@openremote/rest 1.32.0 → 1.33.0-snapshot.20261013082434

package/build/lib/restclient.d.ts

@@ -9,377 +9,166 @@ export interface HttpClient<O> {
         options?: O;
     }): RestResponse<R>;
 }
-export declare class StatusResourceClient<O> {
-    protected httpClient: HttpClient<O>;
-    constructor(httpClient: HttpClient<O>);
-    /**
-     * Returns health data keyed by registered health-provider name. A null provider result is represented as JSON null.
-     * HTTP GET /health
-     * Java method: org.openremote.model.system.StatusResource.getHealthStatus
-     */
-    getHealthStatus(options?: O): RestResponse<{
-        [index: string]: any;
-    }>;
-    /**
-     * Returns public bootstrap information, including the Manager version and identity-provider URL.
-     * HTTP GET /info
-     * Java method: org.openremote.model.system.StatusResource.getInfo
-     */
-    getInfo(options?: O): RestResponse<{
-        [index: string]: any;
-    }>;
-}
-export declare class UserResourceClient<O> {
-    protected httpClient: HttpClient<O>;
-    constructor(httpClient: HttpClient<O>);
-    /**
-     * Stores the supplied non-empty locale string as the caller's identity-provider locale attribute. The target realm must be active unless the caller is a superuser.
-     * HTTP PUT /user/locale
-     * Java method: org.openremote.model.security.UserResource.updateCurrentUserLocale
-     */
-    updateCurrentUserLocale(locale: string, options?: O): RestResponse<void>;
-    /**
-     * Executes a UserQuery. Non-super users are forced into their authenticated realm and cannot see system accounts; callers with read-users but not read-admin receive basic fields only. The target realm must be active unless the caller is a superuser.
-     * HTTP POST /user/query
-     * Java method: org.openremote.model.security.UserResource.query
-     */
-    query(query: Model.UserQuery, options?: O): RestResponse<Model.User[]>;
-    /**
-     * Initiates the identity provider's configured password-reset action for the caller's own account. The target realm must be active unless the caller is a superuser.
-     * HTTP PUT /user/request-password-reset
-     * Java method: org.openremote.model.security.UserResource.requestPasswordResetCurrent
-     */
-    requestPasswordResetCurrent(options?: O): RestResponse<void>;
-    /**
-     * Replaces the caller's own identity-provider credential using the supplied credential representation. The target realm must be active unless the caller is a superuser.
-     * HTTP PUT /user/reset-password
-     * Java method: org.openremote.model.security.UserResource.updatePasswordCurrent
-     */
-    updatePasswordCurrent(credential: Model.Credential, options?: O): RestResponse<void>;
-    /**
-     * Updates the caller's own profile. A supplied user ID must match the access token; role and realm administration are not provided by this endpoint. The target realm must be active unless the caller is a superuser.
-     * HTTP PUT /user/update
-     * Java method: org.openremote.model.security.UserResource.updateCurrent
-     */
-    updateCurrent(user: Model.User, options?: O): RestResponse<Model.User>;
-    /**
-     * Returns the identity-provider record corresponding to the current access token. The target realm must be active unless the caller is a superuser.
-     * HTTP GET /user/user
-     * Java method: org.openremote.model.security.UserResource.getCurrent
-     */
-    getCurrent(options?: O): RestResponse<Model.User>;
-    /**
-     * Returns realm-level role names assigned to the caller. The target realm must be active unless the caller is a superuser.
-     * HTTP GET /user/userRealmRoles
-     * Java method: org.openremote.model.security.UserResource.getCurrentUserRealmRoles
-     */
-    getCurrentUserRealmRoles(options?: O): RestResponse<string[]>;
-    /**
-     * Returns role names assigned to the caller for the named identity-provider client. The target realm must be active unless the caller is a superuser.
-     * HTTP GET /user/userRoles/{clientId}
-     * Java method: org.openremote.model.security.UserResource.getCurrentUserClientRoles
-     */
-    getCurrentUserClientRoles(clientId: string, options?: O): RestResponse<string[]>;
-    /**
-     * Terminates the active MQTT connection identified by sessionID. The realm must match the session owner's realm. Authenticated users may disconnect their own sessions without an additional client role. Disconnecting another user's session requires the openremote client role write:admin or superuser status. Non-superusers are limited to their own active realm; superusers may disconnect sessions across realms, including inactive realms.
-     * Response code 403 - The realm is inactive for a non-superuser, or the caller is neither the session owner, a user with write:admin, nor a superuser
-     * Response code 404 - The session or its owning user does not exist, or the session does not belong to the specified realm
-     * Response code 405 - A non-superuser cannot access the session owner's realm
-     * HTTP DELETE /user/{realm}/disconnect/{sessionID}
-     * Java method: org.openremote.model.security.UserResource.disconnectUserSession
-     */
-    disconnectUserSession(realm: string, sessionID: string, options?: O): RestResponse<void>;
-    /**
-     * Asks the identity provider to send or initiate its configured password-reset action for the specified user. The target realm must be active unless the caller is a superuser.
-     * Response code 405 - The caller cannot mutate a user in the requested realm
-     * HTTP PUT /user/{realm}/request-password-reset/{userId}
-     * Java method: org.openremote.model.security.UserResource.requestPasswordReset
-     */
-    requestPasswordReset(realm: string, userId: string, options?: O): RestResponse<void>;
-    /**
-     * Replaces a user's credential in an administered realm using the supplied credential representation. The target realm must be active unless the caller is a superuser.
-     * Response code 405 - The caller cannot mutate a user in the requested realm
-     * HTTP PUT /user/{realm}/reset-password/{userId}
-     * Java method: org.openremote.model.security.UserResource.updatePassword
-     */
-    updatePassword(realm: string, userId: string, credential: Model.Credential, options?: O): RestResponse<void>;
-    /**
-     * Generates and returns a new client secret for a service user in an administered realm. The target realm must be active unless the caller is a superuser.
-     * HTTP GET /user/{realm}/reset-secret/{userId}
-     * Java method: org.openremote.model.security.UserResource.resetSecret
-     */
-    resetSecret(realm: string, userId: string, options?: O): RestResponse<string>;
-    /**
-     * Creates, updates, or removes role definitions for the default OpenRemote client in the requested realm. The target realm must be active unless the caller is a superuser.
-     * HTTP PUT /user/{realm}/roles
-     * Java method: org.openremote.model.security.UserResource.updateRoles
-     */
-    updateRoles(realm: string, roles: Model.Role[], options?: O): RestResponse<void>;
-    /**
-     * Returns realm-level role names assigned to one user. Without read-admin permission, callers may retrieve only their own roles. The target realm must be active unless the caller is a superuser.
-     * HTTP GET /user/{realm}/userRealmRoles/{userId}
-     * Java method: org.openremote.model.security.UserResource.getUserRealmRoles
-     */
-    getUserRealmRoles(realm: string, userId: string, options?: O): RestResponse<string[]>;
-    /**
-     * Replaces the user's assigned realm-level role names in an administered realm. The target realm must be active unless the caller is a superuser.
-     * HTTP PUT /user/{realm}/userRealmRoles/{userId}
-     * Java method: org.openremote.model.security.UserResource.updateUserRealmRoles
-     */
-    updateUserRealmRoles(realm: string, userId: string, roles: string[], options?: O): RestResponse<void>;
-    /**
-     * Returns role names assigned to one user for the named client. Without read-admin permission, callers may retrieve only their own roles. The target realm must be active unless the caller is a superuser.
-     * HTTP GET /user/{realm}/userRoles/{userId}/{clientId}
-     * Java method: org.openremote.model.security.UserResource.getUserClientRoles
-     */
-    getUserClientRoles(realm: string, userId: string, clientId: string, options?: O): RestResponse<string[]>;
-    /**
-     * Replaces the user's assigned role names for the named client in an administered realm. The target realm must be active unless the caller is a superuser.
-     * HTTP PUT /user/{realm}/userRoles/{userId}/{clientId}
-     * Java method: org.openremote.model.security.UserResource.updateUserClientRoles
-     */
-    updateUserClientRoles(realm: string, userId: string, clientId: string, roles: string[], options?: O): RestResponse<void>;
-    /**
-     * Returns active MQTT sessions for one user, including connection ID, creation time, and remote address. Without read-admin permission, callers may inspect only themselves. The target realm must be active unless the caller is a superuser.
-     * HTTP GET /user/{realm}/userSessions/{userId}
-     * Java method: org.openremote.model.security.UserResource.getUserSessions
-     */
-    getUserSessions(realm: string, userId: string, options?: O): RestResponse<Model.UserSession[]>;
-    /**
-     * Creates an identity-provider user in a realm administered by the caller and returns the resulting user record. The target realm must be active unless the caller is a superuser.
-     * HTTP POST /user/{realm}/users
-     * Java method: org.openremote.model.security.UserResource.create
-     */
-    create(realm: string, user: Model.User, options?: O): RestResponse<Model.User>;
-    /**
-     * Updates an existing identity-provider user in an administered realm. The master administrator cannot be disabled. The target realm must be active unless the caller is a superuser.
-     * Response code 405 - The requested cross-realm or protected master-administrator mutation is not allowed
-     * HTTP PUT /user/{realm}/users
-     * Java method: org.openremote.model.security.UserResource.update
-     */
-    update(realm: string, user: Model.User, options?: O): RestResponse<Model.User>;
-    /**
-     * Permanently deletes a user from an administered realm. The master-realm administrator cannot be deleted. The target realm must be active unless the caller is a superuser.
-     * Response code 405 - The master-realm administrator cannot be deleted
-     * HTTP DELETE /user/{realm}/users/{userId}
-     * Java method: org.openremote.model.security.UserResource.delete
-     */
-    delete(realm: string, userId: string, options?: O): RestResponse<void>;
-    /**
-     * Returns all role definitions exposed by the named identity-provider client. Realm-administrator access is required. The target realm must be active unless the caller is a superuser.
-     * HTTP GET /user/{realm}/{clientId}/roles
-     * Java method: org.openremote.model.security.UserResource.getClientRoles
-     */
-    getClientRoles(realm: string, clientId: string, options?: O): RestResponse<Model.Role[]>;
-    /**
-     * Creates, updates, or removes role definitions for a named identity-provider client. The target realm must be active unless the caller is a superuser.
-     * HTTP PUT /user/{realm}/{clientId}/roles
-     * Java method: org.openremote.model.security.UserResource.updateClientRoles
-     */
-    updateClientRoles(realm: string, clientId: string, roles: Model.Role[], options?: O): RestResponse<void>;
-    /**
-     * Returns one user when it belongs to the requested accessible realm. Without read-admin permission, callers may retrieve only their own user. The target realm must be active unless the caller is a superuser.
-     * HTTP GET /user/{realm}/{userId}
-     * Java method: org.openremote.model.security.UserResource.get
-     */
-    get(realm: string, userId: string, options?: O): RestResponse<Model.User>;
-}
-export declare class ProvisioningResourceClient<O> {
+export declare class RulesResourceClient<O> {
     protected httpClient: HttpClient<O>;
     constructor(httpClient: HttpClient<O>);
     /**
-     * Persists a new provisioning configuration and returns its generated numeric identifier. This operation is restricted to a super administrator.
-     * HTTP POST /provisioning
-     * Java method: org.openremote.model.provisioning.ProvisioningResource.createProvisioningConfig
-     */
-    createProvisioningConfig(provisioningConfig: Model.ProvisioningConfigUnion<any, any>, options?: O): RestResponse<number>;
-    /**
-     * Returns every provisioning configuration. This operation is restricted to a super administrator.
-     * HTTP GET /provisioning
-     * Java method: org.openremote.model.provisioning.ProvisioningResource.getProvisioningConfigs
+     * Creates and deploys a global ruleset and returns its numeric ID. Super-user access is required; legacy JavaScript rulesets cannot be created.
