      */
-    create(realm: string, user: Model.User, options?: O): RestResponse<Model.User>;
+    query(dashboardQuery: Model.DashboardQuery, options?: O): RestResponse<Model.Dashboard[]>;
     /**
-     * Updates an existing identity-provider user in an administered realm. The master administrator cannot be disabled. The target realm must be active unless the caller is a superuser.
-     * Response code 405 - The requested cross-realm or protected master-administrator mutation is not allowed
-     * HTTP PUT /user/{realm}/users
-     * Java method: org.openremote.model.security.UserResource.update
+     * Permanently removes a dashboard when the authenticated user can modify it in the requested realm.
+     * HTTP DELETE /dashboard/{realm}/{dashboardId}
+     * Java method: org.openremote.model.dashboard.DashboardResource.delete
      */
-    update(realm: string, user: Model.User, options?: O): RestResponse<Model.User>;
+    delete(realm: string, dashboardId: string, options?: O): RestResponse<void>;
     /**
-     * Permanently deletes a user from an administered realm. The master-realm administrator cannot be deleted. The target realm must be active unless the caller is a superuser.
-     * Response code 405 - The master-realm administrator cannot be deleted
-     * HTTP DELETE /user/{realm}/users/{userId}
-     * Java method: org.openremote.model.security.UserResource.delete
+     * Returns one dashboard only when it is visible to the caller. Inaccessible and nonexistent dashboards both return 404 to avoid disclosing their existence.
+     * HTTP GET /dashboard/{realm}/{dashboardId}
+     * Java method: org.openremote.model.dashboard.DashboardResource.get
      */
-    delete(realm: string, userId: string, options?: O): RestResponse<void>;
+    get(realm: string, dashboardId: string, options?: O): RestResponse<Model.Dashboard>;
+}
+export declare class AppResourceClient<O> {
+    protected httpClient: HttpClient<O>;
+    constructor(httpClient: HttpClient<O>);
     /**
-     * Returns all role definitions exposed by the named identity-provider client. Realm-administrator access is required. The target realm must be active unless the caller is a superuser.
-     * HTTP GET /user/{realm}/{clientId}/roles
-     * Java method: org.openremote.model.security.UserResource.getClientRoles
+     * Returns the identifiers of applications installed in the Manager web root.
+     * HTTP GET /apps
+     * Java method: org.openremote.model.apps.AppResource.getApps
      */
-    getClientRoles(realm: string, clientId: string, options?: O): RestResponse<Model.Role[]>;
+    getApps(options?: O): RestResponse<string[]>;
     /**
-     * Creates, updates, or removes role definitions for a named identity-provider client. The target realm must be active unless the caller is a superuser.
-     * HTTP PUT /user/{realm}/{clientId}/roles
-     * Java method: org.openremote.model.security.UserResource.updateClientRoles
+     * Loads the public console_config.json document used to configure console clients before sign-in.
+     * HTTP GET /apps/consoleConfig
+     * Java method: org.openremote.model.apps.AppResource.getConsoleConfig
      */
-    updateClientRoles(realm: string, clientId: string, roles: Model.Role[], options?: O): RestResponse<void>;
+    getConsoleConfig(options?: O): RestResponse<any>;
     /**
-     * Returns one user when it belongs to the requested accessible realm. Without read-admin permission, callers may retrieve only their own user. The target realm must be active unless the caller is a superuser.
-     * HTTP GET /user/{realm}/{userId}
-     * Java method: org.openremote.model.security.UserResource.get
+     * Loads each installed application's info.json file and returns the documents keyed by application identifier.
+     * HTTP GET /apps/info
+     * Java method: org.openremote.model.apps.AppResource.getAppInfos
      */
-    get(realm: string, userId: string, options?: O): RestResponse<Model.User>;
+    getAppInfos(options?: O): RestResponse<{
+        [index: string]: any;
+    }>;
 }
 export declare class ProvisioningResourceClient<O> {
     protected httpClient: HttpClient<O>;
@@ -212,131 +101,134 @@ export declare class ProvisioningResourceClient<O> {
      */
     updateProvisioningConfig(id: number, provisioningConfig: Model.ProvisioningConfigUnion<any, any>, options?: O): RestResponse<void>;
 }
-export declare class AssetPredictedDatapointResourceClient<O> {
+export declare class GatewayServiceResourceClient<O> {
     protected httpClient: HttpClient<O>;
     constructor(httpClient: HttpClient<O>);
     /**
-     * Queries predicted values for one attribute using the supplied time-range and aggregation criteria. Anonymous access requires public-read access on both asset and attribute.
-     * HTTP POST /asset/predicted/{assetId}/{attributeName}
-     * Java method: org.openremote.model.datapoint.AssetPredictedDatapointResource.getPredictedDatapoints
+     * Requests a TCP tunnel through a connected gateway and returns its allocated local endpoint. When realm is omitted, the authenticated realm is used.
+     * Response code 417 - The gateway could not establish the requested tunnel
+     * HTTP POST /gateway/tunnel
+     * Java method: org.openremote.model.gateway.GatewayServiceResource.startTunnel
      */
-    getPredictedDatapoints(assetId: string, attributeName: string, query: Model.AssetDatapointQueryUnion, options?: O): RestResponse<Model.ValueDatapoint<any>[]>;
+    startTunnel(tunnelInfo: Model.GatewayTunnelInfo, options?: O): RestResponse<Model.GatewayTunnelInfo>;
     /**
-     * Replaces or adds predicted values for one attribute. Anonymous access is allowed only when the asset and attribute are public-write; authenticated callers require attribute-write access.
-     * HTTP PUT /asset/predicted/{assetId}/{attributeName}
-     * Java method: org.openremote.model.datapoint.AssetPredictedDatapointResource.writePredictedDatapoints
+     * Stops the tunnel identified by the supplied gateway, target, and port information. When realm is omitted, the authenticated realm is used.
+     * HTTP DELETE /gateway/tunnel
+     * Java method: org.openremote.model.gateway.GatewayServiceResource.stopTunnel
      */
-    writePredictedDatapoints(assetId: string, attributeName: string, predictedDatapoints: Model.ValueDatapoint<any>[], options?: O): RestResponse<void>;
-}
-export declare class DashboardResourceClient<O> {
-    protected httpClient: HttpClient<O>;
-    constructor(httpClient: HttpClient<O>);
+    stopTunnel(tunnelInfo: Model.GatewayTunnelInfo, options?: O): RestResponse<void>;
     /**
-     * Creates a dashboard in an accessible realm. The server assigns the authenticated user as owner and initially stores the dashboard with shared access.
-     * HTTP POST /dashboard
-     * Java method: org.openremote.model.dashboard.DashboardResource.create
+     * Returns active tunnels for all gateway assets in the requested realm. Restricted users cannot list an entire realm.
+     * HTTP GET /gateway/tunnel/{realm}
+     * Java method: org.openremote.model.gateway.GatewayServiceResource.getAllActiveTunnelInfos
      */
-    create(dashboard: Model.Dashboard, options?: O): RestResponse<Model.Dashboard>;
+    getAllActiveTunnelInfos(realm: string, options?: O): RestResponse<Model.GatewayTunnelInfo[]>;
     /**
-     * Updates an existing dashboard when the authenticated user can modify it in the dashboard's realm.
-     * HTTP PUT /dashboard
-     * Java method: org.openremote.model.dashboard.DashboardResource.update
+     * Returns active tunnels for one gateway asset. Restricted users may query only a linked gateway.
+     * HTTP GET /gateway/tunnel/{realm}/{id}
+     * Java method: org.openremote.model.gateway.GatewayServiceResource.getGatewayActiveTunnelInfos
      */
-    update(dashboard: Model.Dashboard, options?: O): RestResponse<Model.Dashboard>;
+    getGatewayActiveTunnelInfos(realm: string, id: string, options?: O): RestResponse<Model.GatewayTunnelInfo[]>;
     /**
-     * Returns dashboards visible to the caller in the requested realm. Anonymous callers receive public dashboards only; authenticated access also depends on roles, ownership, and linked assets.
-     * HTTP GET /dashboard/all/{realm}
-     * Java method: org.openremote.model.dashboard.DashboardResource.getAllRealmDashboards
+     * Returns the tunnel matching realm, gateway, target host, and target port, or null when no active tunnel matches.
+     * Response code 204 - No active tunnel matches the requested endpoint
+     * HTTP GET /gateway/tunnel/{realm}/{id}/{target}/{targetPort}
+     * Java method: org.openremote.model.gateway.GatewayServiceResource.getActiveTunnelInfo
      */
-    getAllRealmDashboards(realm: string, options?: O): RestResponse<Model.Dashboard[]>;
+    getActiveTunnelInfo(realm: string, id: string, target: string, targetPort: number, options?: O): RestResponse<Model.GatewayTunnelInfo>;
+}
+export declare class AssetDatapointResourceClient<O> {
+    protected httpClient: HttpClient<O>;
+    constructor(httpClient: HttpClient<O>);
     /**
-     * Executes a dashboard query after constraining it to the caller's realm, roles, ownership, and asset access. A missing body uses the request realm and default visibility rules.
-     * HTTP POST /dashboard/query
-     * Java method: org.openremote.model.dashboard.DashboardResource.query
+     * Streams a ZIP archive containing exported datapoints for one or more attribute references over the requested inclusive time range. attributeRefs is a JSON-encoded array of objects with id and name fields.
+     * Response code 200 - A ZIP archive containing the exported data
+     * HTTP GET /asset/datapoint/export
+     * Java method: org.openremote.model.datapoint.AssetDatapointResource.getDatapointExport
      */
-    query(dashboardQuery: Model.DashboardQuery, options?: O): RestResponse<Model.Dashboard[]>;
+    getDatapointExport(queryParams?: {
+        attributeRefs?: string;
+        fromTimestamp?: number;
+        toTimestamp?: number;
+        format?: Model.DatapointExportFormat;
+    }, options?: O): RestResponse<any>;
     /**
-     * Permanently removes a dashboard when the authenticated user can modify it in the requested realm.
-     * HTTP DELETE /dashboard/{realm}/{dashboardId}
-     * Java method: org.openremote.model.dashboard.DashboardResource.delete
+     * Returns the oldest and newest stored timestamps for one attribute. The asset and attribute must be readable by the authenticated user and configured for datapoint storage.
+     * HTTP GET /asset/datapoint/periods
+     * Java method: org.openremote.model.datapoint.AssetDatapointResource.getDatapointPeriod
      */
-    delete(realm: string, dashboardId: string, options?: O): RestResponse<void>;
+    getDatapointPeriod(queryParams?: {
+        assetId?: string;
+        attributeName?: string;
+    }, options?: O): RestResponse<Model.DatapointPeriod>;
     /**
-     * Returns one dashboard only when it is visible to the caller. Inaccessible and nonexistent dashboards both return 404 to avoid disclosing their existence.
-     * HTTP GET /dashboard/{realm}/{dashboardId}
-     * Java method: org.openremote.model.dashboard.DashboardResource.get
+     * Returns stored historical values for one attribute. A null body returns the available series; a polymorphic query body controls the time range and retrieval or aggregation strategy. Anonymous access requires public-read access on both asset and attribute.
+     * HTTP POST /asset/datapoint/{assetId}/{attributeName}
+     * Java method: org.openremote.model.datapoint.AssetDatapointResource.getDatapoints
      */
-    get(realm: string, dashboardId: string, options?: O): RestResponse<Model.Dashboard>;
+    getDatapoints(assetId: string, attributeName: string, query: Model.AssetDatapointQueryUnion, options?: O): RestResponse<Model.ValueDatapoint<any>[]>;
 }
-export declare class AlarmResourceClient<O> {
+export declare class ExternalServiceResourceClient<O> {
     protected httpClient: HttpClient<O>;
     constructor(httpClient: HttpClient<O>);
     /**
-     * Creates a manual alarm in an accessible realm and optionally links it to the supplied asset IDs. The authenticated user or client becomes the alarm source.
-     * HTTP POST /alarm
-     * Java method: org.openremote.model.alarm.AlarmResource.createAlarm
-     */
-    createAlarm(alarm: Model.Alarm, queryParams?: {
-        assetIds?: string[];
-    }, options?: O): RestResponse<Model.SentAlarm>;
-    /**
-     * Returns alarms in the requested accessible realm, optionally filtered by status, linked asset, or assignee. When realm is omitted, the authenticated realm is used.
-     * HTTP GET /alarm
-     * Java method: org.openremote.model.alarm.AlarmResource.getAlarms
+     * Returns all active realm-scoped service registrations for an active realm accessible to the caller.