+     * HTTP POST /rules
+     * Java method: org.openremote.model.rules.RulesResource.createGlobalRuleset
      */
-    getProvisioningConfigs(options?: O): RestResponse<Model.ProvisioningConfigUnion<any, any>[]>;
+    createGlobalRuleset(ruleset: Model.GlobalRuleset, options?: O): RestResponse<number>;
     /**
-     * Permanently removes the provisioning configuration identified by the path. This operation is restricted to a super administrator.
-     * HTTP DELETE /provisioning/{id}
-     * Java method: org.openremote.model.provisioning.ProvisioningResource.deleteProvisioningConfig
+     * Returns global rulesets filtered by repeated language parameters. fullyPopulate controls whether rule source and other large fields are loaded; super-user access is required.
+     * HTTP GET /rules
+     * Java method: org.openremote.model.rules.RulesResource.getGlobalRulesets
      */
-    deleteProvisioningConfig(id: number, options?: O): RestResponse<void>;
+    getGlobalRulesets(queryParams?: {
+        language?: Model.RulesetLang[];
+        fullyPopulate?: boolean;
+    }, options?: O): RestResponse<Model.GlobalRuleset[]>;
     /**
-     * Replaces the provisioning configuration identified by the path. This operation is restricted to a super administrator.
-     * HTTP PUT /provisioning/{id}
-     * Java method: org.openremote.model.provisioning.ProvisioningResource.updateProvisioningConfig
+     * Creates and deploys a ruleset for an accessible asset and returns its numeric ID. The assetId is taken from the request body.
+     * HTTP POST /rules/asset
+     * Java method: org.openremote.model.rules.RulesResource.createAssetRuleset
      */
-    updateProvisioningConfig(id: number, provisioningConfig: Model.ProvisioningConfigUnion<any, any>, options?: O): RestResponse<void>;
-}
-export declare class AssetPredictedDatapointResourceClient<O> {
-    protected httpClient: HttpClient<O>;
-    constructor(httpClient: HttpClient<O>);
+    createAssetRuleset(ruleset: Model.AssetRuleset, options?: O): RestResponse<number>;
     /**
-     * Queries predicted values for one attribute using the supplied time-range and aggregation criteria. Anonymous access requires public-read access on both asset and attribute.
-     * HTTP POST /asset/predicted/{assetId}/{attributeName}
-     * Java method: org.openremote.model.datapoint.AssetPredictedDatapointResource.getPredictedDatapoints
+     * Returns asset rulesets filtered by language. Callers without full access receive public rulesets only; a nonexistent asset produces an empty array.
+     * HTTP GET /rules/asset/for/{assetId}
+     * Java method: org.openremote.model.rules.RulesResource.getAssetRulesets
      */
-    getPredictedDatapoints(assetId: string, attributeName: string, query: Model.AssetDatapointQueryUnion, options?: O): RestResponse<Model.ValueDatapoint<any>[]>;
+    getAssetRulesets(assetId: string, queryParams?: {
+        language?: Model.RulesetLang[];
+        fullyPopulate?: boolean;
+    }, options?: O): RestResponse<Model.AssetRuleset[]>;
     /**
-     * Replaces or adds predicted values for one attribute. Anonymous access is allowed only when the asset and attribute are public-write; authenticated callers require attribute-write access.
-     * HTTP PUT /asset/predicted/{assetId}/{attributeName}
-     * Java method: org.openremote.model.datapoint.AssetPredictedDatapointResource.writePredictedDatapoints
+     * Permanently removes and undeploys one ruleset from an accessible asset.
+     * HTTP DELETE /rules/asset/{id}
+     * Java method: org.openremote.model.rules.RulesResource.deleteAssetRuleset
      */
-    writePredictedDatapoints(assetId: string, attributeName: string, predictedDatapoints: Model.ValueDatapoint<any>[], options?: O): RestResponse<void>;
-}
-export declare class DashboardResourceClient<O> {
-    protected httpClient: HttpClient<O>;
-    constructor(httpClient: HttpClient<O>);
+    deleteAssetRuleset(id: number, options?: O): RestResponse<void>;
     /**
-     * Creates a dashboard in an accessible realm. The server assigns the authenticated user as owner and initially stores the dashboard with shared access.
-     * HTTP POST /dashboard
-     * Java method: org.openremote.model.dashboard.DashboardResource.create
+     * Returns one fully populated asset ruleset when the caller can access its realm and owning asset.
+     * HTTP GET /rules/asset/{id}
+     * Java method: org.openremote.model.rules.RulesResource.getAssetRuleset
      */
-    create(dashboard: Model.Dashboard, options?: O): RestResponse<Model.Dashboard>;
+    getAssetRuleset(id: number, options?: O): RestResponse<Model.AssetRuleset>;
     /**
-     * Updates an existing dashboard when the authenticated user can modify it in the dashboard's realm.
-     * HTTP PUT /dashboard
-     * Java method: org.openremote.model.dashboard.DashboardResource.update
+     * Replaces and redeploys one asset ruleset. The ID must match and an existing ruleset cannot be reassigned to another asset.
+     * HTTP PUT /rules/asset/{id}
+     * Java method: org.openremote.model.rules.RulesResource.updateAssetRuleset
      */
-    update(dashboard: Model.Dashboard, options?: O): RestResponse<Model.Dashboard>;
+    updateAssetRuleset(id: number, ruleset: Model.AssetRuleset, options?: O): RestResponse<void>;
     /**
-     * Returns dashboards visible to the caller in the requested realm. Anonymous callers receive public dashboards only; authenticated access also depends on roles, ownership, and linked assets.
-     * HTTP GET /dashboard/all/{realm}
-     * Java method: org.openremote.model.dashboard.DashboardResource.getAllRealmDashboards
+     * Extracts geofence definitions relevant to the asset. Anonymous access requires a public-readable asset; authenticated restricted users require an asset link.
+     * HTTP GET /rules/geofences/{assetId}
+     * Java method: org.openremote.model.rules.RulesResource.getAssetGeofences
      */
-    getAllRealmDashboards(realm: string, options?: O): RestResponse<Model.Dashboard[]>;
+    getAssetGeofences(assetId: string, options?: O): RestResponse<Model.GeofenceDefinition[]>;
     /**
-     * Executes a dashboard query after constraining it to the caller's realm, roles, ownership, and asset access. A missing body uses the request realm and default visibility rules.
-     * HTTP POST /dashboard/query
-     * Java method: org.openremote.model.dashboard.DashboardResource.query
+     * Returns runtime status and error counts for an accessible asset engine. Returns null when the asset or its engine does not exist.
+     * Response code 204 - The asset or its rules engine does not exist
+     * HTTP GET /rules/info/asset/{assetId}
+     * Java method: org.openremote.model.rules.RulesResource.getAssetEngineInfo
      */
-    query(dashboardQuery: Model.DashboardQuery, options?: O): RestResponse<Model.Dashboard[]>;
+    getAssetEngineInfo(assetId: string, options?: O): RestResponse<Model.RulesEngineInfo>;
     /**
-     * Permanently removes a dashboard when the authenticated user can modify it in the requested realm.
-     * HTTP DELETE /dashboard/{realm}/{dashboardId}
-     * Java method: org.openremote.model.dashboard.DashboardResource.delete
+     * Returns runtime status and compilation/execution error counts for the global engine, or null when that engine is not running. Super-user access is required.
+     * Response code 204 - The global rules engine is not running
+     * HTTP GET /rules/info/global
+     * Java method: org.openremote.model.rules.RulesResource.getGlobalEngineInfo
      */
-    delete(realm: string, dashboardId: string, options?: O): RestResponse<void>;
+    getGlobalEngineInfo(options?: O): RestResponse<Model.RulesEngineInfo>;
     /**
-     * Returns one dashboard only when it is visible to the caller. Inaccessible and nonexistent dashboards both return 404 to avoid disclosing their existence.
-     * HTTP GET /dashboard/{realm}/{dashboardId}
-     * Java method: org.openremote.model.dashboard.DashboardResource.get
+     * Returns runtime status and error counts for an accessible realm engine, or null when that engine is not running. Restricted users cannot inspect realm engines.
+     * Response code 204 - The requested realm rules engine is not running
+     * HTTP GET /rules/info/realm/{realm}
+     * Java method: org.openremote.model.rules.RulesResource.getRealmEngineInfo
      */
-    get(realm: string, dashboardId: string, options?: O): RestResponse<Model.Dashboard>;
-}
-export declare class AlarmResourceClient<O> {
-    protected httpClient: HttpClient<O>;
-    constructor(httpClient: HttpClient<O>);
+    getRealmEngineInfo(realm: string, options?: O): RestResponse<Model.RulesEngineInfo>;
     /**
-     * Creates a manual alarm in an accessible realm and optionally links it to the supplied asset IDs. The authenticated user or client becomes the alarm source.
-     * HTTP POST /alarm
-     * Java method: org.openremote.model.alarm.AlarmResource.createAlarm
+     * Creates and deploys a ruleset in its body realm and returns its numeric ID. Restricted users cannot create realm rulesets; legacy JavaScript is not accepted.
+     * HTTP POST /rules/realm
+     * Java method: org.openremote.model.rules.RulesResource.createRealmRuleset
      */
-    createAlarm(alarm: Model.Alarm, queryParams?: {
-        assetIds?: string[];
-    }, options?: O): RestResponse<Model.SentAlarm>;
+    createRealmRuleset(ruleset: Model.RealmRuleset, options?: O): RestResponse<number>;
     /**
-     * Returns alarms in the requested accessible realm, optionally filtered by status, linked asset, or assignee. When realm is omitted, the authenticated realm is used.
-     * HTTP GET /alarm
-     * Java method: org.openremote.model.alarm.AlarmResource.getAlarms
+     * Returns realm rulesets filtered by language. Anonymous, restricted, or callers without read-rules permission receive public rulesets only; fullyPopulate controls loading of rule source.
+     * HTTP GET /rules/realm/for/{realm}
+     * Java method: org.openremote.model.rules.RulesResource.getRealmRulesets
      */
-    getAlarms(queryParams?: {
-        realm?: string;
-        status?: Model.AlarmStatus;
-        assetId?: string;
-        assigneeId?: string;
-    }, options?: O): RestResponse<Model.SentAlarm[]>;
+    getRealmRulesets(realm: string, queryParams?: {
+        language?: Model.RulesetLang[];
+        fullyPopulate?: boolean;
+    }, options?: O): RestResponse<Model.RealmRuleset[]>;
     /**
-     * Permanently removes all alarms identified by the request body after verifying access to every alarm's realm.
-     * HTTP DELETE /alarm
-     * Java method: org.openremote.model.alarm.AlarmResource.removeAlarms
+     * Permanently removes and undeploys one ruleset from an accessible realm.
+     * HTTP DELETE /rules/realm/{id}
+     * Java method: org.openremote.model.rules.RulesResource.deleteRealmRuleset
      */
-    removeAlarms(ids: number[], options?: O): RestResponse<void>;
+    deleteRealmRuleset(id: number, options?: O): RestResponse<void>;
     /**
-     * Adds links between assets and one existing alarm.
-
-The request body is a list for backward compatibility, but this operation now has single-alarm semantics:
-every item must contain the same `id.realm` and the same `id.alarmId`. The alarm must exist in that realm,
-every asset must exist in the same realm, and the authenticated user must have access to that realm. Requests
-containing mixed alarm IDs or realms are rejected as bad requests.
-
-Existing links are left unchanged; duplicate links in the request or links that already exist are ignored.
-This operation does not remove existing links from the alarm.
-
-     * HTTP PUT /alarm/assets
-     * Java method: org.openremote.model.alarm.AlarmResource.setAssetLinks
+     * Returns one fully populated realm ruleset when its realm is accessible to the caller.