+     * Response code 200 - List of registered external services
+     * HTTP GET /service
+     * Java method: org.openremote.model.services.ExternalServiceResource.getServices
      */
-    getAlarms(queryParams?: {
+    getServices(queryParams?: {
         realm?: string;
-        status?: Model.AlarmStatus;
-        assetId?: string;
-        assigneeId?: string;
-    }, options?: O): RestResponse<Model.SentAlarm[]>;
+    }, options?: O): RestResponse<Model.ExternalService[]>;
     /**
-     * Permanently removes all alarms identified by the request body after verifying access to every alarm's realm.
-     * HTTP DELETE /alarm
-     * Java method: org.openremote.model.alarm.AlarmResource.removeAlarms
+     * Registers a realm-scoped service instance for the request realm. The caller must be a service account; the returned object contains the assigned instance ID and initial lease state.
+     * Response code 200 - Service registered successfully
+     * Response code 400 - Invalid external service object
+     * Response code 409 - ExternalService instance already registered
+     * HTTP POST /service
+     * Java method: org.openremote.model.services.ExternalServiceResource.registerService
      */
-    removeAlarms(ids: number[], options?: O): RestResponse<void>;
+    registerService(service: Model.ExternalService, options?: O): RestResponse<Model.ExternalService>;
     /**
-     * Adds links between assets and one existing alarm.
-
-The request body is a list for backward compatibility, but this operation now has single-alarm semantics:
-every item must contain the same `id.realm` and the same `id.alarmId`. The alarm must exist in that realm,
-every asset must exist in the same realm, and the authenticated user must have access to that realm. Requests
-containing mixed alarm IDs or realms are rejected as bad requests.
-
-Existing links are left unchanged; duplicate links in the request or links that already exist are ignored.
-This operation does not remove existing links from the alarm.
-
-     * HTTP PUT /alarm/assets
-     * Java method: org.openremote.model.alarm.AlarmResource.setAssetLinks
+     * Returns active registrations marked as globally available across realms.
+     * Response code 200 - List of registered external services
+     * HTTP GET /service/global
+     * Java method: org.openremote.model.services.ExternalServiceResource.getGlobalServices
      */
-    setAssetLinks(links: Model.AlarmAssetLink[], options?: O): RestResponse<void>;
+    getGlobalServices(options?: O): RestResponse<Model.ExternalService[]>;
     /**
-     * Returns one alarm when its realm is active and accessible to the authenticated user.
-     * HTTP GET /alarm/{alarmId}
-     * Java method: org.openremote.model.alarm.AlarmResource.getAlarm
+     * Registers a service visible in every realm. The caller must be a super-user service account and the request must use the master realm.
+     * Response code 200 - Service registered successfully
+     * Response code 400 - Invalid external service object
+     * Response code 409 - ExternalService instance already registered
+     * HTTP POST /service/global
+     * Java method: org.openremote.model.services.ExternalServiceResource.registerGlobalService
      */
-    getAlarm(alarmId: number, options?: O): RestResponse<Model.SentAlarm>;
+    registerGlobalService(service: Model.ExternalService, options?: O): RestResponse<Model.ExternalService>;
     /**
-     * Permanently removes one alarm after verifying access to its realm.
-     * HTTP DELETE /alarm/{alarmId}
-     * Java method: org.openremote.model.alarm.AlarmResource.removeAlarm
+     * Removes an active service registration. The caller must be the service account that registered it; global-service removal additionally requires a super user.
+     * Response code 204 - Service deregistered successfully
+     * Response code 404 - Service instance not found
+     * HTTP DELETE /service/{serviceId}/{instanceId}
+     * Java method: org.openremote.model.services.ExternalServiceResource.deregisterService
      */
-    removeAlarm(alarmId: number, options?: O): RestResponse<void>;
+    deregisterService(serviceId: string, instanceId: number, options?: O): RestResponse<void>;
     /**
-     * Updates the mutable state of an existing alarm after verifying access to its current realm.
-     * HTTP PUT /alarm/{alarmId}
-     * Java method: org.openremote.model.alarm.AlarmResource.updateAlarm
+     * Returns one registered instance by stable service ID and numeric instance ID, after verifying access to the service's realm.
+     * Response code 200 - ExternalService retrieved successfully
+     * Response code 404 - ExternalService not found
+     * HTTP GET /service/{serviceId}/{instanceId}
+     * Java method: org.openremote.model.services.ExternalServiceResource.getService
      */
-    updateAlarm(alarmId: number, alarm: Model.SentAlarm, options?: O): RestResponse<void>;
+    getService(serviceId: string, instanceId: number, options?: O): RestResponse<Model.ExternalService>;
     /**
-     * Returns links from the alarm to assets in the explicitly supplied accessible realm.
-     * HTTP GET /alarm/{alarmId}/assets
-     * Java method: org.openremote.model.alarm.AlarmResource.getAssetLinks
+     * Extends the lease of one service instance. The caller must be the service account that registered it; global-service heartbeats additionally require a super user.
+     * Response code 204 - Heartbeat sent successfully
+     * Response code 404 - Service instance not found
+     * HTTP PUT /service/{serviceId}/{instanceId}
+     * Java method: org.openremote.model.services.ExternalServiceResource.heartbeat
      */
-    getAssetLinks(alarmId: number, queryParams?: {
-        realm?: string;
-    }, options?: O): RestResponse<Model.AlarmAssetLink[]>;
+    heartbeat(serviceId: string, instanceId: number, options?: O): RestResponse<void>;
 }
 export declare class GatewayClientResourceClient<O> {
     protected httpClient: HttpClient<O>;
@@ -381,382 +273,376 @@ export declare class GatewayClientResourceClient<O> {
      */
     getConnectionStatus(realm: string, options?: O): RestResponse<Model.ConnectionStatus>;
 }
-export declare class AssetResourceClient<O> {
+export declare class MapResourceClient<O> {
     protected httpClient: HttpClient<O>;
     constructor(httpClient: HttpClient<O>);
     /**
-     * Creates an asset in an accessible realm and returns the persisted representation. The server generates an ID when absent; supplied IDs must be globally unique and 22 characters long.
-     * HTTP POST /asset
-     * Java method: org.openremote.model.asset.AssetResource.create
+     * Returns realm-aware public MapLibre settings with externally reachable URLs derived from proxy headers.
+     * HTTP GET /map
+     * Java method: org.openremote.model.map.MapResource.getSettings
      */
-    create(asset: Model.Asset, options?: O): RestResponse<Model.Asset>;
+    getSettings(options?: O): RestResponse<{
+        [id: string]: unknown;
+    }>;
     /**
-     * Permanently deletes every asset identified by repeated assetId query parameters, subject to realm and restricted-user access rules.
-     * HTTP DELETE /asset
-     * Java method: org.openremote.model.asset.AssetResource.delete
+     * Stores the map configuration and returns the resulting public MapLibre settings.
+     * HTTP PUT /map
+     * Java method: org.openremote.model.map.MapResource.saveSettings
      */
-    delete(queryParams?: {
-        assetId?: string[];
-    }, options?: O): RestResponse<void>;
+    saveSettings(mapConfig: Model.MapConfig, options?: O): RestResponse<{
+        [id: string]: unknown;
+    }>;
     /**
-     * Submits a batch of attribute states using current server time and returns one result per input item. Authorization and processing failures are encoded in each AttributeWriteResult rather than returned as an HTTP error.
-     * HTTP PUT /asset/attributes
-     * Java method: org.openremote.model.asset.AssetResource.writeAttributeValues
+     * Deletes the installed custom MBTiles database and returns the fallback public map settings.
+     * HTTP DELETE /map/deleteMap
+     * Java method: org.openremote.model.map.MapResource.deleteMap
      */
-    writeAttributeValues(attributeStates: Model.AttributeState[], options?: O): RestResponse<Model.AttributeWriteResult[]>;
+    deleteMap(options?: O): RestResponse<{
+        [id: string]: unknown;
+    }>;
     /**
-     * Submits a batch of complete attribute events and returns one result per input item. Supplied timestamps are preserved; authorization and processing failures are encoded per result rather than returned as an HTTP error.
-     * HTTP PUT /asset/attributes/timestamp
-     * Java method: org.openremote.model.asset.AssetResource.writeAttributeEvents
+     * Reports whether custom MBTiles data is installed and the maximum accepted upload size.
+     * HTTP GET /map/getCustomMapInfo
+     * Java method: org.openremote.model.map.MapResource.getCustomMapInfo
      */
-    writeAttributeEvents(attributeEvents: Model.AttributeEvent[], options?: O): RestResponse<Model.AttributeWriteResult[]>;
+    getCustomMapInfo(options?: O): RestResponse<{
+        [id: string]: unknown;
+    }>;
     /**
-     * Returns only the number of assets matching an AssetQuery after applying the caller's realm, public, and linked-asset access constraints.
-     * HTTP POST /asset/count
-     * Java method: org.openremote.model.asset.AssetResource.queryCount
+     * Returns a pre-compressed Mapbox vector tile for the requested zoom, column, and row coordinates.
+     * Response code 200 - Gzip-compressed vector tile
+     * Response code 204 - No tile exists at the requested coordinates
+     * HTTP GET /map/tile/{zoom}/{column}/{row}
+     * Java method: org.openremote.model.map.MapResource.getTile
      */
-    queryCount(query: Model.AssetQuery, options?: O): RestResponse<number>;
+    getTile(zoom: number, column: number, row: number, options?: O): RestResponse<any>;
     /**
-     * Clears the parent reference of every asset listed in repeated assetIds query parameters.
-     * HTTP DELETE /asset/parent
-     * Java method: org.openremote.model.asset.AssetResource.updateNoneParent
+     * Stores the raw request body as the realm's custom MBTiles database and returns the resulting public map settings.
+     * HTTP POST /map/upload
+     * Java method: org.openremote.model.map.MapResource.uploadMap
      */
-    updateNoneParent(queryParams?: {
-        assetIds?: string[];
-    }, options?: O): RestResponse<void>;
+    uploadMap(queryParams?: {
+        filename?: string;
+    }, options?: O): RestResponse<{
+        [id: string]: unknown;
+    }>;
+}
+export declare class RulesResourceClient<O> {
+    protected httpClient: HttpClient<O>;
+    constructor(httpClient: HttpClient<O>);
     /**
-     * Returns the asset identity and properties without loading attributes or path data. The same access rules as getAsset apply.
-     * HTTP GET /asset/partial/{assetId}
-     * Java method: org.openremote.model.asset.AssetResource.getPartial
+     * Creates and deploys a global ruleset and returns its numeric ID. Super-user access is required; legacy JavaScript rulesets cannot be created.
+     * HTTP POST /rules
+     * Java method: org.openremote.model.rules.RulesResource.createGlobalRuleset
      */
-    getPartial(assetId: string, options?: O): RestResponse<Model.Asset>;
+    createGlobalRuleset(ruleset: Model.GlobalRuleset, options?: O): RestResponse<number>;
     /**
-     * Executes an AssetQuery after constraining realm and linked-asset access. Anonymous callers receive public-readable assets only; the query select clause controls which fields are populated.
-     * HTTP POST /asset/query
-     * Java method: org.openremote.model.asset.AssetResource.queryAssets
+     * Returns global rulesets filtered by repeated language parameters. fullyPopulate controls whether rule source and other large fields are loaded; super-user access is required.
+     * HTTP GET /rules
+     * Java method: org.openremote.model.rules.RulesResource.getGlobalRulesets
      */
-    queryAssets(query: Model.AssetQuery, options?: O): RestResponse<Model.Asset[]>;
+    getGlobalRulesets(queryParams?: {
+        language?: Model.RulesetLang[];
+        fullyPopulate?: boolean;
+    }, options?: O): RestResponse<Model.GlobalRuleset[]>;
     /**
-     * Applies the same authorization and selection rules as queryAssets, then returns a hierarchy optimized for tree display rather than a flat asset array.
-     * HTTP POST /asset/tree
-     * Java method: org.openremote.model.asset.AssetResource.queryAssetTree
+     * Creates and deploys a ruleset for an accessible asset and returns its numeric ID. The assetId is taken from the request body.
+     * HTTP POST /rules/asset
+     * Java method: org.openremote.model.rules.RulesResource.createAssetRuleset
      */
-    queryAssetTree(query: Model.AssetQuery, options?: O): RestResponse<Model.AssetTree>;
+    createAssetRuleset(ruleset: Model.AssetRuleset, options?: O): RestResponse<number>;
     /**
-     * Returns partial linked assets for a restricted user, root assets for an unrestricted realm user, and an empty array for a super user. Attributes and paths are omitted; use getAsset for full details.
-     * HTTP GET /asset/user/current
-     * Java method: org.openremote.model.asset.AssetResource.getCurrentUserAssets
+     * Returns asset rulesets filtered by language. Callers without full access receive public rulesets only; a nonexistent asset produces an empty array.
+     * HTTP GET /rules/asset/for/{assetId}
+     * Java method: org.openremote.model.rules.RulesResource.getAssetRulesets
      */
-    getCurrentUserAssets(options?: O): RestResponse<Model.Asset[]>;
+    getAssetRulesets(assetId: string, queryParams?: {
+        language?: Model.RulesetLang[];
+        fullyPopulate?: boolean;
+    }, options?: O): RestResponse<Model.AssetRuleset[]>;
     /**
-     * Creates all supplied links as one operation. Every item must identify the same realm and user, and every referenced realm, user, and asset must exist.
-     * HTTP POST /asset/user/link
-     * Java method: org.openremote.model.asset.AssetResource.createUserAssetLinks
+     * Permanently removes and undeploys one ruleset from an accessible asset.
+     * HTTP DELETE /rules/asset/{id}
+     * Java method: org.openremote.model.rules.RulesResource.deleteAssetRuleset
      */
-    createUserAssetLinks(userAssets: Model.UserAssetLink[], options?: O): RestResponse<void>;
+    deleteAssetRuleset(id: number, options?: O): RestResponse<void>;
     /**
-     * Returns user-asset links in the required realm, optionally filtered by userId and assetId. Missing users or assets produce an empty result; restricted users cannot call this operation.
-     * HTTP GET /asset/user/link
-     * Java method: org.openremote.model.asset.AssetResource.getUserAssetLinks
+     * Returns one fully populated asset ruleset when the caller can access its realm and owning asset.
+     * HTTP GET /rules/asset/{id}
+     * Java method: org.openremote.model.rules.RulesResource.getAssetRuleset
      */
-    getUserAssetLinks(queryParams?: {
-        realm?: string;
-        userId?: string;
-        assetId?: string;
-    }, options?: O): RestResponse<Model.UserAssetLink[]>;
+    getAssetRuleset(id: number, options?: O): RestResponse<Model.AssetRuleset>;
     /**
-     * Removes all supplied links. Every item must identify the same realm and user.
-     * HTTP POST /asset/user/link/delete
-     * Java method: org.openremote.model.asset.AssetResource.deleteUserAssetLinks
-     */
-    deleteUserAssetLinks(userAssets: Model.UserAssetLink[], options?: O): RestResponse<void>;
+     * Replaces and redeploys one asset ruleset. The ID must match and an existing ruleset cannot be reassigned to another asset.
+     * HTTP PUT /rules/asset/{id}
+     * Java method: org.openremote.model.rules.RulesResource.updateAssetRuleset
+     */
+    updateAssetRuleset(id: number, ruleset: Model.AssetRuleset, options?: O): RestResponse<void>;
     /**
-     * Removes every asset link belonging to the user in the requested realm.
-     * HTTP DELETE /asset/user/link/{realm}/{userId}
-     * Java method: org.openremote.model.asset.AssetResource.deleteAllUserAssetLinks
+     * Extracts geofence definitions relevant to the asset. Anonymous access requires a public-readable asset; authenticated restricted users require an asset link.
+     * HTTP GET /rules/geofences/{assetId}
+     * Java method: org.openremote.model.rules.RulesResource.getAssetGeofences
      */
-    deleteAllUserAssetLinks(realm: string, userId: string, options?: O): RestResponse<void>;
+    getAssetGeofences(assetId: string, options?: O): RestResponse<Model.GeofenceDefinition[]>;
     /**
-     * Removes the link identified by realm, user, and asset. The caller must be allowed to administer asset links in that realm.
-     * HTTP DELETE /asset/user/link/{realm}/{userId}/{assetId}
-     * Java method: org.openremote.model.asset.AssetResource.deleteUserAssetLink
+     * Returns runtime status and error counts for an accessible asset engine. Returns null when the asset or its engine does not exist.
+     * Response code 204 - The asset or its rules engine does not exist
+     * HTTP GET /rules/info/asset/{assetId}
+     * Java method: org.openremote.model.rules.RulesResource.getAssetEngineInfo
      */
-    deleteUserAssetLink(realm: string, userId: string, assetId: string, options?: O): RestResponse<void>;
+    getAssetEngineInfo(assetId: string, options?: O): RestResponse<Model.RulesEngineInfo>;
     /**
-     * Returns a fully loaded asset including its path and attributes. Access is constrained to the caller's realm and, for restricted users, linked assets.
-     * HTTP GET /asset/{assetId}
-     * Java method: org.openremote.model.asset.AssetResource.get
+     * Returns runtime status and compilation/execution error counts for the global engine, or null when that engine is not running. Super-user access is required.
+     * Response code 204 - The global rules engine is not running
+     * HTTP GET /rules/info/global
+     * Java method: org.openremote.model.rules.RulesResource.getGlobalEngineInfo
      */
-    get(assetId: string, options?: O): RestResponse<Model.Asset>;
+    getGlobalEngineInfo(options?: O): RestResponse<Model.RulesEngineInfo>;
     /**
-     * Replaces mutable asset data while preserving the path identifier. Realm, parent, restricted-user, and private-metadata rules are validated; disallowed restricted-user fields may be ignored.
-     * HTTP PUT /asset/{assetId}
-     * Java method: org.openremote.model.asset.AssetResource.update
+     * Returns runtime status and error counts for an accessible realm engine, or null when that engine is not running. Restricted users cannot inspect realm engines.
+     * Response code 204 - The requested realm rules engine is not running
+     * HTTP GET /rules/info/realm/{realm}
+     * Java method: org.openremote.model.rules.RulesResource.getRealmEngineInfo
      */
-    update(assetId: string, asset: Model.Asset, options?: O): RestResponse<Model.Asset>;
+    getRealmEngineInfo(realm: string, options?: O): RestResponse<Model.RulesEngineInfo>;
     /**
-     * Submits an asynchronous attribute write using the current server time. The result reports whether the event was accepted, not whether downstream processing ultimately succeeded. Anonymous writes require public-write metadata.
-     * Response code 400 - The attribute write failed
-     * Response code 406 - The supplied value is not valid for the attribute
-     * Response code 429 - The attribute event queue is full; retry the write later
-     * HTTP PUT /asset/{assetId}/attribute/{attributeName}
-     * Java method: org.openremote.model.asset.AssetResource.writeAttributeValue
+     * Creates and deploys a ruleset in its body realm and returns its numeric ID. Restricted users cannot create realm rulesets; legacy JavaScript is not accepted.
+     * HTTP POST /rules/realm
+     * Java method: org.openremote.model.rules.RulesResource.createRealmRuleset
      */
-    writeAttributeValue$PUT$asset_assetId_attribute_attributeName(assetId: string, attributeName: string, value: any, options?: O): RestResponse<Model.AttributeWriteResult>;
+    createRealmRuleset(ruleset: Model.RealmRuleset, options?: O): RestResponse<number>;
     /**
-     * Submits an asynchronous attribute write using the supplied Unix timestamp in milliseconds. The result reports acceptance only; anonymous writes require public-write metadata.
-     * Response code 400 - The attribute write failed
-     * Response code 406 - The supplied value is not valid for the attribute
-     * Response code 429 - The attribute event queue is full; retry the write later
-     * HTTP PUT /asset/{assetId}/attribute/{attributeName}/{timestamp}
-     * Java method: org.openremote.model.asset.AssetResource.writeAttributeValue
+     * Returns realm rulesets filtered by language. Anonymous, restricted, or callers without read-rules permission receive public rulesets only; fullyPopulate controls loading of rule source.
+     * HTTP GET /rules/realm/for/{realm}
+     * Java method: org.openremote.model.rules.RulesResource.getRealmRulesets
      */
-    writeAttributeValue$PUT$asset_assetId_attribute_attributeName_timestamp(assetId: string, attributeName: string, timestamp: number, value: any, options?: O): RestResponse<Model.AttributeWriteResult>;
+    getRealmRulesets(realm: string, queryParams?: {
+        language?: Model.RulesetLang[];
+        fullyPopulate?: boolean;
+    }, options?: O): RestResponse<Model.RealmRuleset[]>;
     /**
-     * Sets parentAssetId as the parent of every asset listed in repeated assetIds query parameters. Parent and children must satisfy realm, access, and hierarchy constraints.
-     * HTTP PUT /asset/{parentAssetId}/child
-     * Java method: org.openremote.model.asset.AssetResource.updateParent
+     * Permanently removes and undeploys one ruleset from an accessible realm.
+     * HTTP DELETE /rules/realm/{id}
+     * Java method: org.openremote.model.rules.RulesResource.deleteRealmRuleset
      */
-    updateParent(parentAssetId: string, queryParams?: {
-        assetIds?: string[];
-    }, options?: O): RestResponse<void>;
+    deleteRealmRuleset(id: number, options?: O): RestResponse<void>;
+    /**
+     * Returns one fully populated realm ruleset when its realm is accessible to the caller.
+     * HTTP GET /rules/realm/{id}
+     * Java method: org.openremote.model.rules.RulesResource.getRealmRuleset
+     */
+    getRealmRuleset(id: number, options?: O): RestResponse<Model.RealmRuleset>;
+    /**
+     * Replaces and redeploys one realm ruleset. Path and body IDs and the existing realm must match; legacy JavaScript cannot be updated.
+     * HTTP PUT /rules/realm/{id}
+     * Java method: org.openremote.model.rules.RulesResource.updateRealmRuleset
+     */
+    updateRealmRuleset(id: number, ruleset: Model.RealmRuleset, options?: O): RestResponse<void>;
+    /**
+     * Permanently removes and undeploys one global ruleset. Super-user access is required.
+     * HTTP DELETE /rules/{id}
+     * Java method: org.openremote.model.rules.RulesResource.deleteGlobalRuleset
+     */
+    deleteGlobalRuleset(id: number, options?: O): RestResponse<void>;
+    /**
+     * Returns one fully populated global ruleset including transient deployment status and errors. Super-user access is required.
+     * HTTP GET /rules/{id}
+     * Java method: org.openremote.model.rules.RulesResource.getGlobalRuleset
+     */
+    getGlobalRuleset(id: number, options?: O): RestResponse<Model.GlobalRuleset>;
+    /**
+     * Replaces and redeploys the identified global ruleset. Path and body IDs must match; legacy JavaScript rulesets cannot be updated.
+     * HTTP PUT /rules/{id}
+     * Java method: org.openremote.model.rules.RulesResource.updateGlobalRuleset
+     */
+    updateGlobalRuleset(id: number, ruleset: Model.GlobalRuleset, options?: O): RestResponse<void>;
 }
-export declare class ConfigurationResourceClient<O> {
+export declare class ConsoleResourceClient<O> {
     protected httpClient: HttpClient<O>;
     constructor(httpClient: HttpClient<O>);
     /**
-     * Returns the public Manager application configuration used by clients before and after authentication.
-     * HTTP GET /configuration/manager
-     * Java method: org.openremote.model.manager.ConfigurationResource.getManagerConfig
+     * Creates an anonymous console registration when id is absent, or updates an existing registration when id is present. Authenticated new registrations are linked to the caller; updates require that link. The returned registration contains the durable asset ID for later calls.
+     * HTTP POST /console/register
+     * Java method: org.openremote.model.console.ConsoleResource.register
      */
-    getManagerConfig(options?: O): RestResponse<Model.ManagerAppConfig>;
+    register(consoleRegistration: Model.ConsoleRegistration, options?: O): RestResponse<Model.ConsoleRegistration>;
+}
+export declare class FlowResourceClient<O> {
+    protected httpClient: HttpClient<O>;
+    constructor(httpClient: HttpClient<O>);
     /**
-     * Replaces manager_config.json and returns the stored configuration. This administrative change affects Manager UI branding and behavior.
-     * HTTP PUT /configuration/manager
-     * Java method: org.openremote.model.manager.ConfigurationResource.update
+     * Returns every supported flow node definition except the internal LOG_OUTPUT node.
+     * HTTP GET /flow
+     * Java method: org.openremote.model.rules.flow.FlowResource.getAllNodeDefinitions
      */
-    update(managerConfiguration: Model.ManagerAppConfig, options?: O): RestResponse<Model.ManagerAppConfig>;
+    getAllNodeDefinitions(options?: O): RestResponse<Model.Node[]>;
     /**
-     * Decodes and stores the supplied FileInfo under the requested relative path, then returns its Manager API path.