+     * HTTP GET /rules/realm/{id}
+     * Java method: org.openremote.model.rules.RulesResource.getRealmRuleset
      */
-    setAssetLinks(links: Model.AlarmAssetLink[], options?: O): RestResponse<void>;
+    getRealmRuleset(id: number, options?: O): RestResponse<Model.RealmRuleset>;
     /**
-     * Returns one alarm when its realm is active and accessible to the authenticated user.
-     * HTTP GET /alarm/{alarmId}
-     * Java method: org.openremote.model.alarm.AlarmResource.getAlarm
+     * Replaces and redeploys one realm ruleset. Path and body IDs and the existing realm must match; legacy JavaScript cannot be updated.
+     * HTTP PUT /rules/realm/{id}
+     * Java method: org.openremote.model.rules.RulesResource.updateRealmRuleset
      */
-    getAlarm(alarmId: number, options?: O): RestResponse<Model.SentAlarm>;
+    updateRealmRuleset(id: number, ruleset: Model.RealmRuleset, options?: O): RestResponse<void>;
     /**
-     * Permanently removes one alarm after verifying access to its realm.
-     * HTTP DELETE /alarm/{alarmId}
-     * Java method: org.openremote.model.alarm.AlarmResource.removeAlarm
+     * Permanently removes and undeploys one global ruleset. Super-user access is required.
+     * HTTP DELETE /rules/{id}
+     * Java method: org.openremote.model.rules.RulesResource.deleteGlobalRuleset
      */
-    removeAlarm(alarmId: number, options?: O): RestResponse<void>;
+    deleteGlobalRuleset(id: number, options?: O): RestResponse<void>;
     /**
-     * Updates the mutable state of an existing alarm after verifying access to its current realm.
-     * HTTP PUT /alarm/{alarmId}
-     * Java method: org.openremote.model.alarm.AlarmResource.updateAlarm
+     * Returns one fully populated global ruleset including transient deployment status and errors. Super-user access is required.
+     * HTTP GET /rules/{id}
+     * Java method: org.openremote.model.rules.RulesResource.getGlobalRuleset
      */
-    updateAlarm(alarmId: number, alarm: Model.SentAlarm, options?: O): RestResponse<void>;
+    getGlobalRuleset(id: number, options?: O): RestResponse<Model.GlobalRuleset>;
     /**
-     * Returns links from the alarm to assets in the explicitly supplied accessible realm.
-     * HTTP GET /alarm/{alarmId}/assets
-     * Java method: org.openremote.model.alarm.AlarmResource.getAssetLinks
+     * Replaces and redeploys the identified global ruleset. Path and body IDs must match; legacy JavaScript rulesets cannot be updated.
+     * HTTP PUT /rules/{id}
+     * Java method: org.openremote.model.rules.RulesResource.updateGlobalRuleset
      */
-    getAssetLinks(alarmId: number, queryParams?: {
-        realm?: string;
-    }, options?: O): RestResponse<Model.AlarmAssetLink[]>;
+    updateGlobalRuleset(id: number, ruleset: Model.GlobalRuleset, options?: O): RestResponse<void>;
 }
-export declare class GatewayClientResourceClient<O> {
+export declare class AssetDatapointResourceClient<O> {
     protected httpClient: HttpClient<O>;
     constructor(httpClient: HttpClient<O>);
     /**
-     * Removes connections for all repeated realm query parameters. Deleting multiple realms is restricted to super users.
-     * HTTP DELETE /gateway/connection
-     * Java method: org.openremote.model.gateway.GatewayClientResource.deleteConnections
-     */
-    deleteConnections(queryParams?: {
-        realm?: string[];
-    }, options?: O): RestResponse<void>;
-    /**
-     * Returns every configured central-manager connection. Unlike the single-realm endpoint, this operation is restricted to super users.
-     * HTTP GET /gateway/connection
-     * Java method: org.openremote.model.gateway.GatewayClientResource.getConnections
-     */
-    getConnections(options?: O): RestResponse<Model.GatewayConnection[]>;
-    /**
-     * Removes the central-manager connection for one realm. Realm administrators can remove their own connection; super users can remove any connection.
-     * HTTP DELETE /gateway/connection/{realm}
-     * Java method: org.openremote.model.gateway.GatewayClientResource.deleteConnection
-     */
-    deleteConnection(realm: string, options?: O): RestResponse<void>;
-    /**
-     * Returns the central-manager connection configured for a realm, or null when none exists. Realm administrators can read their own realm; super users can read any realm.
-     * Response code 204 - No gateway connection is configured for the realm
-     * HTTP GET /gateway/connection/{realm}
-     * Java method: org.openremote.model.gateway.GatewayClientResource.getConnection
+     * Streams a ZIP archive containing exported datapoints for one or more attribute references over the requested inclusive time range. attributeRefs is a JSON-encoded array of objects with id and name fields.
+     * Response code 200 - A ZIP archive containing the exported data
+     * HTTP GET /asset/datapoint/export
+     * Java method: org.openremote.model.datapoint.AssetDatapointResource.getDatapointExport
      */
-    getConnection(realm: string, options?: O): RestResponse<Model.GatewayConnection>;
+    getDatapointExport(queryParams?: {
+        attributeRefs?: string;
+        fromTimestamp?: number;
+        toTimestamp?: number;
+        format?: Model.DatapointExportFormat;
+    }, options?: O): RestResponse<any>;
     /**
-     * Creates or replaces the connection for the path realm. The server forces the local realm, including realm predicates in attribute filters, to match the path.
-     * HTTP PUT /gateway/connection/{realm}
-     * Java method: org.openremote.model.gateway.GatewayClientResource.setConnection
+     * Returns the oldest and newest stored timestamps for one attribute. The asset and attribute must be readable by the authenticated user and configured for datapoint storage.
+     * HTTP GET /asset/datapoint/periods
+     * Java method: org.openremote.model.datapoint.AssetDatapointResource.getDatapointPeriod
      */
-    setConnection(realm: string, connection: Model.GatewayConnection, options?: O): RestResponse<void>;
+    getDatapointPeriod(queryParams?: {
+        assetId?: string;
+        attributeName?: string;
+    }, options?: O): RestResponse<Model.DatapointPeriod>;
     /**
-     * Returns the live connection state for the requested local realm.
-     * HTTP GET /gateway/status/{realm}
-     * Java method: org.openremote.model.gateway.GatewayClientResource.getConnectionStatus
+     * Returns stored historical values for one attribute. A null body returns the available series; a polymorphic query body controls the time range and retrieval or aggregation strategy. Anonymous access requires public-read access on both asset and attribute.
+     * HTTP POST /asset/datapoint/{assetId}/{attributeName}
+     * Java method: org.openremote.model.datapoint.AssetDatapointResource.getDatapoints
      */
-    getConnectionStatus(realm: string, options?: O): RestResponse<Model.ConnectionStatus>;
+    getDatapoints(assetId: string, attributeName: string, query: Model.AssetDatapointQueryUnion, options?: O): RestResponse<Model.ValueDatapoint<any>[]>;
 }
 export declare class AssetResourceClient<O> {
     protected httpClient: HttpClient<O>;
@@ -521,6 +310,124 @@ export declare class AssetResourceClient<O> {
         assetIds?: string[];
     }, options?: O): RestResponse<void>;
 }
+export declare class StatusResourceClient<O> {
+    protected httpClient: HttpClient<O>;
+    constructor(httpClient: HttpClient<O>);
+    /**
+     * Returns health data keyed by registered health-provider name. A null provider result is represented as JSON null.
+     * HTTP GET /health
+     * Java method: org.openremote.model.system.StatusResource.getHealthStatus
+     */
+    getHealthStatus(options?: O): RestResponse<{
+        [index: string]: any;
+    }>;
+    /**
+     * Returns public bootstrap information, including the Manager version and identity-provider URL.
+     * HTTP GET /info
+     * Java method: org.openremote.model.system.StatusResource.getInfo
+     */
+    getInfo(options?: O): RestResponse<{
+        [index: string]: any;
+    }>;
+}
+export declare class AlarmResourceClient<O> {
+    protected httpClient: HttpClient<O>;
+    constructor(httpClient: HttpClient<O>);
+    /**
+     * Creates a manual alarm in an accessible realm and optionally links it to the supplied asset IDs. The authenticated user or client becomes the alarm source.
+     * HTTP POST /alarm
+     * Java method: org.openremote.model.alarm.AlarmResource.createAlarm
+     */
+    createAlarm(alarm: Model.Alarm, queryParams?: {
+        assetIds?: string[];
+    }, options?: O): RestResponse<Model.SentAlarm>;
+    /**
+     * Returns alarms in the requested accessible realm, optionally filtered by status, linked asset, or assignee. When realm is omitted, the authenticated realm is used.
+     * HTTP GET /alarm
+     * Java method: org.openremote.model.alarm.AlarmResource.getAlarms
+     */
+    getAlarms(queryParams?: {
+        realm?: string;
+        status?: Model.AlarmStatus;
+        assetId?: string;
+        assigneeId?: string;
+    }, options?: O): RestResponse<Model.SentAlarm[]>;
+    /**
+     * Permanently removes all alarms identified by the request body after verifying access to every alarm's realm.
+     * HTTP DELETE /alarm
+     * Java method: org.openremote.model.alarm.AlarmResource.removeAlarms
+     */
+    removeAlarms(ids: number[], options?: O): RestResponse<void>;
+    /**
+     * Adds links between assets and one existing alarm.
+
+The request body is a list for backward compatibility, but this operation now has single-alarm semantics:
+every item must contain the same `id.realm` and the same `id.alarmId`. The alarm must exist in that realm,
+every asset must exist in the same realm, and the authenticated user must have access to that realm. Requests
+containing mixed alarm IDs or realms are rejected as bad requests.
+
+Existing links are left unchanged; duplicate links in the request or links that already exist are ignored.
+This operation does not remove existing links from the alarm.
+
+     * HTTP PUT /alarm/assets
+     * Java method: org.openremote.model.alarm.AlarmResource.setAssetLinks
+     */
+    setAssetLinks(links: Model.AlarmAssetLink[], options?: O): RestResponse<void>;
+    /**
+     * Returns one alarm when its realm is active and accessible to the authenticated user.
+     * HTTP GET /alarm/{alarmId}
+     * Java method: org.openremote.model.alarm.AlarmResource.getAlarm
+     */
+    getAlarm(alarmId: number, options?: O): RestResponse<Model.SentAlarm>;
+    /**
+     * Permanently removes one alarm after verifying access to its realm.
+     * HTTP DELETE /alarm/{alarmId}
+     * Java method: org.openremote.model.alarm.AlarmResource.removeAlarm
+     */
+    removeAlarm(alarmId: number, options?: O): RestResponse<void>;
+    /**
+     * Updates the mutable state of an existing alarm after verifying access to its current realm.
+     * HTTP PUT /alarm/{alarmId}
+     * Java method: org.openremote.model.alarm.AlarmResource.updateAlarm
+     */
+    updateAlarm(alarmId: number, alarm: Model.SentAlarm, options?: O): RestResponse<void>;
+    /**
+     * Returns links from the alarm to assets in the explicitly supplied accessible realm.
+     * HTTP GET /alarm/{alarmId}/assets
+     * Java method: org.openremote.model.alarm.AlarmResource.getAssetLinks
+     */
+    getAssetLinks(alarmId: number, queryParams?: {
+        realm?: string;
+    }, options?: O): RestResponse<Model.AlarmAssetLink[]>;
+}
+export declare class ProvisioningResourceClient<O> {
+    protected httpClient: HttpClient<O>;
+    constructor(httpClient: HttpClient<O>);
+    /**
+     * Persists a new provisioning configuration and returns its generated numeric identifier. This operation is restricted to a super administrator.
+     * HTTP POST /provisioning
+     * Java method: org.openremote.model.provisioning.ProvisioningResource.createProvisioningConfig
+     */
+    createProvisioningConfig(provisioningConfig: Model.ProvisioningConfigUnion<any, any>, options?: O): RestResponse<number>;
+    /**
+     * Returns every provisioning configuration. This operation is restricted to a super administrator.