-     * HTTP POST /configuration/manager/file
-     * Java method: org.openremote.model.manager.ConfigurationResource.fileUpload
+     * Resolves one flow node definition by its model name.
+     * HTTP GET /flow/{name}
+     * Java method: org.openremote.model.rules.flow.FlowResource.getNodeDefinition
      */
-    fileUpload(fileInfo: Model.FileInfo, queryParams?: {
-        path?: string;
-    }, options?: O): RestResponse<string>;
+    getNodeDefinition(name: string, options?: O): RestResponse<Model.Node>;
     /**
-     * Streams a previously uploaded configuration image using its detected media type.
-     * Response code 200 - The image file
-     * HTTP GET /configuration/manager/image/{filename: .+}
-     * Java method: org.openremote.model.manager.ConfigurationResource.getManagerConfigImage
+     * Returns supported flow node definitions whose category matches the requested node type.
+     * HTTP GET /flow/{type}
+     * Java method: org.openremote.model.rules.flow.FlowResource.getAllNodeDefinitionsByType
      */
-    getManagerConfigImage(filename: string, options?: O): RestResponse<any>;
+    getAllNodeDefinitionsByType(type: Model.NodeType, options?: O): RestResponse<Model.Node[]>;
 }
-export declare class ExternalServiceResourceClient<O> {
+export declare class UserResourceClient<O> {
     protected httpClient: HttpClient<O>;
     constructor(httpClient: HttpClient<O>);
     /**
-     * Returns all active realm-scoped service registrations for an active realm accessible to the caller.
-     * Response code 200 - List of registered external services
-     * HTTP GET /service
-     * Java method: org.openremote.model.services.ExternalServiceResource.getServices
+     * Stores the supplied non-empty locale string as the caller's identity-provider locale attribute. The target realm must be active unless the caller is a superuser.
+     * HTTP PUT /user/locale
+     * Java method: org.openremote.model.security.UserResource.updateCurrentUserLocale
      */
-    getServices(queryParams?: {
-        realm?: string;
-    }, options?: O): RestResponse<Model.ExternalService[]>;
+    updateCurrentUserLocale(locale: string, options?: O): RestResponse<void>;
     /**
-     * Registers a realm-scoped service instance for the request realm. The caller must be a service account; the returned object contains the assigned instance ID and initial lease state.
-     * Response code 200 - Service registered successfully
-     * Response code 400 - Invalid external service object
-     * Response code 409 - ExternalService instance already registered
-     * HTTP POST /service
-     * Java method: org.openremote.model.services.ExternalServiceResource.registerService
+     * Executes a UserQuery. Non-super users are forced into their authenticated realm and cannot see system accounts; callers with read-users but not read-admin receive basic fields only. The target realm must be active unless the caller is a superuser.
+     * HTTP POST /user/query
+     * Java method: org.openremote.model.security.UserResource.query
      */
-    registerService(service: Model.ExternalService, options?: O): RestResponse<Model.ExternalService>;
+    query(query: Model.UserQuery, options?: O): RestResponse<Model.User[]>;
     /**
-     * Returns active registrations marked as globally available across realms.
-     * Response code 200 - List of registered external services
-     * HTTP GET /service/global
-     * Java method: org.openremote.model.services.ExternalServiceResource.getGlobalServices
+     * Initiates the identity provider's configured password-reset action for the caller's own account. The target realm must be active unless the caller is a superuser.
+     * HTTP PUT /user/request-password-reset
+     * Java method: org.openremote.model.security.UserResource.requestPasswordResetCurrent
      */
-    getGlobalServices(options?: O): RestResponse<Model.ExternalService[]>;
+    requestPasswordResetCurrent(options?: O): RestResponse<void>;
     /**
-     * Registers a service visible in every realm. The caller must be a super-user service account and the request must use the master realm.
-     * Response code 200 - Service registered successfully
-     * Response code 400 - Invalid external service object
-     * Response code 409 - ExternalService instance already registered
-     * HTTP POST /service/global
-     * Java method: org.openremote.model.services.ExternalServiceResource.registerGlobalService
+     * Replaces the caller's own identity-provider credential using the supplied credential representation. The target realm must be active unless the caller is a superuser.
+     * HTTP PUT /user/reset-password
+     * Java method: org.openremote.model.security.UserResource.updatePasswordCurrent
      */
-    registerGlobalService(service: Model.ExternalService, options?: O): RestResponse<Model.ExternalService>;
+    updatePasswordCurrent(credential: Model.Credential, options?: O): RestResponse<void>;
     /**
-     * Removes an active service registration. The caller must be the service account that registered it; global-service removal additionally requires a super user.
-     * Response code 204 - Service deregistered successfully
-     * Response code 404 - Service instance not found
-     * HTTP DELETE /service/{serviceId}/{instanceId}
-     * Java method: org.openremote.model.services.ExternalServiceResource.deregisterService
+     * Updates the caller's own profile. A supplied user ID must match the access token; role and realm administration are not provided by this endpoint. The target realm must be active unless the caller is a superuser.
+     * HTTP PUT /user/update
+     * Java method: org.openremote.model.security.UserResource.updateCurrent
      */
-    deregisterService(serviceId: string, instanceId: number, options?: O): RestResponse<void>;
+    updateCurrent(user: Model.User, options?: O): RestResponse<Model.User>;
     /**
-     * Returns one registered instance by stable service ID and numeric instance ID, after verifying access to the service's realm.
-     * Response code 200 - ExternalService retrieved successfully
-     * Response code 404 - ExternalService not found
-     * HTTP GET /service/{serviceId}/{instanceId}
-     * Java method: org.openremote.model.services.ExternalServiceResource.getService
+     * Returns the identity-provider record corresponding to the current access token. The target realm must be active unless the caller is a superuser.
+     * HTTP GET /user/user
+     * Java method: org.openremote.model.security.UserResource.getCurrent
      */
-    getService(serviceId: string, instanceId: number, options?: O): RestResponse<Model.ExternalService>;
+    getCurrent(options?: O): RestResponse<Model.User>;
     /**
-     * Extends the lease of one service instance. The caller must be the service account that registered it; global-service heartbeats additionally require a super user.
-     * Response code 204 - Heartbeat sent successfully
-     * Response code 404 - Service instance not found
-     * HTTP PUT /service/{serviceId}/{instanceId}
-     * Java method: org.openremote.model.services.ExternalServiceResource.heartbeat
+     * Returns realm-level role names assigned to the caller. The target realm must be active unless the caller is a superuser.
+     * HTTP GET /user/userRealmRoles
+     * Java method: org.openremote.model.security.UserResource.getCurrentUserRealmRoles
      */
-    heartbeat(serviceId: string, instanceId: number, options?: O): RestResponse<void>;
-}
-export declare class MapResourceClient<O> {
-    protected httpClient: HttpClient<O>;
-    constructor(httpClient: HttpClient<O>);
+    getCurrentUserRealmRoles(options?: O): RestResponse<string[]>;
     /**
-     * Returns realm-aware public MapLibre settings with externally reachable URLs derived from proxy headers.
-     * HTTP GET /map
-     * Java method: org.openremote.model.map.MapResource.getSettings
+     * Returns role names assigned to the caller for the named identity-provider client. The target realm must be active unless the caller is a superuser.
+     * HTTP GET /user/userRoles/{clientId}
+     * Java method: org.openremote.model.security.UserResource.getCurrentUserClientRoles
      */
-    getSettings(options?: O): RestResponse<{
-        [id: string]: unknown;
-    }>;
+    getCurrentUserClientRoles(clientId: string, options?: O): RestResponse<string[]>;
     /**
-     * Stores the map configuration and returns the resulting public MapLibre settings.
-     * HTTP PUT /map
-     * Java method: org.openremote.model.map.MapResource.saveSettings
+     * Terminates the active MQTT connection identified by sessionID. The realm must match the session owner's realm. Authenticated users may disconnect their own sessions without an additional client role. Disconnecting another user's session requires the openremote client role write:admin or superuser status. Non-superusers are limited to their own active realm; superusers may disconnect sessions across realms, including inactive realms.
+     * Response code 403 - The realm is inactive for a non-superuser, or the caller is neither the session owner, a user with write:admin, nor a superuser
+     * Response code 404 - The session or its owning user does not exist, or the session does not belong to the specified realm
+     * Response code 405 - A non-superuser cannot access the session owner's realm
+     * HTTP DELETE /user/{realm}/disconnect/{sessionID}
+     * Java method: org.openremote.model.security.UserResource.disconnectUserSession
      */
-    saveSettings(mapConfig: Model.MapConfig, options?: O): RestResponse<{
-        [id: string]: unknown;
-    }>;
+    disconnectUserSession(realm: string, sessionID: string, options?: O): RestResponse<void>;
     /**
-     * Deletes the installed custom MBTiles database and returns the fallback public map settings.
-     * HTTP DELETE /map/deleteMap
-     * Java method: org.openremote.model.map.MapResource.deleteMap
+     * Asks the identity provider to send or initiate its configured password-reset action for the specified user. The target realm must be active unless the caller is a superuser.
+     * Response code 405 - The caller cannot mutate a user in the requested realm
+     * HTTP PUT /user/{realm}/request-password-reset/{userId}
+     * Java method: org.openremote.model.security.UserResource.requestPasswordReset
      */
-    deleteMap(options?: O): RestResponse<{
-        [id: string]: unknown;
-    }>;
+    requestPasswordReset(realm: string, userId: string, options?: O): RestResponse<void>;
     /**
-     * Reports whether custom MBTiles data is installed and the maximum accepted upload size.
-     * HTTP GET /map/getCustomMapInfo
-     * Java method: org.openremote.model.map.MapResource.getCustomMapInfo
+     * Replaces a user's credential in an administered realm using the supplied credential representation. The target realm must be active unless the caller is a superuser.
+     * Response code 405 - The caller cannot mutate a user in the requested realm
+     * HTTP PUT /user/{realm}/reset-password/{userId}
+     * Java method: org.openremote.model.security.UserResource.updatePassword
      */
-    getCustomMapInfo(options?: O): RestResponse<{
-        [id: string]: unknown;
-    }>;
+    updatePassword(realm: string, userId: string, credential: Model.Credential, options?: O): RestResponse<void>;
     /**
-     * Returns a pre-compressed Mapbox vector tile for the requested zoom, column, and row coordinates.
-     * Response code 200 - Gzip-compressed vector tile
-     * Response code 204 - No tile exists at the requested coordinates
-     * HTTP GET /map/tile/{zoom}/{column}/{row}
-     * Java method: org.openremote.model.map.MapResource.getTile
+     * Generates and returns a new client secret for a service user in an administered realm. The target realm must be active unless the caller is a superuser.
+     * HTTP GET /user/{realm}/reset-secret/{userId}
+     * Java method: org.openremote.model.security.UserResource.resetSecret
+     */
+    resetSecret(realm: string, userId: string, options?: O): RestResponse<string>;
+    /**
+     * Creates, updates, or removes role definitions for the default OpenRemote client in the requested realm. The target realm must be active unless the caller is a superuser.
+     * HTTP PUT /user/{realm}/roles
+     * Java method: org.openremote.model.security.UserResource.updateRoles
      */
-    getTile(zoom: number, column: number, row: number, options?: O): RestResponse<any>;
+    updateRoles(realm: string, roles: Model.Role[], options?: O): RestResponse<void>;
     /**
-     * Stores the raw request body as the realm's custom MBTiles database and returns the resulting public map settings.
-     * HTTP POST /map/upload
-     * Java method: org.openremote.model.map.MapResource.uploadMap
+     * Returns realm-level role names assigned to one user. Without read-admin permission, callers may retrieve only their own roles. The target realm must be active unless the caller is a superuser.
+     * HTTP GET /user/{realm}/userRealmRoles/{userId}
+     * Java method: org.openremote.model.security.UserResource.getUserRealmRoles
      */
-    uploadMap(queryParams?: {
-        filename?: string;
-    }, options?: O): RestResponse<{
-        [id: string]: unknown;
-    }>;
-}
-export declare class AssetDatapointResourceClient<O> {
-    protected httpClient: HttpClient<O>;
-    constructor(httpClient: HttpClient<O>);
+    getUserRealmRoles(realm: string, userId: string, options?: O): RestResponse<string[]>;
     /**
-     * Streams a ZIP archive containing exported datapoints for one or more attribute references over the requested inclusive time range. attributeRefs is a JSON-encoded array of objects with id and name fields.