+     * HTTP GET /provisioning
+     * Java method: org.openremote.model.provisioning.ProvisioningResource.getProvisioningConfigs
+     */
+    getProvisioningConfigs(options?: O): RestResponse<Model.ProvisioningConfigUnion<any, any>[]>;
+    /**
+     * Permanently removes the provisioning configuration identified by the path. This operation is restricted to a super administrator.
+     * HTTP DELETE /provisioning/{id}
+     * Java method: org.openremote.model.provisioning.ProvisioningResource.deleteProvisioningConfig
+     */
+    deleteProvisioningConfig(id: number, options?: O): RestResponse<void>;
+    /**
+     * Replaces the provisioning configuration identified by the path. This operation is restricted to a super administrator.
+     * HTTP PUT /provisioning/{id}
+     * Java method: org.openremote.model.provisioning.ProvisioningResource.updateProvisioningConfig
+     */
+    updateProvisioningConfig(id: number, provisioningConfig: Model.ProvisioningConfigUnion<any, any>, options?: O): RestResponse<void>;
+}
 export declare class ConfigurationResourceClient<O> {
     protected httpClient: HttpClient<O>;
     constructor(httpClient: HttpClient<O>);
@@ -552,211 +459,119 @@ export declare class ConfigurationResourceClient<O> {
      */
     getManagerConfigImage(filename: string, options?: O): RestResponse<any>;
 }
-export declare class ExternalServiceResourceClient<O> {
+export declare class AssetPredictedDatapointResourceClient<O> {
     protected httpClient: HttpClient<O>;
     constructor(httpClient: HttpClient<O>);
     /**
-     * Returns all active realm-scoped service registrations for an active realm accessible to the caller.
-     * Response code 200 - List of registered external services
-     * HTTP GET /service
-     * Java method: org.openremote.model.services.ExternalServiceResource.getServices
-     */
-    getServices(queryParams?: {
-        realm?: string;
-    }, options?: O): RestResponse<Model.ExternalService[]>;
-    /**
-     * Registers a realm-scoped service instance for the request realm. The caller must be a service account; the returned object contains the assigned instance ID and initial lease state.
-     * Response code 200 - Service registered successfully
-     * Response code 400 - Invalid external service object
-     * Response code 409 - ExternalService instance already registered
-     * HTTP POST /service
-     * Java method: org.openremote.model.services.ExternalServiceResource.registerService
-     */
-    registerService(service: Model.ExternalService, options?: O): RestResponse<Model.ExternalService>;
-    /**
-     * Returns active registrations marked as globally available across realms.
-     * Response code 200 - List of registered external services
-     * HTTP GET /service/global
-     * Java method: org.openremote.model.services.ExternalServiceResource.getGlobalServices
-     */
-    getGlobalServices(options?: O): RestResponse<Model.ExternalService[]>;
-    /**
-     * Registers a service visible in every realm. The caller must be a super-user service account and the request must use the master realm.
-     * Response code 200 - Service registered successfully
-     * Response code 400 - Invalid external service object
-     * Response code 409 - ExternalService instance already registered
-     * HTTP POST /service/global
-     * Java method: org.openremote.model.services.ExternalServiceResource.registerGlobalService
-     */
-    registerGlobalService(service: Model.ExternalService, options?: O): RestResponse<Model.ExternalService>;
-    /**
-     * Removes an active service registration. The caller must be the service account that registered it; global-service removal additionally requires a super user.
-     * Response code 204 - Service deregistered successfully
-     * Response code 404 - Service instance not found
-     * HTTP DELETE /service/{serviceId}/{instanceId}
-     * Java method: org.openremote.model.services.ExternalServiceResource.deregisterService
-     */
-    deregisterService(serviceId: string, instanceId: number, options?: O): RestResponse<void>;
-    /**
-     * Returns one registered instance by stable service ID and numeric instance ID, after verifying access to the service's realm.
-     * Response code 200 - ExternalService retrieved successfully
-     * Response code 404 - ExternalService not found
-     * HTTP GET /service/{serviceId}/{instanceId}
-     * Java method: org.openremote.model.services.ExternalServiceResource.getService
+     * Queries predicted values for one attribute using the supplied time-range and aggregation criteria. Anonymous access requires public-read access on both asset and attribute.
+     * HTTP POST /asset/predicted/{assetId}/{attributeName}
+     * Java method: org.openremote.model.datapoint.AssetPredictedDatapointResource.getPredictedDatapoints
      */
-    getService(serviceId: string, instanceId: number, options?: O): RestResponse<Model.ExternalService>;
+    getPredictedDatapoints(assetId: string, attributeName: string, query: Model.AssetDatapointQueryUnion, options?: O): RestResponse<Model.ValueDatapoint<any>[]>;
     /**
-     * Extends the lease of one service instance. The caller must be the service account that registered it; global-service heartbeats additionally require a super user.
-     * Response code 204 - Heartbeat sent successfully
-     * Response code 404 - Service instance not found
-     * HTTP PUT /service/{serviceId}/{instanceId}
-     * Java method: org.openremote.model.services.ExternalServiceResource.heartbeat
+     * Replaces or adds predicted values for one attribute. Anonymous access is allowed only when the asset and attribute are public-write; authenticated callers require attribute-write access.
+     * HTTP PUT /asset/predicted/{assetId}/{attributeName}
+     * Java method: org.openremote.model.datapoint.AssetPredictedDatapointResource.writePredictedDatapoints
      */
-    heartbeat(serviceId: string, instanceId: number, options?: O): RestResponse<void>;
+    writePredictedDatapoints(assetId: string, attributeName: string, predictedDatapoints: Model.ValueDatapoint<any>[], options?: O): RestResponse<void>;
 }
-export declare class MapResourceClient<O> {
+export declare class GatewayServiceResourceClient<O> {
     protected httpClient: HttpClient<O>;
     constructor(httpClient: HttpClient<O>);
     /**
-     * Returns realm-aware public MapLibre settings with externally reachable URLs derived from proxy headers.
-     * HTTP GET /map
-     * Java method: org.openremote.model.map.MapResource.getSettings
-     */
-    getSettings(options?: O): RestResponse<{
-        [id: string]: unknown;
-    }>;
-    /**
-     * Stores the map configuration and returns the resulting public MapLibre settings.
-     * HTTP PUT /map
-     * Java method: org.openremote.model.map.MapResource.saveSettings
-     */
-    saveSettings(mapConfig: Model.MapConfig, options?: O): RestResponse<{
-        [id: string]: unknown;
-    }>;
-    /**
-     * Deletes the installed custom MBTiles database and returns the fallback public map settings.
-     * HTTP DELETE /map/deleteMap
-     * Java method: org.openremote.model.map.MapResource.deleteMap
-     */
-    deleteMap(options?: O): RestResponse<{
-        [id: string]: unknown;
-    }>;
-    /**
-     * Reports whether custom MBTiles data is installed and the maximum accepted upload size.
-     * HTTP GET /map/getCustomMapInfo
-     * Java method: org.openremote.model.map.MapResource.getCustomMapInfo
-     */
-    getCustomMapInfo(options?: O): RestResponse<{
-        [id: string]: unknown;
-    }>;
-    /**
-     * Returns a pre-compressed Mapbox vector tile for the requested zoom, column, and row coordinates.
-     * Response code 200 - Gzip-compressed vector tile
-     * Response code 204 - No tile exists at the requested coordinates
-     * HTTP GET /map/tile/{zoom}/{column}/{row}
-     * Java method: org.openremote.model.map.MapResource.getTile
+     * Requests a TCP tunnel through a connected gateway and returns its allocated local endpoint. When realm is omitted, the authenticated realm is used.
+     * Response code 417 - The gateway could not establish the requested tunnel
+     * HTTP POST /gateway/tunnel
+     * Java method: org.openremote.model.gateway.GatewayServiceResource.startTunnel
      */
-    getTile(zoom: number, column: number, row: number, options?: O): RestResponse<any>;
+    startTunnel(tunnelInfo: Model.GatewayTunnelInfo, options?: O): RestResponse<Model.GatewayTunnelInfo>;
     /**
-     * Stores the raw request body as the realm's custom MBTiles database and returns the resulting public map settings.
-     * HTTP POST /map/upload
-     * Java method: org.openremote.model.map.MapResource.uploadMap
+     * Stops the tunnel identified by the supplied gateway, target, and port information. When realm is omitted, the authenticated realm is used.
+     * HTTP DELETE /gateway/tunnel
+     * Java method: org.openremote.model.gateway.GatewayServiceResource.stopTunnel
      */
-    uploadMap(queryParams?: {
-        filename?: string;
-    }, options?: O): RestResponse<{
-        [id: string]: unknown;
-    }>;
-}
-export declare class AssetDatapointResourceClient<O> {
-    protected httpClient: HttpClient<O>;
-    constructor(httpClient: HttpClient<O>);
+    stopTunnel(tunnelInfo: Model.GatewayTunnelInfo, options?: O): RestResponse<void>;
     /**
-     * Streams a ZIP archive containing exported datapoints for one or more attribute references over the requested inclusive time range. attributeRefs is a JSON-encoded array of objects with id and name fields.
-     * Response code 200 - A ZIP archive containing the exported data
-     * HTTP GET /asset/datapoint/export
-     * Java method: org.openremote.model.datapoint.AssetDatapointResource.getDatapointExport
+     * Returns active tunnels for all gateway assets in the requested realm. Restricted users cannot list an entire realm.
+     * HTTP GET /gateway/tunnel/{realm}
+     * Java method: org.openremote.model.gateway.GatewayServiceResource.getAllActiveTunnelInfos
      */
-    getDatapointExport(queryParams?: {
-        attributeRefs?: string;
-        fromTimestamp?: number;
-        toTimestamp?: number;
-        format?: Model.DatapointExportFormat;
-    }, options?: O): RestResponse<any>;
+    getAllActiveTunnelInfos(realm: string, options?: O): RestResponse<Model.GatewayTunnelInfo[]>;
     /**
-     * Returns the oldest and newest stored timestamps for one attribute. The asset and attribute must be readable by the authenticated user and configured for datapoint storage.
-     * HTTP GET /asset/datapoint/periods
-     * Java method: org.openremote.model.datapoint.AssetDatapointResource.getDatapointPeriod
+     * Returns active tunnels for one gateway asset. Restricted users may query only a linked gateway.
+     * HTTP GET /gateway/tunnel/{realm}/{id}
+     * Java method: org.openremote.model.gateway.GatewayServiceResource.getGatewayActiveTunnelInfos
      */
-    getDatapointPeriod(queryParams?: {
-        assetId?: string;
-        attributeName?: string;
-    }, options?: O): RestResponse<Model.DatapointPeriod>;
+    getGatewayActiveTunnelInfos(realm: string, id: string, options?: O): RestResponse<Model.GatewayTunnelInfo[]>;
     /**
-     * Returns stored historical values for one attribute. A null body returns the available series; a polymorphic query body controls the time range and retrieval or aggregation strategy. Anonymous access requires public-read access on both asset and attribute.
-     * HTTP POST /asset/datapoint/{assetId}/{attributeName}
-     * Java method: org.openremote.model.datapoint.AssetDatapointResource.getDatapoints
+     * Returns the tunnel matching realm, gateway, target host, and target port, or null when no active tunnel matches.
+     * Response code 204 - No active tunnel matches the requested endpoint
+     * HTTP GET /gateway/tunnel/{realm}/{id}/{target}/{targetPort}
+     * Java method: org.openremote.model.gateway.GatewayServiceResource.getActiveTunnelInfo
      */
-    getDatapoints(assetId: string, attributeName: string, query: Model.AssetDatapointQueryUnion, options?: O): RestResponse<Model.ValueDatapoint<any>[]>;
+    getActiveTunnelInfo(realm: string, id: string, target: string, targetPort: number, options?: O): RestResponse<Model.GatewayTunnelInfo>;
 }
-export declare class SyslogResourceClient<O> {
+export declare class ExternalServiceResourceClient<O> {
     protected httpClient: HttpClient<O>;
     constructor(httpClient: HttpClient<O>);
     /**
-     * Returns the current log-storage and retention configuration.
-     * HTTP GET /syslog/config
-     * Java method: org.openremote.model.syslog.SyslogResource.getConfig
+     * Returns all active realm-scoped service registrations for an active realm accessible to the caller.
+     * Response code 200 - List of registered external services
+     * HTTP GET /service
+     * Java method: org.openremote.model.services.ExternalServiceResource.getServices
      */
-    getConfig(options?: O): RestResponse<Model.SyslogConfig>;
+    getServices(queryParams?: {
+        realm?: string;
+    }, options?: O): RestResponse<Model.ExternalService[]>;
     /**
-     * Validates and applies log-storage and retention settings.
-     * HTTP PUT /syslog/config
-     * Java method: org.openremote.model.syslog.SyslogResource.updateConfig
+     * Registers a realm-scoped service instance for the request realm. The caller must be a service account; the returned object contains the assigned instance ID and initial lease state.
+     * Response code 200 - Service registered successfully
+     * Response code 400 - Invalid external service object
+     * Response code 409 - ExternalService instance already registered
+     * HTTP POST /service
+     * Java method: org.openremote.model.services.ExternalServiceResource.registerService
      */
-    updateConfig(config: Model.SyslogConfig, options?: O): RestResponse<void>;
+    registerService(service: Model.ExternalService, options?: O): RestResponse<Model.ExternalService>;
     /**
-     * Permanently removes all events from the configured syslog storage.
-     * HTTP DELETE /syslog/event
-     * Java method: org.openremote.model.syslog.SyslogResource.clearEvents
+     * Returns active registrations marked as globally available across realms.
+     * Response code 200 - List of registered external services
+     * HTTP GET /service/global
+     * Java method: org.openremote.model.services.ExternalServiceResource.getGlobalServices
      */
-    clearEvents(options?: O): RestResponse<void>;
+    getGlobalServices(options?: O): RestResponse<Model.ExternalService[]>;
     /**
-     * Returns a page of log events filtered by severity, Unix-millisecond time range, categories, and subcategories. RFC 8288 Link headers point to the next and last pages.
-     * Response code 200 - The requested page of syslog events
-     * HTTP GET /syslog/event
-     * Java method: org.openremote.model.syslog.SyslogResource.getEvents
+     * Registers a service visible in every realm. The caller must be a super-user service account and the request must use the master realm.
+     * Response code 200 - Service registered successfully
+     * Response code 400 - Invalid external service object
+     * Response code 409 - ExternalService instance already registered
+     * HTTP POST /service/global
+     * Java method: org.openremote.model.services.ExternalServiceResource.registerGlobalService
      */
-    getEvents(queryParams?: {
-        level?: Model.SyslogLevel;
-        per_page?: number;
-        page?: number;
-        from?: number;
-        to?: number;
-        category?: Model.SyslogCategory[];
-        subCategory?: string[];
-    }, options?: O): RestResponse<any>;
-}
-export declare class FlowResourceClient<O> {
-    protected httpClient: HttpClient<O>;
-    constructor(httpClient: HttpClient<O>);
+    registerGlobalService(service: Model.ExternalService, options?: O): RestResponse<Model.ExternalService>;
     /**
-     * Returns every supported flow node definition except the internal LOG_OUTPUT node.
-     * HTTP GET /flow
-     * Java method: org.openremote.model.rules.flow.FlowResource.getAllNodeDefinitions
+     * Removes an active service registration. The caller must be the service account that registered it; global-service removal additionally requires a super user.
+     * Response code 204 - Service deregistered successfully
+     * Response code 404 - Service instance not found
+     * HTTP DELETE /service/{serviceId}/{instanceId}
+     * Java method: org.openremote.model.services.ExternalServiceResource.deregisterService
      */
-    getAllNodeDefinitions(options?: O): RestResponse<Model.Node[]>;
+    deregisterService(serviceId: string, instanceId: number, options?: O): RestResponse<void>;
     /**
-     * Resolves one flow node definition by its model name.
-     * HTTP GET /flow/{name}
-     * Java method: org.openremote.model.rules.flow.FlowResource.getNodeDefinition
+     * Returns one registered instance by stable service ID and numeric instance ID, after verifying access to the service's realm.
+     * Response code 200 - ExternalService retrieved successfully
+     * Response code 404 - ExternalService not found
+     * HTTP GET /service/{serviceId}/{instanceId}
+     * Java method: org.openremote.model.services.ExternalServiceResource.getService
      */
-    getNodeDefinition(name: string, options?: O): RestResponse<Model.Node>;
+    getService(serviceId: string, instanceId: number, options?: O): RestResponse<Model.ExternalService>;
     /**
-     * Returns supported flow node definitions whose category matches the requested node type.
-     * HTTP GET /flow/{type}
-     * Java method: org.openremote.model.rules.flow.FlowResource.getAllNodeDefinitionsByType
+     * Extends the lease of one service instance. The caller must be the service account that registered it; global-service heartbeats additionally require a super user.
+     * Response code 204 - Heartbeat sent successfully
+     * Response code 404 - Service instance not found
+     * HTTP PUT /service/{serviceId}/{instanceId}
+     * Java method: org.openremote.model.services.ExternalServiceResource.heartbeat
      */
-    getAllNodeDefinitionsByType(type: Model.NodeType, options?: O): RestResponse<Model.Node[]>;
+    heartbeat(serviceId: string, instanceId: number, options?: O): RestResponse<void>;
 }
 export declare class NotificationResourceClient<O> {
     protected httpClient: HttpClient<O>;
@@ -817,155 +632,25 @@ export declare class NotificationResourceClient<O> {
     /**
      * Permanently removes one sent-notification record. This operation is restricted to a super user and is idempotent when the ID does not exist.
      * HTTP DELETE /notification/{notificationId}
-     * Java method: org.openremote.model.notification.NotificationResource.removeNotification
-     */
-    removeNotification(notificationId: number, options?: O): RestResponse<void>;
-    /**
-     * Marks one target's notification as acknowledged and stores the optional JSON acknowledgement value. Access rules are identical to notificationDelivered.
-     * HTTP PUT /notification/{notificationId}/acknowledged
-     * Java method: org.openremote.model.notification.NotificationResource.notificationAcknowledged
-     */
-    notificationAcknowledged(notificationId: number, acknowledgement: any, queryParams?: {
-        targetId?: string;
-    }, options?: O): RestResponse<void>;
-    /**
-     * Marks one target's notification as delivered after matching both notificationId and targetId. Anonymous callers may update notifications sent to a public asset; authenticated callers are constrained to their own user, realm, or accessible assets.
-     * HTTP PUT /notification/{notificationId}/delivered
-     * Java method: org.openremote.model.notification.NotificationResource.notificationDelivered
-     */
-    notificationDelivered(notificationId: number, queryParams?: {
-        targetId?: string;
-    }, options?: O): RestResponse<void>;
-}
-export declare class RulesResourceClient<O> {
-    protected httpClient: HttpClient<O>;
-    constructor(httpClient: HttpClient<O>);
-    /**
-     * Creates and deploys a global ruleset and returns its numeric ID. Super-user access is required; legacy JavaScript rulesets cannot be created.
-     * HTTP POST /rules
-     * Java method: org.openremote.model.rules.RulesResource.createGlobalRuleset
-     */
-    createGlobalRuleset(ruleset: Model.GlobalRuleset, options?: O): RestResponse<number>;
-    /**
-     * Returns global rulesets filtered by repeated language parameters. fullyPopulate controls whether rule source and other large fields are loaded; super-user access is required.
-     * HTTP GET /rules
-     * Java method: org.openremote.model.rules.RulesResource.getGlobalRulesets
-     */
-    getGlobalRulesets(queryParams?: {
-        language?: Model.RulesetLang[];
-        fullyPopulate?: boolean;
-    }, options?: O): RestResponse<Model.GlobalRuleset[]>;
-    /**
-     * Creates and deploys a ruleset for an accessible asset and returns its numeric ID. The assetId is taken from the request body.
-     * HTTP POST /rules/asset
-     * Java method: org.openremote.model.rules.RulesResource.createAssetRuleset
-     */
-    createAssetRuleset(ruleset: Model.AssetRuleset, options?: O): RestResponse<number>;
-    /**
-     * Returns asset rulesets filtered by language. Callers without full access receive public rulesets only; a nonexistent asset produces an empty array.
-     * HTTP GET /rules/asset/for/{assetId}
-     * Java method: org.openremote.model.rules.RulesResource.getAssetRulesets
-     */
-    getAssetRulesets(assetId: string, queryParams?: {
-        language?: Model.RulesetLang[];
-        fullyPopulate?: boolean;
-    }, options?: O): RestResponse<Model.AssetRuleset[]>;
-    /**
-     * Permanently removes and undeploys one ruleset from an accessible asset.
-     * HTTP DELETE /rules/asset/{id}
-     * Java method: org.openremote.model.rules.RulesResource.deleteAssetRuleset
-     */
-    deleteAssetRuleset(id: number, options?: O): RestResponse<void>;
-    /**
-     * Returns one fully populated asset ruleset when the caller can access its realm and owning asset.
-     * HTTP GET /rules/asset/{id}
-     * Java method: org.openremote.model.rules.RulesResource.getAssetRuleset
-     */
-    getAssetRuleset(id: number, options?: O): RestResponse<Model.AssetRuleset>;
-    /**
-     * Replaces and redeploys one asset ruleset. The ID must match and an existing ruleset cannot be reassigned to another asset.
-     * HTTP PUT /rules/asset/{id}
-     * Java method: org.openremote.model.rules.RulesResource.updateAssetRuleset
-     */
-    updateAssetRuleset(id: number, ruleset: Model.AssetRuleset, options?: O): RestResponse<void>;
-    /**
-     * Extracts geofence definitions relevant to the asset. Anonymous access requires a public-readable asset; authenticated restricted users require an asset link.
-     * HTTP GET /rules/geofences/{assetId}
-     * Java method: org.openremote.model.rules.RulesResource.getAssetGeofences
-     */
-    getAssetGeofences(assetId: string, options?: O): RestResponse<Model.GeofenceDefinition[]>;
-    /**
-     * Returns runtime status and error counts for an accessible asset engine. Returns null when the asset or its engine does not exist.
-     * Response code 204 - The asset or its rules engine does not exist
-     * HTTP GET /rules/info/asset/{assetId}
-     * Java method: org.openremote.model.rules.RulesResource.getAssetEngineInfo
-     */
-    getAssetEngineInfo(assetId: string, options?: O): RestResponse<Model.RulesEngineInfo>;
-    /**
-     * Returns runtime status and compilation/execution error counts for the global engine, or null when that engine is not running. Super-user access is required.
-     * Response code 204 - The global rules engine is not running
-     * HTTP GET /rules/info/global
-     * Java method: org.openremote.model.rules.RulesResource.getGlobalEngineInfo
-     */
-    getGlobalEngineInfo(options?: O): RestResponse<Model.RulesEngineInfo>;
-    /**
-     * Returns runtime status and error counts for an accessible realm engine, or null when that engine is not running. Restricted users cannot inspect realm engines.
-     * Response code 204 - The requested realm rules engine is not running
-     * HTTP GET /rules/info/realm/{realm}
-     * Java method: org.openremote.model.rules.RulesResource.getRealmEngineInfo
-     */
-    getRealmEngineInfo(realm: string, options?: O): RestResponse<Model.RulesEngineInfo>;
-    /**
-     * Creates and deploys a ruleset in its body realm and returns its numeric ID. Restricted users cannot create realm rulesets; legacy JavaScript is not accepted.