-     * Response code 200 - A ZIP archive containing the exported data
-     * HTTP GET /asset/datapoint/export
-     * Java method: org.openremote.model.datapoint.AssetDatapointResource.getDatapointExport
+     * Replaces the user's assigned realm-level role names in an administered realm. The target realm must be active unless the caller is a superuser.
+     * HTTP PUT /user/{realm}/userRealmRoles/{userId}
+     * Java method: org.openremote.model.security.UserResource.updateUserRealmRoles
      */
-    getDatapointExport(queryParams?: {
-        attributeRefs?: string;
-        fromTimestamp?: number;
-        toTimestamp?: number;
-        format?: Model.DatapointExportFormat;
-    }, options?: O): RestResponse<any>;
+    updateUserRealmRoles(realm: string, userId: string, roles: string[], options?: O): RestResponse<void>;
     /**
-     * Returns the oldest and newest stored timestamps for one attribute. The asset and attribute must be readable by the authenticated user and configured for datapoint storage.
-     * HTTP GET /asset/datapoint/periods
-     * Java method: org.openremote.model.datapoint.AssetDatapointResource.getDatapointPeriod
+     * Returns role names assigned to one user for the named client. Without read-admin permission, callers may retrieve only their own roles. The target realm must be active unless the caller is a superuser.
+     * HTTP GET /user/{realm}/userRoles/{userId}/{clientId}
+     * Java method: org.openremote.model.security.UserResource.getUserClientRoles
      */
-    getDatapointPeriod(queryParams?: {
-        assetId?: string;
-        attributeName?: string;
-    }, options?: O): RestResponse<Model.DatapointPeriod>;
+    getUserClientRoles(realm: string, userId: string, clientId: string, options?: O): RestResponse<string[]>;
     /**
-     * Returns stored historical values for one attribute. A null body returns the available series; a polymorphic query body controls the time range and retrieval or aggregation strategy. Anonymous access requires public-read access on both asset and attribute.
-     * HTTP POST /asset/datapoint/{assetId}/{attributeName}
-     * Java method: org.openremote.model.datapoint.AssetDatapointResource.getDatapoints
+     * Replaces the user's assigned role names for the named client in an administered realm. The target realm must be active unless the caller is a superuser.
+     * HTTP PUT /user/{realm}/userRoles/{userId}/{clientId}
+     * Java method: org.openremote.model.security.UserResource.updateUserClientRoles
      */
-    getDatapoints(assetId: string, attributeName: string, query: Model.AssetDatapointQueryUnion, options?: O): RestResponse<Model.ValueDatapoint<any>[]>;
-}
-export declare class SyslogResourceClient<O> {
-    protected httpClient: HttpClient<O>;
-    constructor(httpClient: HttpClient<O>);
+    updateUserClientRoles(realm: string, userId: string, clientId: string, roles: string[], options?: O): RestResponse<void>;
     /**
-     * Returns the current log-storage and retention configuration.
-     * HTTP GET /syslog/config
-     * Java method: org.openremote.model.syslog.SyslogResource.getConfig
+     * Returns active MQTT sessions for one user, including connection ID, creation time, and remote address. Without read-admin permission, callers may inspect only themselves. The target realm must be active unless the caller is a superuser.
+     * HTTP GET /user/{realm}/userSessions/{userId}
+     * Java method: org.openremote.model.security.UserResource.getUserSessions
      */
-    getConfig(options?: O): RestResponse<Model.SyslogConfig>;
+    getUserSessions(realm: string, userId: string, options?: O): RestResponse<Model.UserSession[]>;
     /**
-     * Validates and applies log-storage and retention settings.
-     * HTTP PUT /syslog/config
-     * Java method: org.openremote.model.syslog.SyslogResource.updateConfig
+     * Creates an identity-provider user in a realm administered by the caller and returns the resulting user record. The target realm must be active unless the caller is a superuser.
+     * HTTP POST /user/{realm}/users
+     * Java method: org.openremote.model.security.UserResource.create
      */
-    updateConfig(config: Model.SyslogConfig, options?: O): RestResponse<void>;
+    create(realm: string, user: Model.User, options?: O): RestResponse<Model.User>;
     /**
-     * Permanently removes all events from the configured syslog storage.
-     * HTTP DELETE /syslog/event
-     * Java method: org.openremote.model.syslog.SyslogResource.clearEvents
+     * Updates an existing identity-provider user in an administered realm. The master administrator cannot be disabled. The target realm must be active unless the caller is a superuser.
+     * Response code 405 - The requested cross-realm or protected master-administrator mutation is not allowed
+     * HTTP PUT /user/{realm}/users
+     * Java method: org.openremote.model.security.UserResource.update
      */
-    clearEvents(options?: O): RestResponse<void>;
+    update(realm: string, user: Model.User, options?: O): RestResponse<Model.User>;
     /**
-     * Returns a page of log events filtered by severity, Unix-millisecond time range, categories, and subcategories. RFC 8288 Link headers point to the next and last pages.
-     * Response code 200 - The requested page of syslog events
-     * HTTP GET /syslog/event
-     * Java method: org.openremote.model.syslog.SyslogResource.getEvents
+     * Permanently deletes a user from an administered realm. The master-realm administrator cannot be deleted. The target realm must be active unless the caller is a superuser.
+     * Response code 405 - The master-realm administrator cannot be deleted
+     * HTTP DELETE /user/{realm}/users/{userId}
+     * Java method: org.openremote.model.security.UserResource.delete
      */
-    getEvents(queryParams?: {
-        level?: Model.SyslogLevel;
-        per_page?: number;
-        page?: number;
-        from?: number;
-        to?: number;
-        category?: Model.SyslogCategory[];
-        subCategory?: string[];
-    }, options?: O): RestResponse<any>;
-}
-export declare class FlowResourceClient<O> {
-    protected httpClient: HttpClient<O>;
-    constructor(httpClient: HttpClient<O>);
+    delete(realm: string, userId: string, options?: O): RestResponse<void>;
     /**
-     * Returns every supported flow node definition except the internal LOG_OUTPUT node.
-     * HTTP GET /flow
-     * Java method: org.openremote.model.rules.flow.FlowResource.getAllNodeDefinitions
+     * Returns all role definitions exposed by the named identity-provider client. Realm-administrator access is required. The target realm must be active unless the caller is a superuser.
+     * HTTP GET /user/{realm}/{clientId}/roles
+     * Java method: org.openremote.model.security.UserResource.getClientRoles
      */
-    getAllNodeDefinitions(options?: O): RestResponse<Model.Node[]>;
+    getClientRoles(realm: string, clientId: string, options?: O): RestResponse<Model.Role[]>;
     /**
-     * Resolves one flow node definition by its model name.
-     * HTTP GET /flow/{name}
-     * Java method: org.openremote.model.rules.flow.FlowResource.getNodeDefinition
+     * Creates, updates, or removes role definitions for a named identity-provider client. The target realm must be active unless the caller is a superuser.
+     * HTTP PUT /user/{realm}/{clientId}/roles
+     * Java method: org.openremote.model.security.UserResource.updateClientRoles
      */
-    getNodeDefinition(name: string, options?: O): RestResponse<Model.Node>;
+    updateClientRoles(realm: string, clientId: string, roles: Model.Role[], options?: O): RestResponse<void>;
     /**
-     * Returns supported flow node definitions whose category matches the requested node type.
-     * HTTP GET /flow/{type}
-     * Java method: org.openremote.model.rules.flow.FlowResource.getAllNodeDefinitionsByType
+     * Returns one user when it belongs to the requested accessible realm. Without read-admin permission, callers may retrieve only their own user. The target realm must be active unless the caller is a superuser.
+     * HTTP GET /user/{realm}/{userId}
+     * Java method: org.openremote.model.security.UserResource.get
      */
-    getAllNodeDefinitionsByType(type: Model.NodeType, options?: O): RestResponse<Model.Node[]>;
+    get(realm: string, userId: string, options?: O): RestResponse<Model.User>;
 }
 export declare class NotificationResourceClient<O> {
     protected httpClient: HttpClient<O>;
@@ -805,167 +691,53 @@ export declare class NotificationResourceClient<O> {
      * HTTP GET /notification/count
      * Java method: org.openremote.model.notification.NotificationResource.getNotificationsCount
      */
-    getNotificationsCount(queryParams?: {
-        type?: string;
-        from?: number;
-        to?: number;
-        realmId?: string;
-        userId?: string;
-        assetId?: string;
-        source?: Model.NotificationSource;
-    }, options?: O): RestResponse<number>;
-    /**
-     * Permanently removes one sent-notification record. This operation is restricted to a super user and is idempotent when the ID does not exist.
-     * HTTP DELETE /notification/{notificationId}
-     * Java method: org.openremote.model.notification.NotificationResource.removeNotification
-     */
-    removeNotification(notificationId: number, options?: O): RestResponse<void>;
-    /**
-     * Marks one target's notification as acknowledged and stores the optional JSON acknowledgement value. Access rules are identical to notificationDelivered.
-     * HTTP PUT /notification/{notificationId}/acknowledged
-     * Java method: org.openremote.model.notification.NotificationResource.notificationAcknowledged
-     */
-    notificationAcknowledged(notificationId: number, acknowledgement: any, queryParams?: {
-        targetId?: string;
-    }, options?: O): RestResponse<void>;
-    /**
-     * Marks one target's notification as delivered after matching both notificationId and targetId. Anonymous callers may update notifications sent to a public asset; authenticated callers are constrained to their own user, realm, or accessible assets.
-     * HTTP PUT /notification/{notificationId}/delivered
-     * Java method: org.openremote.model.notification.NotificationResource.notificationDelivered
-     */
-    notificationDelivered(notificationId: number, queryParams?: {
-        targetId?: string;
-    }, options?: O): RestResponse<void>;
-}
-export declare class RulesResourceClient<O> {
-    protected httpClient: HttpClient<O>;
-    constructor(httpClient: HttpClient<O>);
-    /**
-     * Creates and deploys a global ruleset and returns its numeric ID. Super-user access is required; legacy JavaScript rulesets cannot be created.
-     * HTTP POST /rules
-     * Java method: org.openremote.model.rules.RulesResource.createGlobalRuleset
-     */
-    createGlobalRuleset(ruleset: Model.GlobalRuleset, options?: O): RestResponse<number>;
-    /**
-     * Returns global rulesets filtered by repeated language parameters. fullyPopulate controls whether rule source and other large fields are loaded; super-user access is required.
-     * HTTP GET /rules
-     * Java method: org.openremote.model.rules.RulesResource.getGlobalRulesets
-     */
-    getGlobalRulesets(queryParams?: {
-        language?: Model.RulesetLang[];
-        fullyPopulate?: boolean;
-    }, options?: O): RestResponse<Model.GlobalRuleset[]>;
-    /**
-     * Creates and deploys a ruleset for an accessible asset and returns its numeric ID. The assetId is taken from the request body.
-     * HTTP POST /rules/asset
-     * Java method: org.openremote.model.rules.RulesResource.createAssetRuleset
-     */
-    createAssetRuleset(ruleset: Model.AssetRuleset, options?: O): RestResponse<number>;
-    /**
-     * Returns asset rulesets filtered by language. Callers without full access receive public rulesets only; a nonexistent asset produces an empty array.
-     * HTTP GET /rules/asset/for/{assetId}
-     * Java method: org.openremote.model.rules.RulesResource.getAssetRulesets
-     */
-    getAssetRulesets(assetId: string, queryParams?: {
-        language?: Model.RulesetLang[];
-        fullyPopulate?: boolean;
-    }, options?: O): RestResponse<Model.AssetRuleset[]>;
-    /**
-     * Permanently removes and undeploys one ruleset from an accessible asset.
-     * HTTP DELETE /rules/asset/{id}
-     * Java method: org.openremote.model.rules.RulesResource.deleteAssetRuleset
-     */
-    deleteAssetRuleset(id: number, options?: O): RestResponse<void>;
-    /**
-     * Returns one fully populated asset ruleset when the caller can access its realm and owning asset.
-     * HTTP GET /rules/asset/{id}
-     * Java method: org.openremote.model.rules.RulesResource.getAssetRuleset
-     */
-    getAssetRuleset(id: number, options?: O): RestResponse<Model.AssetRuleset>;
-    /**
-     * Replaces and redeploys one asset ruleset. The ID must match and an existing ruleset cannot be reassigned to another asset.
-     * HTTP PUT /rules/asset/{id}
-     * Java method: org.openremote.model.rules.RulesResource.updateAssetRuleset
-     */
-    updateAssetRuleset(id: number, ruleset: Model.AssetRuleset, options?: O): RestResponse<void>;
-    /**
-     * Extracts geofence definitions relevant to the asset. Anonymous access requires a public-readable asset; authenticated restricted users require an asset link.