-     * HTTP POST /rules/realm
-     * Java method: org.openremote.model.rules.RulesResource.createRealmRuleset
-     */
-    createRealmRuleset(ruleset: Model.RealmRuleset, options?: O): RestResponse<number>;
-    /**
-     * Returns realm rulesets filtered by language. Anonymous, restricted, or callers without read-rules permission receive public rulesets only; fullyPopulate controls loading of rule source.
-     * HTTP GET /rules/realm/for/{realm}
-     * Java method: org.openremote.model.rules.RulesResource.getRealmRulesets
-     */
-    getRealmRulesets(realm: string, queryParams?: {
-        language?: Model.RulesetLang[];
-        fullyPopulate?: boolean;
-    }, options?: O): RestResponse<Model.RealmRuleset[]>;
-    /**
-     * Permanently removes and undeploys one ruleset from an accessible realm.
-     * HTTP DELETE /rules/realm/{id}
-     * Java method: org.openremote.model.rules.RulesResource.deleteRealmRuleset
-     */
-    deleteRealmRuleset(id: number, options?: O): RestResponse<void>;
-    /**
-     * Returns one fully populated realm ruleset when its realm is accessible to the caller.
-     * HTTP GET /rules/realm/{id}
-     * Java method: org.openremote.model.rules.RulesResource.getRealmRuleset
-     */
-    getRealmRuleset(id: number, options?: O): RestResponse<Model.RealmRuleset>;
-    /**
-     * Replaces and redeploys one realm ruleset. Path and body IDs and the existing realm must match; legacy JavaScript cannot be updated.
-     * HTTP PUT /rules/realm/{id}
-     * Java method: org.openremote.model.rules.RulesResource.updateRealmRuleset
-     */
-    updateRealmRuleset(id: number, ruleset: Model.RealmRuleset, options?: O): RestResponse<void>;
-    /**
-     * Permanently removes and undeploys one global ruleset. Super-user access is required.
-     * HTTP DELETE /rules/{id}
-     * Java method: org.openremote.model.rules.RulesResource.deleteGlobalRuleset
+     * Java method: org.openremote.model.notification.NotificationResource.removeNotification
      */
-    deleteGlobalRuleset(id: number, options?: O): RestResponse<void>;
+    removeNotification(notificationId: number, options?: O): RestResponse<void>;
     /**
-     * Returns one fully populated global ruleset including transient deployment status and errors. Super-user access is required.
-     * HTTP GET /rules/{id}
-     * Java method: org.openremote.model.rules.RulesResource.getGlobalRuleset
+     * Marks one target's notification as acknowledged and stores the optional JSON acknowledgement value. Access rules are identical to notificationDelivered.
+     * HTTP PUT /notification/{notificationId}/acknowledged
+     * Java method: org.openremote.model.notification.NotificationResource.notificationAcknowledged
      */
-    getGlobalRuleset(id: number, options?: O): RestResponse<Model.GlobalRuleset>;
+    notificationAcknowledged(notificationId: number, acknowledgement: any, queryParams?: {
+        targetId?: string;
+    }, options?: O): RestResponse<void>;
     /**
-     * Replaces and redeploys the identified global ruleset. Path and body IDs must match; legacy JavaScript rulesets cannot be updated.
-     * HTTP PUT /rules/{id}
-     * Java method: org.openremote.model.rules.RulesResource.updateGlobalRuleset
+     * Marks one target's notification as delivered after matching both notificationId and targetId. Anonymous callers may update notifications sent to a public asset; authenticated callers are constrained to their own user, realm, or accessible assets.
+     * HTTP PUT /notification/{notificationId}/delivered
+     * Java method: org.openremote.model.notification.NotificationResource.notificationDelivered
      */
-    updateGlobalRuleset(id: number, ruleset: Model.GlobalRuleset, options?: O): RestResponse<void>;
+    notificationDelivered(notificationId: number, queryParams?: {
+        targetId?: string;
+    }, options?: O): RestResponse<void>;
 }
 export declare class AssetModelResourceClient<O> {
     protected httpClient: HttpClient<O>;
@@ -1028,65 +713,257 @@ export declare class AssetModelResourceClient<O> {
         [index: string]: Model.ValueDescriptor;
     }>;
 }
-export declare class GatewayServiceResourceClient<O> {
+export declare class UserResourceClient<O> {
     protected httpClient: HttpClient<O>;
     constructor(httpClient: HttpClient<O>);
     /**
-     * Requests a TCP tunnel through a connected gateway and returns its allocated local endpoint. When realm is omitted, the authenticated realm is used.
-     * Response code 417 - The gateway could not establish the requested tunnel
-     * HTTP POST /gateway/tunnel
-     * Java method: org.openremote.model.gateway.GatewayServiceResource.startTunnel
+     * Stores the supplied non-empty locale string as the caller's identity-provider locale attribute. The target realm must be active unless the caller is a superuser.
+     * HTTP PUT /user/locale
+     * Java method: org.openremote.model.security.UserResource.updateCurrentUserLocale
      */
-    startTunnel(tunnelInfo: Model.GatewayTunnelInfo, options?: O): RestResponse<Model.GatewayTunnelInfo>;
+    updateCurrentUserLocale(locale: string, options?: O): RestResponse<void>;
     /**
-     * Stops the tunnel identified by the supplied gateway, target, and port information. When realm is omitted, the authenticated realm is used.
-     * HTTP DELETE /gateway/tunnel
-     * Java method: org.openremote.model.gateway.GatewayServiceResource.stopTunnel
+     * Executes a UserQuery. Non-super users are forced into their authenticated realm and cannot see system accounts; callers with read-users but not read-admin receive basic fields only. The target realm must be active unless the caller is a superuser.
+     * HTTP POST /user/query
+     * Java method: org.openremote.model.security.UserResource.query
      */
-    stopTunnel(tunnelInfo: Model.GatewayTunnelInfo, options?: O): RestResponse<void>;
+    query(query: Model.UserQuery, options?: O): RestResponse<Model.User[]>;
     /**
-     * Returns active tunnels for all gateway assets in the requested realm. Restricted users cannot list an entire realm.
-     * HTTP GET /gateway/tunnel/{realm}
-     * Java method: org.openremote.model.gateway.GatewayServiceResource.getAllActiveTunnelInfos
+     * Initiates the identity provider's configured password-reset action for the caller's own account. The target realm must be active unless the caller is a superuser.
+     * HTTP PUT /user/request-password-reset
+     * Java method: org.openremote.model.security.UserResource.requestPasswordResetCurrent
      */
-    getAllActiveTunnelInfos(realm: string, options?: O): RestResponse<Model.GatewayTunnelInfo[]>;
+    requestPasswordResetCurrent(options?: O): RestResponse<void>;
     /**
-     * Returns active tunnels for one gateway asset. Restricted users may query only a linked gateway.
-     * HTTP GET /gateway/tunnel/{realm}/{id}
-     * Java method: org.openremote.model.gateway.GatewayServiceResource.getGatewayActiveTunnelInfos
+     * Replaces the caller's own identity-provider credential using the supplied credential representation. The target realm must be active unless the caller is a superuser.
+     * HTTP PUT /user/reset-password
+     * Java method: org.openremote.model.security.UserResource.updatePasswordCurrent
      */
-    getGatewayActiveTunnelInfos(realm: string, id: string, options?: O): RestResponse<Model.GatewayTunnelInfo[]>;
+    updatePasswordCurrent(credential: Model.Credential, options?: O): RestResponse<void>;
+    /**
+     * Updates the caller's own profile. A supplied user ID must match the access token; role and realm administration are not provided by this endpoint. The target realm must be active unless the caller is a superuser.
+     * HTTP PUT /user/update
+     * Java method: org.openremote.model.security.UserResource.updateCurrent
+     */
+    updateCurrent(user: Model.User, options?: O): RestResponse<Model.User>;
+    /**
+     * Returns the identity-provider record corresponding to the current access token. The target realm must be active unless the caller is a superuser.
+     * HTTP GET /user/user
+     * Java method: org.openremote.model.security.UserResource.getCurrent
+     */
+    getCurrent(options?: O): RestResponse<Model.User>;
+    /**
+     * Returns realm-level role names assigned to the caller. The target realm must be active unless the caller is a superuser.
+     * HTTP GET /user/userRealmRoles
+     * Java method: org.openremote.model.security.UserResource.getCurrentUserRealmRoles
+     */
+    getCurrentUserRealmRoles(options?: O): RestResponse<string[]>;
+    /**
+     * Returns role names assigned to the caller for the named identity-provider client. The target realm must be active unless the caller is a superuser.
+     * HTTP GET /user/userRoles/{clientId}
+     * Java method: org.openremote.model.security.UserResource.getCurrentUserClientRoles
+     */
+    getCurrentUserClientRoles(clientId: string, options?: O): RestResponse<string[]>;
+    /**
+     * Terminates the active MQTT connection identified by sessionID. The realm must match the session owner's realm. Authenticated users may disconnect their own sessions without an additional client role. Disconnecting another user's session requires the openremote client role write:admin or superuser status. Non-superusers are limited to their own active realm; superusers may disconnect sessions across realms, including inactive realms.
+     * Response code 403 - The realm is inactive for a non-superuser, or the caller is neither the session owner, a user with write:admin, nor a superuser
+     * Response code 404 - The session or its owning user does not exist, or the session does not belong to the specified realm
+     * Response code 405 - A non-superuser cannot access the session owner's realm
+     * HTTP DELETE /user/{realm}/disconnect/{sessionID}
+     * Java method: org.openremote.model.security.UserResource.disconnectUserSession
+     */
+    disconnectUserSession(realm: string, sessionID: string, options?: O): RestResponse<void>;
+    /**
+     * Asks the identity provider to send or initiate its configured password-reset action for the specified user. The target realm must be active unless the caller is a superuser.
+     * Response code 405 - The caller cannot mutate a user in the requested realm
+     * HTTP PUT /user/{realm}/request-password-reset/{userId}
+     * Java method: org.openremote.model.security.UserResource.requestPasswordReset
+     */
+    requestPasswordReset(realm: string, userId: string, options?: O): RestResponse<void>;
+    /**
+     * Replaces a user's credential in an administered realm using the supplied credential representation. The target realm must be active unless the caller is a superuser.
+     * Response code 405 - The caller cannot mutate a user in the requested realm
+     * HTTP PUT /user/{realm}/reset-password/{userId}
+     * Java method: org.openremote.model.security.UserResource.updatePassword
+     */
+    updatePassword(realm: string, userId: string, credential: Model.Credential, options?: O): RestResponse<void>;
+    /**
+     * Generates and returns a new client secret for a service user in an administered realm. The target realm must be active unless the caller is a superuser.
+     * HTTP GET /user/{realm}/reset-secret/{userId}
+     * Java method: org.openremote.model.security.UserResource.resetSecret
+     */
+    resetSecret(realm: string, userId: string, options?: O): RestResponse<string>;
+    /**
+     * Creates, updates, or removes role definitions for the default OpenRemote client in the requested realm. The target realm must be active unless the caller is a superuser.
+     * HTTP PUT /user/{realm}/roles
+     * Java method: org.openremote.model.security.UserResource.updateRoles
+     */
+    updateRoles(realm: string, roles: Model.Role[], options?: O): RestResponse<void>;
+    /**
+     * Returns realm-level role names assigned to one user. Without read-admin permission, callers may retrieve only their own roles. The target realm must be active unless the caller is a superuser.
+     * HTTP GET /user/{realm}/userRealmRoles/{userId}
+     * Java method: org.openremote.model.security.UserResource.getUserRealmRoles
+     */
+    getUserRealmRoles(realm: string, userId: string, options?: O): RestResponse<string[]>;
+    /**
+     * Replaces the user's assigned realm-level role names in an administered realm. The target realm must be active unless the caller is a superuser.
+     * HTTP PUT /user/{realm}/userRealmRoles/{userId}
+     * Java method: org.openremote.model.security.UserResource.updateUserRealmRoles
+     */
+    updateUserRealmRoles(realm: string, userId: string, roles: string[], options?: O): RestResponse<void>;
+    /**
+     * Returns role names assigned to one user for the named client. Without read-admin permission, callers may retrieve only their own roles. The target realm must be active unless the caller is a superuser.
+     * HTTP GET /user/{realm}/userRoles/{userId}/{clientId}
+     * Java method: org.openremote.model.security.UserResource.getUserClientRoles
+     */
+    getUserClientRoles(realm: string, userId: string, clientId: string, options?: O): RestResponse<string[]>;
+    /**
+     * Replaces the user's assigned role names for the named client in an administered realm. The target realm must be active unless the caller is a superuser.
+     * HTTP PUT /user/{realm}/userRoles/{userId}/{clientId}
+     * Java method: org.openremote.model.security.UserResource.updateUserClientRoles
+     */
+    updateUserClientRoles(realm: string, userId: string, clientId: string, roles: string[], options?: O): RestResponse<void>;
+    /**
+     * Returns active MQTT sessions for one user, including connection ID, creation time, and remote address. Without read-admin permission, callers may inspect only themselves. The target realm must be active unless the caller is a superuser.
+     * HTTP GET /user/{realm}/userSessions/{userId}
+     * Java method: org.openremote.model.security.UserResource.getUserSessions
+     */
+    getUserSessions(realm: string, userId: string, options?: O): RestResponse<Model.UserSession[]>;
+    /**
+     * Creates an identity-provider user in a realm administered by the caller and returns the resulting user record. The target realm must be active unless the caller is a superuser.
+     * HTTP POST /user/{realm}/users
+     * Java method: org.openremote.model.security.UserResource.create
+     */
+    create(realm: string, user: Model.User, options?: O): RestResponse<Model.User>;
+    /**
+     * Updates an existing identity-provider user in an administered realm. The master administrator cannot be disabled. The target realm must be active unless the caller is a superuser.
+     * Response code 405 - The requested cross-realm or protected master-administrator mutation is not allowed
+     * HTTP PUT /user/{realm}/users
+     * Java method: org.openremote.model.security.UserResource.update
+     */
+    update(realm: string, user: Model.User, options?: O): RestResponse<Model.User>;
+    /**
+     * Permanently deletes a user from an administered realm. The master-realm administrator cannot be deleted. The target realm must be active unless the caller is a superuser.
+     * Response code 405 - The master-realm administrator cannot be deleted
+     * HTTP DELETE /user/{realm}/users/{userId}
+     * Java method: org.openremote.model.security.UserResource.delete
+     */
+    delete(realm: string, userId: string, options?: O): RestResponse<void>;
+    /**
+     * Returns all role definitions exposed by the named identity-provider client. Realm-administrator access is required. The target realm must be active unless the caller is a superuser.
+     * HTTP GET /user/{realm}/{clientId}/roles
+     * Java method: org.openremote.model.security.UserResource.getClientRoles
+     */
+    getClientRoles(realm: string, clientId: string, options?: O): RestResponse<Model.Role[]>;
+    /**
+     * Creates, updates, or removes role definitions for a named identity-provider client. The target realm must be active unless the caller is a superuser.
+     * HTTP PUT /user/{realm}/{clientId}/roles
+     * Java method: org.openremote.model.security.UserResource.updateClientRoles
+     */
+    updateClientRoles(realm: string, clientId: string, roles: Model.Role[], options?: O): RestResponse<void>;
+    /**
+     * Returns one user when it belongs to the requested accessible realm. Without read-admin permission, callers may retrieve only their own user. The target realm must be active unless the caller is a superuser.
+     * HTTP GET /user/{realm}/{userId}
+     * Java method: org.openremote.model.security.UserResource.get
+     */
+    get(realm: string, userId: string, options?: O): RestResponse<Model.User>;
+}
+export declare class MapResourceClient<O> {
+    protected httpClient: HttpClient<O>;
+    constructor(httpClient: HttpClient<O>);
+    /**
+     * Returns realm-aware public MapLibre settings with externally reachable URLs derived from proxy headers.
+     * HTTP GET /map
+     * Java method: org.openremote.model.map.MapResource.getSettings
+     */
+    getSettings(options?: O): RestResponse<{
+        [id: string]: unknown;
+    }>;
+    /**
+     * Stores the map configuration and returns the resulting public MapLibre settings.
+     * HTTP PUT /map
+     * Java method: org.openremote.model.map.MapResource.saveSettings
+     */
+    saveSettings(mapConfig: Model.MapConfig, options?: O): RestResponse<{
+        [id: string]: unknown;
+    }>;
+    /**
+     * Deletes the installed custom MBTiles database and returns the fallback public map settings.
+     * HTTP DELETE /map/deleteMap
+     * Java method: org.openremote.model.map.MapResource.deleteMap
+     */
+    deleteMap(options?: O): RestResponse<{
+        [id: string]: unknown;
+    }>;
+    /**
+     * Reports whether custom MBTiles data is installed and the maximum accepted upload size.
+     * HTTP GET /map/getCustomMapInfo
+     * Java method: org.openremote.model.map.MapResource.getCustomMapInfo
+     */
+    getCustomMapInfo(options?: O): RestResponse<{
+        [id: string]: unknown;
+    }>;
+    /**
+     * Returns a pre-compressed Mapbox vector tile for the requested zoom, column, and row coordinates.
+     * Response code 200 - Gzip-compressed vector tile
+     * Response code 204 - No tile exists at the requested coordinates
+     * HTTP GET /map/tile/{zoom}/{column}/{row}
+     * Java method: org.openremote.model.map.MapResource.getTile
+     */
+    getTile(zoom: number, column: number, row: number, options?: O): RestResponse<any>;
+    /**
+     * Stores the raw request body as the realm's custom MBTiles database and returns the resulting public map settings.
+     * HTTP POST /map/upload
+     * Java method: org.openremote.model.map.MapResource.uploadMap
+     */
+    uploadMap(queryParams?: {
+        filename?: string;
+    }, options?: O): RestResponse<{
+        [id: string]: unknown;
+    }>;
+}
+export declare class GatewayClientResourceClient<O> {
+    protected httpClient: HttpClient<O>;
+    constructor(httpClient: HttpClient<O>);
+    /**
+     * Removes connections for all repeated realm query parameters. Deleting multiple realms is restricted to super users.
+     * HTTP DELETE /gateway/connection
+     * Java method: org.openremote.model.gateway.GatewayClientResource.deleteConnections
+     */
+    deleteConnections(queryParams?: {
+        realm?: string[];
+    }, options?: O): RestResponse<void>;
+    /**
+     * Returns every configured central-manager connection. Unlike the single-realm endpoint, this operation is restricted to super users.
+     * HTTP GET /gateway/connection
+     * Java method: org.openremote.model.gateway.GatewayClientResource.getConnections
+     */
+    getConnections(options?: O): RestResponse<Model.GatewayConnection[]>;
     /**
-     * Returns the tunnel matching realm, gateway, target host, and target port, or null when no active tunnel matches.
-     * Response code 204 - No active tunnel matches the requested endpoint
-     * HTTP GET /gateway/tunnel/{realm}/{id}/{target}/{targetPort}
-     * Java method: org.openremote.model.gateway.GatewayServiceResource.getActiveTunnelInfo
+     * Removes the central-manager connection for one realm. Realm administrators can remove their own connection; super users can remove any connection.
+     * HTTP DELETE /gateway/connection/{realm}
+     * Java method: org.openremote.model.gateway.GatewayClientResource.deleteConnection
      */
-    getActiveTunnelInfo(realm: string, id: string, target: string, targetPort: number, options?: O): RestResponse<Model.GatewayTunnelInfo>;
-}
-export declare class AppResourceClient<O> {
-    protected httpClient: HttpClient<O>;
-    constructor(httpClient: HttpClient<O>);
+    deleteConnection(realm: string, options?: O): RestResponse<void>;
     /**
-     * Returns the identifiers of applications installed in the Manager web root.
-     * HTTP GET /apps
-     * Java method: org.openremote.model.apps.AppResource.getApps
+     * Returns the central-manager connection configured for a realm, or null when none exists. Realm administrators can read their own realm; super users can read any realm.
+     * Response code 204 - No gateway connection is configured for the realm
+     * HTTP GET /gateway/connection/{realm}
+     * Java method: org.openremote.model.gateway.GatewayClientResource.getConnection
      */
-    getApps(options?: O): RestResponse<string[]>;
+    getConnection(realm: string, options?: O): RestResponse<Model.GatewayConnection>;
     /**
-     * Loads the public console_config.json document used to configure console clients before sign-in.
-     * HTTP GET /apps/consoleConfig
-     * Java method: org.openremote.model.apps.AppResource.getConsoleConfig
+     * Creates or replaces the connection for the path realm. The server forces the local realm, including realm predicates in attribute filters, to match the path.
+     * HTTP PUT /gateway/connection/{realm}
+     * Java method: org.openremote.model.gateway.GatewayClientResource.setConnection
      */
-    getConsoleConfig(options?: O): RestResponse<any>;
+    setConnection(realm: string, connection: Model.GatewayConnection, options?: O): RestResponse<void>;
     /**
-     * Loads each installed application's info.json file and returns the documents keyed by application identifier.
-     * HTTP GET /apps/info
-     * Java method: org.openremote.model.apps.AppResource.getAppInfos
+     * Returns the live connection state for the requested local realm.
+     * HTTP GET /gateway/status/{realm}
+     * Java method: org.openremote.model.gateway.GatewayClientResource.getConnectionStatus
      */
-    getAppInfos(options?: O): RestResponse<{
-        [index: string]: any;
-    }>;
+    getConnectionStatus(realm: string, options?: O): RestResponse<Model.ConnectionStatus>;
 }
 export declare class RealmResourceClient<O> {
     protected httpClient: HttpClient<O>;
@@ -1131,6 +1008,70 @@ export declare class RealmResourceClient<O> {
      */
     update(name: string, realm: Model.Realm, options?: O): RestResponse<void>;
 }
+export declare class DashboardResourceClient<O> {
+    protected httpClient: HttpClient<O>;
+    constructor(httpClient: HttpClient<O>);
+    /**
+     * Creates a dashboard in an accessible realm. The server assigns the authenticated user as owner and initially stores the dashboard with shared access.
+     * HTTP POST /dashboard
+     * Java method: org.openremote.model.dashboard.DashboardResource.create
+     */
+    create(dashboard: Model.Dashboard, options?: O): RestResponse<Model.Dashboard>;
+    /**
+     * Updates an existing dashboard when the authenticated user can modify it in the dashboard's realm.
+     * HTTP PUT /dashboard
+     * Java method: org.openremote.model.dashboard.DashboardResource.update
+     */
+    update(dashboard: Model.Dashboard, options?: O): RestResponse<Model.Dashboard>;
+    /**
+     * Returns dashboards visible to the caller in the requested realm. Anonymous callers receive public dashboards only; authenticated access also depends on roles, ownership, and linked assets.
+     * HTTP GET /dashboard/all/{realm}
+     * Java method: org.openremote.model.dashboard.DashboardResource.getAllRealmDashboards
+     */
+    getAllRealmDashboards(realm: string, options?: O): RestResponse<Model.Dashboard[]>;
+    /**
+     * Executes a dashboard query after constraining it to the caller's realm, roles, ownership, and asset access. A missing body uses the request realm and default visibility rules.
+     * HTTP POST /dashboard/query
+     * Java method: org.openremote.model.dashboard.DashboardResource.query
+     */
+    query(dashboardQuery: Model.DashboardQuery, options?: O): RestResponse<Model.Dashboard[]>;
+    /**
+     * Permanently removes a dashboard when the authenticated user can modify it in the requested realm.