-     * HTTP GET /rules/geofences/{assetId}
-     * Java method: org.openremote.model.rules.RulesResource.getAssetGeofences
-     */
-    getAssetGeofences(assetId: string, options?: O): RestResponse<Model.GeofenceDefinition[]>;
-    /**
-     * Returns runtime status and error counts for an accessible asset engine. Returns null when the asset or its engine does not exist.
-     * Response code 204 - The asset or its rules engine does not exist
-     * HTTP GET /rules/info/asset/{assetId}
-     * Java method: org.openremote.model.rules.RulesResource.getAssetEngineInfo
-     */
-    getAssetEngineInfo(assetId: string, options?: O): RestResponse<Model.RulesEngineInfo>;
-    /**
-     * Returns runtime status and compilation/execution error counts for the global engine, or null when that engine is not running. Super-user access is required.
-     * Response code 204 - The global rules engine is not running
-     * HTTP GET /rules/info/global
-     * Java method: org.openremote.model.rules.RulesResource.getGlobalEngineInfo
-     */
-    getGlobalEngineInfo(options?: O): RestResponse<Model.RulesEngineInfo>;
-    /**
-     * Returns runtime status and error counts for an accessible realm engine, or null when that engine is not running. Restricted users cannot inspect realm engines.
-     * Response code 204 - The requested realm rules engine is not running
-     * HTTP GET /rules/info/realm/{realm}
-     * Java method: org.openremote.model.rules.RulesResource.getRealmEngineInfo
-     */
-    getRealmEngineInfo(realm: string, options?: O): RestResponse<Model.RulesEngineInfo>;
-    /**
-     * Creates and deploys a ruleset in its body realm and returns its numeric ID. Restricted users cannot create realm rulesets; legacy JavaScript is not accepted.
-     * HTTP POST /rules/realm
-     * Java method: org.openremote.model.rules.RulesResource.createRealmRuleset
-     */
-    createRealmRuleset(ruleset: Model.RealmRuleset, options?: O): RestResponse<number>;
-    /**
-     * Returns realm rulesets filtered by language. Anonymous, restricted, or callers without read-rules permission receive public rulesets only; fullyPopulate controls loading of rule source.
-     * HTTP GET /rules/realm/for/{realm}
-     * Java method: org.openremote.model.rules.RulesResource.getRealmRulesets
-     */
-    getRealmRulesets(realm: string, queryParams?: {
-        language?: Model.RulesetLang[];
-        fullyPopulate?: boolean;
-    }, options?: O): RestResponse<Model.RealmRuleset[]>;
-    /**
-     * Permanently removes and undeploys one ruleset from an accessible realm.
-     * HTTP DELETE /rules/realm/{id}
-     * Java method: org.openremote.model.rules.RulesResource.deleteRealmRuleset
-     */
-    deleteRealmRuleset(id: number, options?: O): RestResponse<void>;
+    getNotificationsCount(queryParams?: {
+        type?: string;
+        from?: number;
+        to?: number;
+        realmId?: string;
+        userId?: string;
+        assetId?: string;
+        source?: Model.NotificationSource;
+    }, options?: O): RestResponse<number>;
     /**
-     * Returns one fully populated realm ruleset when its realm is accessible to the caller.
-     * HTTP GET /rules/realm/{id}
-     * Java method: org.openremote.model.rules.RulesResource.getRealmRuleset
+     * Permanently removes one sent-notification record. This operation is restricted to a super user and is idempotent when the ID does not exist.
+     * HTTP DELETE /notification/{notificationId}
+     * Java method: org.openremote.model.notification.NotificationResource.removeNotification
      */
-    getRealmRuleset(id: number, options?: O): RestResponse<Model.RealmRuleset>;
+    removeNotification(notificationId: number, options?: O): RestResponse<void>;
     /**
-     * Replaces and redeploys one realm ruleset. Path and body IDs and the existing realm must match; legacy JavaScript cannot be updated.
-     * HTTP PUT /rules/realm/{id}
-     * Java method: org.openremote.model.rules.RulesResource.updateRealmRuleset
+     * Marks one target's notification as acknowledged and stores the optional JSON acknowledgement value. Access rules are identical to notificationDelivered.
+     * HTTP PUT /notification/{notificationId}/acknowledged
+     * Java method: org.openremote.model.notification.NotificationResource.notificationAcknowledged
      */
-    updateRealmRuleset(id: number, ruleset: Model.RealmRuleset, options?: O): RestResponse<void>;
+    notificationAcknowledged(notificationId: number, acknowledgement: any, queryParams?: {
+        targetId?: string;
+    }, options?: O): RestResponse<void>;
     /**
-     * Permanently removes and undeploys one global ruleset. Super-user access is required.
-     * HTTP DELETE /rules/{id}
-     * Java method: org.openremote.model.rules.RulesResource.deleteGlobalRuleset
+     * Marks one target's notification as delivered after matching both notificationId and targetId. Anonymous callers may update notifications sent to a public asset; authenticated callers are constrained to their own user, realm, or accessible assets.
+     * HTTP PUT /notification/{notificationId}/delivered
+     * Java method: org.openremote.model.notification.NotificationResource.notificationDelivered
      */
-    deleteGlobalRuleset(id: number, options?: O): RestResponse<void>;
+    notificationDelivered(notificationId: number, queryParams?: {
+        targetId?: string;
+    }, options?: O): RestResponse<void>;
+}
+export declare class AssetPredictedDatapointResourceClient<O> {
+    protected httpClient: HttpClient<O>;
+    constructor(httpClient: HttpClient<O>);
     /**
-     * Returns one fully populated global ruleset including transient deployment status and errors. Super-user access is required.
-     * HTTP GET /rules/{id}
-     * Java method: org.openremote.model.rules.RulesResource.getGlobalRuleset
+     * Queries predicted values for one attribute using the supplied time-range and aggregation criteria. Anonymous access requires public-read access on both asset and attribute.
+     * HTTP POST /asset/predicted/{assetId}/{attributeName}
+     * Java method: org.openremote.model.datapoint.AssetPredictedDatapointResource.getPredictedDatapoints
      */
-    getGlobalRuleset(id: number, options?: O): RestResponse<Model.GlobalRuleset>;
+    getPredictedDatapoints(assetId: string, attributeName: string, query: Model.AssetDatapointQueryUnion, options?: O): RestResponse<Model.ValueDatapoint<any>[]>;
     /**
-     * Replaces and redeploys the identified global ruleset. Path and body IDs must match; legacy JavaScript rulesets cannot be updated.
-     * HTTP PUT /rules/{id}
-     * Java method: org.openremote.model.rules.RulesResource.updateGlobalRuleset
+     * Replaces or adds predicted values for one attribute. Anonymous access is allowed only when the asset and attribute are public-write; authenticated callers require attribute-write access.
+     * HTTP PUT /asset/predicted/{assetId}/{attributeName}
+     * Java method: org.openremote.model.datapoint.AssetPredictedDatapointResource.writePredictedDatapoints
      */
-    updateGlobalRuleset(id: number, ruleset: Model.GlobalRuleset, options?: O): RestResponse<void>;
+    writePredictedDatapoints(assetId: string, attributeName: string, predictedDatapoints: Model.ValueDatapoint<any>[], options?: O): RestResponse<void>;
 }
 export declare class AssetModelResourceClient<O> {
     protected httpClient: HttpClient<O>;
@@ -1028,65 +800,196 @@ export declare class AssetModelResourceClient<O> {
         [index: string]: Model.ValueDescriptor;
     }>;
 }
-export declare class GatewayServiceResourceClient<O> {
+export declare class StatusResourceClient<O> {
     protected httpClient: HttpClient<O>;
     constructor(httpClient: HttpClient<O>);
     /**
-     * Requests a TCP tunnel through a connected gateway and returns its allocated local endpoint. When realm is omitted, the authenticated realm is used.
-     * Response code 417 - The gateway could not establish the requested tunnel
-     * HTTP POST /gateway/tunnel
-     * Java method: org.openremote.model.gateway.GatewayServiceResource.startTunnel
+     * Returns health data keyed by registered health-provider name. A null provider result is represented as JSON null.
+     * HTTP GET /health
+     * Java method: org.openremote.model.system.StatusResource.getHealthStatus
      */
-    startTunnel(tunnelInfo: Model.GatewayTunnelInfo, options?: O): RestResponse<Model.GatewayTunnelInfo>;
+    getHealthStatus(options?: O): RestResponse<{
+        [index: string]: any;
+    }>;
     /**
-     * Stops the tunnel identified by the supplied gateway, target, and port information. When realm is omitted, the authenticated realm is used.
-     * HTTP DELETE /gateway/tunnel
-     * Java method: org.openremote.model.gateway.GatewayServiceResource.stopTunnel
+     * Returns public bootstrap information, including the Manager version and identity-provider URL.
+     * HTTP GET /info
+     * Java method: org.openremote.model.system.StatusResource.getInfo
      */
-    stopTunnel(tunnelInfo: Model.GatewayTunnelInfo, options?: O): RestResponse<void>;
+    getInfo(options?: O): RestResponse<{
+        [index: string]: any;
+    }>;
+}
+export declare class AgentResourceClient<O> {
+    protected httpClient: HttpClient<O>;
+    constructor(httpClient: HttpClient<O>);
     /**
-     * Returns active tunnels for all gateway assets in the requested realm. Restricted users cannot list an entire realm.
-     * HTTP GET /gateway/tunnel/{realm}
-     * Java method: org.openremote.model.gateway.GatewayServiceResource.getAllActiveTunnelInfos
+     * Runs the agent protocol's asset discovery, waits up to ten seconds for results, returns the discovered tree, and asynchronously persists discovered assets below the agent.
+     * HTTP GET /agent/assetDiscovery/{agentId}
+     * Java method: org.openremote.model.asset.agent.AgentResource.doProtocolAssetDiscovery
      */
-    getAllActiveTunnelInfos(realm: string, options?: O): RestResponse<Model.GatewayTunnelInfo[]>;
+    doProtocolAssetDiscovery(agentId: string, queryParams?: {
+        realm?: string;
+    }, options?: O): RestResponse<Model.AssetTreeNode[]>;
     /**
-     * Returns active tunnels for one gateway asset. Restricted users may query only a linked gateway.
-     * HTTP GET /gateway/tunnel/{realm}/{id}
-     * Java method: org.openremote.model.gateway.GatewayServiceResource.getGatewayActiveTunnelInfos
+     * Decodes the supplied FileInfo, asks the agent protocol to import it, persists the returned asset tree below the agent, and returns that tree.
+     * Response code 405 - The selected agent protocol does not support asset import
+     * HTTP POST /agent/assetImport/{agentId}
+     * Java method: org.openremote.model.asset.agent.AgentResource.doProtocolAssetImport
      */
-    getGatewayActiveTunnelInfos(realm: string, id: string, options?: O): RestResponse<Model.GatewayTunnelInfo[]>;
+    doProtocolAssetImport(agentId: string, fileInfo: Model.FileInfo, queryParams?: {
+        realm?: string;
+    }, options?: O): RestResponse<Model.AssetTreeNode[]>;
     /**
-     * Returns the tunnel matching realm, gateway, target host, and target port, or null when no active tunnel matches.
-     * Response code 204 - No active tunnel matches the requested endpoint
-     * HTTP GET /gateway/tunnel/{realm}/{id}/{target}/{targetPort}
-     * Java method: org.openremote.model.gateway.GatewayServiceResource.getActiveTunnelInfo
+     * Runs instance discovery for an agent type and returns candidate Agent assets. parentId selects local versus edge-gateway discovery; non-super users are always constrained to their authenticated realm.
+     * Response code 415 - The selected agent protocol does not support instance discovery
+     * HTTP GET /agent/instanceDiscovery/{agentType}
+     * Java method: org.openremote.model.asset.agent.AgentResource.doProtocolInstanceDiscovery
      */
-    getActiveTunnelInfo(realm: string, id: string, target: string, targetPort: number, options?: O): RestResponse<Model.GatewayTunnelInfo>;
+    doProtocolInstanceDiscovery(agentType: string, queryParams?: {
+        parentId?: string;
+        realm?: string;
+    }, options?: O): RestResponse<Model.Agent[]>;
 }
-export declare class AppResourceClient<O> {
+export declare class AssetResourceClient<O> {
     protected httpClient: HttpClient<O>;
     constructor(httpClient: HttpClient<O>);
     /**
-     * Returns the identifiers of applications installed in the Manager web root.
-     * HTTP GET /apps
-     * Java method: org.openremote.model.apps.AppResource.getApps
+     * Creates an asset in an accessible realm and returns the persisted representation. The server generates an ID when absent; supplied IDs must be globally unique and 22 characters long.
+     * HTTP POST /asset
+     * Java method: org.openremote.model.asset.AssetResource.create
      */
-    getApps(options?: O): RestResponse<string[]>;
+    create(asset: Model.Asset, options?: O): RestResponse<Model.Asset>;
     /**
-     * Loads the public console_config.json document used to configure console clients before sign-in.
-     * HTTP GET /apps/consoleConfig
-     * Java method: org.openremote.model.apps.AppResource.getConsoleConfig
+     * Permanently deletes every asset identified by repeated assetId query parameters, subject to realm and restricted-user access rules.
+     * HTTP DELETE /asset
+     * Java method: org.openremote.model.asset.AssetResource.delete
      */
-    getConsoleConfig(options?: O): RestResponse<any>;
+    delete(queryParams?: {
+        assetId?: string[];
+    }, options?: O): RestResponse<void>;
     /**
-     * Loads each installed application's info.json file and returns the documents keyed by application identifier.
-     * HTTP GET /apps/info
-     * Java method: org.openremote.model.apps.AppResource.getAppInfos
+     * Submits a batch of attribute states using current server time and returns one result per input item. Authorization and processing failures are encoded in each AttributeWriteResult rather than returned as an HTTP error.
+     * HTTP PUT /asset/attributes
+     * Java method: org.openremote.model.asset.AssetResource.writeAttributeValues
+     */
+    writeAttributeValues(attributeStates: Model.AttributeState[], options?: O): RestResponse<Model.AttributeWriteResult[]>;
+    /**
+     * Submits a batch of complete attribute events and returns one result per input item. Supplied timestamps are preserved; authorization and processing failures are encoded per result rather than returned as an HTTP error.
+     * HTTP PUT /asset/attributes/timestamp
+     * Java method: org.openremote.model.asset.AssetResource.writeAttributeEvents
+     */
+    writeAttributeEvents(attributeEvents: Model.AttributeEvent[], options?: O): RestResponse<Model.AttributeWriteResult[]>;
+    /**
+     * Returns only the number of assets matching an AssetQuery after applying the caller's realm, public, and linked-asset access constraints.
+     * HTTP POST /asset/count
+     * Java method: org.openremote.model.asset.AssetResource.queryCount
+     */
+    queryCount(query: Model.AssetQuery, options?: O): RestResponse<number>;
+    /**
+     * Clears the parent reference of every asset listed in repeated assetIds query parameters.
+     * HTTP DELETE /asset/parent
+     * Java method: org.openremote.model.asset.AssetResource.updateNoneParent
+     */
+    updateNoneParent(queryParams?: {
+        assetIds?: string[];
+    }, options?: O): RestResponse<void>;
+    /**
+     * Returns the asset identity and properties without loading attributes or path data. The same access rules as getAsset apply.
+     * HTTP GET /asset/partial/{assetId}
+     * Java method: org.openremote.model.asset.AssetResource.getPartial
+     */
+    getPartial(assetId: string, options?: O): RestResponse<Model.Asset>;
+    /**
+     * Executes an AssetQuery after constraining realm and linked-asset access. Anonymous callers receive public-readable assets only; the query select clause controls which fields are populated.
+     * HTTP POST /asset/query
+     * Java method: org.openremote.model.asset.AssetResource.queryAssets
+     */
+    queryAssets(query: Model.AssetQuery, options?: O): RestResponse<Model.Asset[]>;
+    /**
+     * Applies the same authorization and selection rules as queryAssets, then returns a hierarchy optimized for tree display rather than a flat asset array.
+     * HTTP POST /asset/tree
+     * Java method: org.openremote.model.asset.AssetResource.queryAssetTree
+     */
+    queryAssetTree(query: Model.AssetQuery, options?: O): RestResponse<Model.AssetTree>;
+    /**
+     * Returns partial linked assets for a restricted user, root assets for an unrestricted realm user, and an empty array for a super user. Attributes and paths are omitted; use getAsset for full details.
+     * HTTP GET /asset/user/current
+     * Java method: org.openremote.model.asset.AssetResource.getCurrentUserAssets
+     */
+    getCurrentUserAssets(options?: O): RestResponse<Model.Asset[]>;
+    /**
+     * Creates all supplied links as one operation. Every item must identify the same realm and user, and every referenced realm, user, and asset must exist.
+     * HTTP POST /asset/user/link
+     * Java method: org.openremote.model.asset.AssetResource.createUserAssetLinks
+     */
+    createUserAssetLinks(userAssets: Model.UserAssetLink[], options?: O): RestResponse<void>;
+    /**
+     * Returns user-asset links in the required realm, optionally filtered by userId and assetId. Missing users or assets produce an empty result; restricted users cannot call this operation.
+     * HTTP GET /asset/user/link
+     * Java method: org.openremote.model.asset.AssetResource.getUserAssetLinks
+     */
+    getUserAssetLinks(queryParams?: {
+        realm?: string;
+        userId?: string;
+        assetId?: string;
+    }, options?: O): RestResponse<Model.UserAssetLink[]>;
+    /**
+     * Removes all supplied links. Every item must identify the same realm and user.
+     * HTTP POST /asset/user/link/delete
+     * Java method: org.openremote.model.asset.AssetResource.deleteUserAssetLinks
+     */
+    deleteUserAssetLinks(userAssets: Model.UserAssetLink[], options?: O): RestResponse<void>;
+    /**
+     * Removes every asset link belonging to the user in the requested realm.
+     * HTTP DELETE /asset/user/link/{realm}/{userId}
+     * Java method: org.openremote.model.asset.AssetResource.deleteAllUserAssetLinks
+     */
+    deleteAllUserAssetLinks(realm: string, userId: string, options?: O): RestResponse<void>;
+    /**
+     * Removes the link identified by realm, user, and asset. The caller must be allowed to administer asset links in that realm.
+     * HTTP DELETE /asset/user/link/{realm}/{userId}/{assetId}
+     * Java method: org.openremote.model.asset.AssetResource.deleteUserAssetLink
+     */
+    deleteUserAssetLink(realm: string, userId: string, assetId: string, options?: O): RestResponse<void>;
+    /**
+     * Returns a fully loaded asset including its path and attributes. Access is constrained to the caller's realm and, for restricted users, linked assets.
+     * HTTP GET /asset/{assetId}
+     * Java method: org.openremote.model.asset.AssetResource.get
+     */
+    get(assetId: string, options?: O): RestResponse<Model.Asset>;
+    /**
+     * Replaces mutable asset data while preserving the path identifier. Realm, parent, restricted-user, and private-metadata rules are validated; disallowed restricted-user fields may be ignored.
+     * HTTP PUT /asset/{assetId}
+     * Java method: org.openremote.model.asset.AssetResource.update
+     */
+    update(assetId: string, asset: Model.Asset, options?: O): RestResponse<Model.Asset>;
+    /**
+     * Submits an asynchronous attribute write using the current server time. The result reports whether the event was accepted, not whether downstream processing ultimately succeeded. Anonymous writes require public-write metadata.
+     * Response code 400 - The attribute write failed
+     * Response code 406 - The supplied value is not valid for the attribute
+     * Response code 429 - The attribute event queue is full; retry the write later
+     * HTTP PUT /asset/{assetId}/attribute/{attributeName}
+     * Java method: org.openremote.model.asset.AssetResource.writeAttributeValue
+     */
+    writeAttributeValue$PUT$asset_assetId_attribute_attributeName(assetId: string, attributeName: string, value: any, options?: O): RestResponse<Model.AttributeWriteResult>;
+    /**
+     * Submits an asynchronous attribute write using the supplied Unix timestamp in milliseconds. The result reports acceptance only; anonymous writes require public-write metadata.
+     * Response code 400 - The attribute write failed
+     * Response code 406 - The supplied value is not valid for the attribute
+     * Response code 429 - The attribute event queue is full; retry the write later
+     * HTTP PUT /asset/{assetId}/attribute/{attributeName}/{timestamp}
+     * Java method: org.openremote.model.asset.AssetResource.writeAttributeValue
+     */
+    writeAttributeValue$PUT$asset_assetId_attribute_attributeName_timestamp(assetId: string, attributeName: string, timestamp: number, value: any, options?: O): RestResponse<Model.AttributeWriteResult>;
+    /**
+     * Sets parentAssetId as the parent of every asset listed in repeated assetIds query parameters. Parent and children must satisfy realm, access, and hierarchy constraints.
+     * HTTP PUT /asset/{parentAssetId}/child
+     * Java method: org.openremote.model.asset.AssetResource.updateParent
      */
-    getAppInfos(options?: O): RestResponse<{
-        [index: string]: any;
-    }>;
+    updateParent(parentAssetId: string, queryParams?: {
+        assetIds?: string[];
+    }, options?: O): RestResponse<void>;
 }
 export declare class RealmResourceClient<O> {
     protected httpClient: HttpClient<O>;
@@ -1131,94 +1034,191 @@ export declare class RealmResourceClient<O> {
      */
     update(name: string, realm: Model.Realm, options?: O): RestResponse<void>;
 }
-export declare class AgentResourceClient<O> {
+export declare class AlarmResourceClient<O> {
     protected httpClient: HttpClient<O>;
     constructor(httpClient: HttpClient<O>);
     /**
-     * Runs the agent protocol's asset discovery, waits up to ten seconds for results, returns the discovered tree, and asynchronously persists discovered assets below the agent.
-     * HTTP GET /agent/assetDiscovery/{agentId}
-     * Java method: org.openremote.model.asset.agent.AgentResource.doProtocolAssetDiscovery
+     * Creates a manual alarm in an accessible realm and optionally links it to the supplied asset IDs. The authenticated user or client becomes the alarm source.
+     * HTTP POST /alarm
+     * Java method: org.openremote.model.alarm.AlarmResource.createAlarm
      */
-    doProtocolAssetDiscovery(agentId: string, queryParams?: {
-        realm?: string;
-    }, options?: O): RestResponse<Model.AssetTreeNode[]>;
+    createAlarm(alarm: Model.Alarm, queryParams?: {
+        assetIds?: string[];
+    }, options?: O): RestResponse<Model.SentAlarm>;
     /**
-     * Decodes the supplied FileInfo, asks the agent protocol to import it, persists the returned asset tree below the agent, and returns that tree.
-     * Response code 405 - The selected agent protocol does not support asset import
-     * HTTP POST /agent/assetImport/{agentId}
-     * Java method: org.openremote.model.asset.agent.AgentResource.doProtocolAssetImport
+     * Returns alarms in the requested accessible realm, optionally filtered by status, linked asset, or assignee. When realm is omitted, the authenticated realm is used.
+     * HTTP GET /alarm
+     * Java method: org.openremote.model.alarm.AlarmResource.getAlarms
      */
-    doProtocolAssetImport(agentId: string, fileInfo: Model.FileInfo, queryParams?: {
+    getAlarms(queryParams?: {
         realm?: string;
-    }, options?: O): RestResponse<Model.AssetTreeNode[]>;
+        status?: Model.AlarmStatus;
+        assetId?: string;
+        assigneeId?: string;
+    }, options?: O): RestResponse<Model.SentAlarm[]>;
     /**
-     * Runs instance discovery for an agent type and returns candidate Agent assets. parentId selects local versus edge-gateway discovery; non-super users are always constrained to their authenticated realm.
-     * Response code 415 - The selected agent protocol does not support instance discovery
-     * HTTP GET /agent/instanceDiscovery/{agentType}
-     * Java method: org.openremote.model.asset.agent.AgentResource.doProtocolInstanceDiscovery
+     * Permanently removes all alarms identified by the request body after verifying access to every alarm's realm.
+     * HTTP DELETE /alarm
+     * Java method: org.openremote.model.alarm.AlarmResource.removeAlarms
      */
-    doProtocolInstanceDiscovery(agentType: string, queryParams?: {
-        parentId?: string;
+    removeAlarms(ids: number[], options?: O): RestResponse<void>;
+    /**
+     * Adds links between assets and one existing alarm.
+
+The request body is a list for backward compatibility, but this operation now has single-alarm semantics:
+every item must contain the same `id.realm` and the same `id.alarmId`. The alarm must exist in that realm,
+every asset must exist in the same realm, and the authenticated user must have access to that realm. Requests
+containing mixed alarm IDs or realms are rejected as bad requests.
+
+Existing links are left unchanged; duplicate links in the request or links that already exist are ignored.
+This operation does not remove existing links from the alarm.