+     * HTTP DELETE /dashboard/{realm}/{dashboardId}
+     * Java method: org.openremote.model.dashboard.DashboardResource.delete
+     */
+    delete(realm: string, dashboardId: string, options?: O): RestResponse<void>;
+    /**
+     * Returns one dashboard only when it is visible to the caller. Inaccessible and nonexistent dashboards both return 404 to avoid disclosing their existence.
+     * HTTP GET /dashboard/{realm}/{dashboardId}
+     * Java method: org.openremote.model.dashboard.DashboardResource.get
+     */
+    get(realm: string, dashboardId: string, options?: O): RestResponse<Model.Dashboard>;
+}
+export declare class AppResourceClient<O> {
+    protected httpClient: HttpClient<O>;
+    constructor(httpClient: HttpClient<O>);
+    /**
+     * Returns the identifiers of applications installed in the Manager web root.
+     * HTTP GET /apps
+     * Java method: org.openremote.model.apps.AppResource.getApps
+     */
+    getApps(options?: O): RestResponse<string[]>;
+    /**
+     * Loads the public console_config.json document used to configure console clients before sign-in.
+     * HTTP GET /apps/consoleConfig
+     * Java method: org.openremote.model.apps.AppResource.getConsoleConfig
+     */
+    getConsoleConfig(options?: O): RestResponse<any>;
+    /**
+     * Loads each installed application's info.json file and returns the documents keyed by application identifier.
+     * HTTP GET /apps/info
+     * Java method: org.openremote.model.apps.AppResource.getAppInfos
+     */
+    getAppInfos(options?: O): RestResponse<{
+        [index: string]: any;
+    }>;
+}
 export declare class AgentResourceClient<O> {
     protected httpClient: HttpClient<O>;
     constructor(httpClient: HttpClient<O>);
@@ -1162,6 +1103,65 @@ export declare class AgentResourceClient<O> {
         realm?: string;
     }, options?: O): RestResponse<Model.Agent[]>;
 }
+export declare class SyslogResourceClient<O> {
+    protected httpClient: HttpClient<O>;
+    constructor(httpClient: HttpClient<O>);
+    /**
+     * Returns the current log-storage and retention configuration.
+     * HTTP GET /syslog/config
+     * Java method: org.openremote.model.syslog.SyslogResource.getConfig
+     */
+    getConfig(options?: O): RestResponse<Model.SyslogConfig>;
+    /**
+     * Validates and applies log-storage and retention settings.
+     * HTTP PUT /syslog/config
+     * Java method: org.openremote.model.syslog.SyslogResource.updateConfig
+     */
+    updateConfig(config: Model.SyslogConfig, options?: O): RestResponse<void>;
+    /**
+     * Permanently removes all events from the configured syslog storage.
+     * HTTP DELETE /syslog/event
+     * Java method: org.openremote.model.syslog.SyslogResource.clearEvents
+     */
+    clearEvents(options?: O): RestResponse<void>;
+    /**
+     * Returns a page of log events filtered by severity, Unix-millisecond time range, categories, and subcategories. RFC 8288 Link headers point to the next and last pages.
+     * Response code 200 - The requested page of syslog events
+     * HTTP GET /syslog/event
+     * Java method: org.openremote.model.syslog.SyslogResource.getEvents
+     */
+    getEvents(queryParams?: {
+        level?: Model.SyslogLevel;
+        per_page?: number;
+        page?: number;
+        from?: number;
+        to?: number;
+        category?: Model.SyslogCategory[];
+        subCategory?: string[];
+    }, options?: O): RestResponse<any>;
+}
+export declare class FlowResourceClient<O> {
+    protected httpClient: HttpClient<O>;
+    constructor(httpClient: HttpClient<O>);
+    /**
+     * Returns every supported flow node definition except the internal LOG_OUTPUT node.
+     * HTTP GET /flow
+     * Java method: org.openremote.model.rules.flow.FlowResource.getAllNodeDefinitions
+     */
+    getAllNodeDefinitions(options?: O): RestResponse<Model.Node[]>;
+    /**
+     * Resolves one flow node definition by its model name.
+     * HTTP GET /flow/{name}
+     * Java method: org.openremote.model.rules.flow.FlowResource.getNodeDefinition
+     */
+    getNodeDefinition(name: string, options?: O): RestResponse<Model.Node>;
+    /**
+     * Returns supported flow node definitions whose category matches the requested node type.
+     * HTTP GET /flow/{type}
+     * Java method: org.openremote.model.rules.flow.FlowResource.getAllNodeDefinitionsByType
+     */
+    getAllNodeDefinitionsByType(type: Model.NodeType, options?: O): RestResponse<Model.Node[]>;
+}
 export declare class ConsoleResourceClient<O> {
     protected httpClient: HttpClient<O>;
     constructor(httpClient: HttpClient<O>);
@@ -1174,50 +1174,50 @@ export declare class ConsoleResourceClient<O> {
 }
 export type RestResponse<R> = Promise<Axios.GenericAxiosResponse<R>>;
 export declare class ApiClient {
+    protected _rulesResource: AxiosRulesResourceClient;
+    protected _assetDatapointResource: AxiosAssetDatapointResourceClient;
+    protected _assetResource: AxiosAssetResourceClient;
     protected _statusResource: AxiosStatusResourceClient;
-    protected _userResource: AxiosUserResourceClient;
-    protected _provisioningResource: AxiosProvisioningResourceClient;
-    protected _assetPredictedDatapointResource: AxiosAssetPredictedDatapointResourceClient;
-    protected _dashboardResource: AxiosDashboardResourceClient;
     protected _alarmResource: AxiosAlarmResourceClient;
-    protected _gatewayClientResource: AxiosGatewayClientResourceClient;
-    protected _assetResource: AxiosAssetResourceClient;
+    protected _provisioningResource: AxiosProvisioningResourceClient;
     protected _configurationResource: AxiosConfigurationResourceClient;
+    protected _assetPredictedDatapointResource: AxiosAssetPredictedDatapointResourceClient;
+    protected _gatewayServiceResource: AxiosGatewayServiceResourceClient;
     protected _externalServiceResource: AxiosExternalServiceResourceClient;
-    protected _mapResource: AxiosMapResourceClient;
-    protected _assetDatapointResource: AxiosAssetDatapointResourceClient;
-    protected _syslogResource: AxiosSyslogResourceClient;
-    protected _flowResource: AxiosFlowResourceClient;
     protected _notificationResource: AxiosNotificationResourceClient;
-    protected _rulesResource: AxiosRulesResourceClient;
     protected _assetModelResource: AxiosAssetModelResourceClient;
-    protected _gatewayServiceResource: AxiosGatewayServiceResourceClient;
-    protected _appResource: AxiosAppResourceClient;
+    protected _userResource: AxiosUserResourceClient;
+    protected _mapResource: AxiosMapResourceClient;
+    protected _gatewayClientResource: AxiosGatewayClientResourceClient;
     protected _realmResource: AxiosRealmResourceClient;
+    protected _dashboardResource: AxiosDashboardResourceClient;
+    protected _appResource: AxiosAppResourceClient;
     protected _agentResource: AxiosAgentResourceClient;
+    protected _syslogResource: AxiosSyslogResourceClient;
+    protected _flowResource: AxiosFlowResourceClient;
     protected _consoleResource: AxiosConsoleResourceClient;
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
+    get RulesResource(): AxiosRulesResourceClient;
+    get AssetDatapointResource(): AxiosAssetDatapointResourceClient;
+    get AssetResource(): AxiosAssetResourceClient;
     get StatusResource(): AxiosStatusResourceClient;
-    get UserResource(): AxiosUserResourceClient;
-    get ProvisioningResource(): AxiosProvisioningResourceClient;
-    get AssetPredictedDatapointResource(): AxiosAssetPredictedDatapointResourceClient;
-    get DashboardResource(): AxiosDashboardResourceClient;
     get AlarmResource(): AxiosAlarmResourceClient;
-    get GatewayClientResource(): AxiosGatewayClientResourceClient;
-    get AssetResource(): AxiosAssetResourceClient;
+    get ProvisioningResource(): AxiosProvisioningResourceClient;
     get ConfigurationResource(): AxiosConfigurationResourceClient;
+    get AssetPredictedDatapointResource(): AxiosAssetPredictedDatapointResourceClient;
+    get GatewayServiceResource(): AxiosGatewayServiceResourceClient;
     get ExternalServiceResource(): AxiosExternalServiceResourceClient;
-    get MapResource(): AxiosMapResourceClient;
-    get AssetDatapointResource(): AxiosAssetDatapointResourceClient;
-    get SyslogResource(): AxiosSyslogResourceClient;
-    get FlowResource(): AxiosFlowResourceClient;
     get NotificationResource(): AxiosNotificationResourceClient;
-    get RulesResource(): AxiosRulesResourceClient;
     get AssetModelResource(): AxiosAssetModelResourceClient;
-    get GatewayServiceResource(): AxiosGatewayServiceResourceClient;
-    get AppResource(): AxiosAppResourceClient;
+    get UserResource(): AxiosUserResourceClient;
+    get MapResource(): AxiosMapResourceClient;
+    get GatewayClientResource(): AxiosGatewayClientResourceClient;
     get RealmResource(): AxiosRealmResourceClient;
+    get DashboardResource(): AxiosDashboardResourceClient;
+    get AppResource(): AxiosAppResourceClient;
     get AgentResource(): AxiosAgentResourceClient;
+    get SyslogResource(): AxiosSyslogResourceClient;
+    get FlowResource(): AxiosFlowResourceClient;
     get ConsoleResource(): AxiosConsoleResourceClient;
 }
 import * as Axios from "axios";
@@ -1226,67 +1226,67 @@ declare module "axios" {
         data: R;
     }
 }
-export declare class AxiosStatusResourceClient extends StatusResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosRulesResourceClient extends RulesResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosUserResourceClient extends UserResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosAssetDatapointResourceClient extends AssetDatapointResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosProvisioningResourceClient extends ProvisioningResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosAssetResourceClient extends AssetResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosAssetPredictedDatapointResourceClient extends AssetPredictedDatapointResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosStatusResourceClient extends StatusResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosDashboardResourceClient extends DashboardResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosAlarmResourceClient extends AlarmResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosAlarmResourceClient extends AlarmResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosProvisioningResourceClient extends ProvisioningResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosGatewayClientResourceClient extends GatewayClientResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosConfigurationResourceClient extends ConfigurationResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosAssetResourceClient extends AssetResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosAssetPredictedDatapointResourceClient extends AssetPredictedDatapointResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosConfigurationResourceClient extends ConfigurationResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosGatewayServiceResourceClient extends GatewayServiceResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
 export declare class AxiosExternalServiceResourceClient extends ExternalServiceResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosMapResourceClient extends MapResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosNotificationResourceClient extends NotificationResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosAssetDatapointResourceClient extends AssetDatapointResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosAssetModelResourceClient extends AssetModelResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosSyslogResourceClient extends SyslogResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosUserResourceClient extends UserResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosFlowResourceClient extends FlowResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosMapResourceClient extends MapResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosNotificationResourceClient extends NotificationResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosGatewayClientResourceClient extends GatewayClientResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosRulesResourceClient extends RulesResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosRealmResourceClient extends RealmResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosAssetModelResourceClient extends AssetModelResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosDashboardResourceClient extends DashboardResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosGatewayServiceResourceClient extends GatewayServiceResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosAppResourceClient extends AppResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosAppResourceClient extends AppResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosAgentResourceClient extends AgentResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosRealmResourceClient extends RealmResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosSyslogResourceClient extends SyslogResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosAgentResourceClient extends AgentResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosFlowResourceClient extends FlowResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
 export declare class AxiosConsoleResourceClient extends ConsoleResourceClient<Axios.AxiosRequestConfig> {