+
+     * HTTP PUT /alarm/assets
+     * Java method: org.openremote.model.alarm.AlarmResource.setAssetLinks
+     */
+    setAssetLinks(links: Model.AlarmAssetLink[], options?: O): RestResponse<void>;
+    /**
+     * Returns one alarm when its realm is active and accessible to the authenticated user.
+     * HTTP GET /alarm/{alarmId}
+     * Java method: org.openremote.model.alarm.AlarmResource.getAlarm
+     */
+    getAlarm(alarmId: number, options?: O): RestResponse<Model.SentAlarm>;
+    /**
+     * Permanently removes one alarm after verifying access to its realm.
+     * HTTP DELETE /alarm/{alarmId}
+     * Java method: org.openremote.model.alarm.AlarmResource.removeAlarm
+     */
+    removeAlarm(alarmId: number, options?: O): RestResponse<void>;
+    /**
+     * Updates the mutable state of an existing alarm after verifying access to its current realm.
+     * HTTP PUT /alarm/{alarmId}
+     * Java method: org.openremote.model.alarm.AlarmResource.updateAlarm
+     */
+    updateAlarm(alarmId: number, alarm: Model.SentAlarm, options?: O): RestResponse<void>;
+    /**
+     * Returns links from the alarm to assets in the explicitly supplied accessible realm.
+     * HTTP GET /alarm/{alarmId}/assets
+     * Java method: org.openremote.model.alarm.AlarmResource.getAssetLinks
+     */
+    getAssetLinks(alarmId: number, queryParams?: {
         realm?: string;
-    }, options?: O): RestResponse<Model.Agent[]>;
+    }, options?: O): RestResponse<Model.AlarmAssetLink[]>;
 }
-export declare class ConsoleResourceClient<O> {
+export declare class ConfigurationResourceClient<O> {
     protected httpClient: HttpClient<O>;
     constructor(httpClient: HttpClient<O>);
     /**
-     * Creates an anonymous console registration when id is absent, or updates an existing registration when id is present. Authenticated new registrations are linked to the caller; updates require that link. The returned registration contains the durable asset ID for later calls.
-     * HTTP POST /console/register
-     * Java method: org.openremote.model.console.ConsoleResource.register
+     * Returns the public Manager application configuration used by clients before and after authentication.
+     * HTTP GET /configuration/manager
+     * Java method: org.openremote.model.manager.ConfigurationResource.getManagerConfig
      */
-    register(consoleRegistration: Model.ConsoleRegistration, options?: O): RestResponse<Model.ConsoleRegistration>;
+    getManagerConfig(options?: O): RestResponse<Model.ManagerAppConfig>;
+    /**
+     * Replaces manager_config.json and returns the stored configuration. This administrative change affects Manager UI branding and behavior.
+     * HTTP PUT /configuration/manager
+     * Java method: org.openremote.model.manager.ConfigurationResource.update
+     */
+    update(managerConfiguration: Model.ManagerAppConfig, options?: O): RestResponse<Model.ManagerAppConfig>;
+    /**
+     * Decodes and stores the supplied FileInfo under the requested relative path, then returns its Manager API path.
+     * HTTP POST /configuration/manager/file
+     * Java method: org.openremote.model.manager.ConfigurationResource.fileUpload
+     */
+    fileUpload(fileInfo: Model.FileInfo, queryParams?: {
+        path?: string;
+    }, options?: O): RestResponse<string>;
+    /**
+     * Streams a previously uploaded configuration image using its detected media type.
+     * Response code 200 - The image file
+     * HTTP GET /configuration/manager/image/{filename: .+}
+     * Java method: org.openremote.model.manager.ConfigurationResource.getManagerConfigImage
+     */
+    getManagerConfigImage(filename: string, options?: O): RestResponse<any>;
+}
+export declare class SyslogResourceClient<O> {
+    protected httpClient: HttpClient<O>;
+    constructor(httpClient: HttpClient<O>);
+    /**
+     * Returns the current log-storage and retention configuration.
+     * HTTP GET /syslog/config
+     * Java method: org.openremote.model.syslog.SyslogResource.getConfig
+     */
+    getConfig(options?: O): RestResponse<Model.SyslogConfig>;
+    /**
+     * Validates and applies log-storage and retention settings.
+     * HTTP PUT /syslog/config
+     * Java method: org.openremote.model.syslog.SyslogResource.updateConfig
+     */
+    updateConfig(config: Model.SyslogConfig, options?: O): RestResponse<void>;
+    /**
+     * Permanently removes all events from the configured syslog storage.
+     * HTTP DELETE /syslog/event
+     * Java method: org.openremote.model.syslog.SyslogResource.clearEvents
+     */
+    clearEvents(options?: O): RestResponse<void>;
+    /**
+     * Returns a page of log events filtered by severity, Unix-millisecond time range, categories, and subcategories. RFC 8288 Link headers point to the next and last pages.
+     * Response code 200 - The requested page of syslog events
+     * HTTP GET /syslog/event
+     * Java method: org.openremote.model.syslog.SyslogResource.getEvents
+     */
+    getEvents(queryParams?: {
+        level?: Model.SyslogLevel;
+        per_page?: number;
+        page?: number;
+        from?: number;
+        to?: number;
+        category?: Model.SyslogCategory[];
+        subCategory?: string[];
+    }, options?: O): RestResponse<any>;
 }
 export type RestResponse<R> = Promise<Axios.GenericAxiosResponse<R>>;
 export declare class ApiClient {
-    protected _statusResource: AxiosStatusResourceClient;
-    protected _userResource: AxiosUserResourceClient;
-    protected _provisioningResource: AxiosProvisioningResourceClient;
-    protected _assetPredictedDatapointResource: AxiosAssetPredictedDatapointResourceClient;
     protected _dashboardResource: AxiosDashboardResourceClient;
-    protected _alarmResource: AxiosAlarmResourceClient;
-    protected _gatewayClientResource: AxiosGatewayClientResourceClient;
-    protected _assetResource: AxiosAssetResourceClient;
-    protected _configurationResource: AxiosConfigurationResourceClient;
+    protected _appResource: AxiosAppResourceClient;
+    protected _provisioningResource: AxiosProvisioningResourceClient;
+    protected _gatewayServiceResource: AxiosGatewayServiceResourceClient;
+    protected _assetDatapointResource: AxiosAssetDatapointResourceClient;
     protected _externalServiceResource: AxiosExternalServiceResourceClient;
+    protected _gatewayClientResource: AxiosGatewayClientResourceClient;
     protected _mapResource: AxiosMapResourceClient;
-    protected _assetDatapointResource: AxiosAssetDatapointResourceClient;
-    protected _syslogResource: AxiosSyslogResourceClient;
+    protected _rulesResource: AxiosRulesResourceClient;
+    protected _consoleResource: AxiosConsoleResourceClient;
     protected _flowResource: AxiosFlowResourceClient;
+    protected _userResource: AxiosUserResourceClient;
     protected _notificationResource: AxiosNotificationResourceClient;
-    protected _rulesResource: AxiosRulesResourceClient;
+    protected _assetPredictedDatapointResource: AxiosAssetPredictedDatapointResourceClient;
     protected _assetModelResource: AxiosAssetModelResourceClient;
-    protected _gatewayServiceResource: AxiosGatewayServiceResourceClient;
-    protected _appResource: AxiosAppResourceClient;
-    protected _realmResource: AxiosRealmResourceClient;
+    protected _statusResource: AxiosStatusResourceClient;
     protected _agentResource: AxiosAgentResourceClient;
-    protected _consoleResource: AxiosConsoleResourceClient;
+    protected _assetResource: AxiosAssetResourceClient;
+    protected _realmResource: AxiosRealmResourceClient;
+    protected _alarmResource: AxiosAlarmResourceClient;
+    protected _configurationResource: AxiosConfigurationResourceClient;
+    protected _syslogResource: AxiosSyslogResourceClient;
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
-    get StatusResource(): AxiosStatusResourceClient;
-    get UserResource(): AxiosUserResourceClient;
-    get ProvisioningResource(): AxiosProvisioningResourceClient;
-    get AssetPredictedDatapointResource(): AxiosAssetPredictedDatapointResourceClient;
     get DashboardResource(): AxiosDashboardResourceClient;
-    get AlarmResource(): AxiosAlarmResourceClient;
-    get GatewayClientResource(): AxiosGatewayClientResourceClient;
-    get AssetResource(): AxiosAssetResourceClient;
-    get ConfigurationResource(): AxiosConfigurationResourceClient;
+    get AppResource(): AxiosAppResourceClient;
+    get ProvisioningResource(): AxiosProvisioningResourceClient;
+    get GatewayServiceResource(): AxiosGatewayServiceResourceClient;
+    get AssetDatapointResource(): AxiosAssetDatapointResourceClient;
     get ExternalServiceResource(): AxiosExternalServiceResourceClient;
+    get GatewayClientResource(): AxiosGatewayClientResourceClient;
     get MapResource(): AxiosMapResourceClient;
-    get AssetDatapointResource(): AxiosAssetDatapointResourceClient;
-    get SyslogResource(): AxiosSyslogResourceClient;
+    get RulesResource(): AxiosRulesResourceClient;
+    get ConsoleResource(): AxiosConsoleResourceClient;
     get FlowResource(): AxiosFlowResourceClient;
+    get UserResource(): AxiosUserResourceClient;
     get NotificationResource(): AxiosNotificationResourceClient;
-    get RulesResource(): AxiosRulesResourceClient;
+    get AssetPredictedDatapointResource(): AxiosAssetPredictedDatapointResourceClient;
     get AssetModelResource(): AxiosAssetModelResourceClient;
-    get GatewayServiceResource(): AxiosGatewayServiceResourceClient;
-    get AppResource(): AxiosAppResourceClient;
-    get RealmResource(): AxiosRealmResourceClient;
+    get StatusResource(): AxiosStatusResourceClient;
     get AgentResource(): AxiosAgentResourceClient;
-    get ConsoleResource(): AxiosConsoleResourceClient;
+    get AssetResource(): AxiosAssetResourceClient;
+    get RealmResource(): AxiosRealmResourceClient;
+    get AlarmResource(): AxiosAlarmResourceClient;
+    get ConfigurationResource(): AxiosConfigurationResourceClient;
+    get SyslogResource(): AxiosSyslogResourceClient;
 }
 import * as Axios from "axios";
 declare module "axios" {
@@ -1226,70 +1226,70 @@ declare module "axios" {
         data: R;
     }
 }
-export declare class AxiosStatusResourceClient extends StatusResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosDashboardResourceClient extends DashboardResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosUserResourceClient extends UserResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosAppResourceClient extends AppResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
 export declare class AxiosProvisioningResourceClient extends ProvisioningResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosAssetPredictedDatapointResourceClient extends AssetPredictedDatapointResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosGatewayServiceResourceClient extends GatewayServiceResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosDashboardResourceClient extends DashboardResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosAssetDatapointResourceClient extends AssetDatapointResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosAlarmResourceClient extends AlarmResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosExternalServiceResourceClient extends ExternalServiceResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
 export declare class AxiosGatewayClientResourceClient extends GatewayClientResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosAssetResourceClient extends AssetResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosMapResourceClient extends MapResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosConfigurationResourceClient extends ConfigurationResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosRulesResourceClient extends RulesResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosExternalServiceResourceClient extends ExternalServiceResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosConsoleResourceClient extends ConsoleResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosMapResourceClient extends MapResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosFlowResourceClient extends FlowResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosAssetDatapointResourceClient extends AssetDatapointResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosUserResourceClient extends UserResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosSyslogResourceClient extends SyslogResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosNotificationResourceClient extends NotificationResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosFlowResourceClient extends FlowResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosAssetPredictedDatapointResourceClient extends AssetPredictedDatapointResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosNotificationResourceClient extends NotificationResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosAssetModelResourceClient extends AssetModelResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosRulesResourceClient extends RulesResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosStatusResourceClient extends StatusResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosAssetModelResourceClient extends AssetModelResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosAgentResourceClient extends AgentResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosGatewayServiceResourceClient extends GatewayServiceResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosAssetResourceClient extends AssetResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosAppResourceClient extends AppResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosRealmResourceClient extends RealmResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosRealmResourceClient extends RealmResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosAlarmResourceClient extends AlarmResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosAgentResourceClient extends AgentResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosConfigurationResourceClient extends ConfigurationResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosConsoleResourceClient extends ConsoleResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosSyslogResourceClient extends SyslogResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
 //# sourceMappingURL=restclient.d.ts.map