@openremote/rest 1.33.0 → 1.34.0-snapshot.20261027143700

package/build/lib/restclient.d.ts

@@ -9,102 +9,194 @@ export interface HttpClient<O> {
         options?: O;
     }): RestResponse<R>;
 }
-export declare class GatewayServiceResourceClient<O> {
+export declare class FlowResourceClient<O> {
     protected httpClient: HttpClient<O>;
     constructor(httpClient: HttpClient<O>);
     /**
-     * Requests a TCP tunnel through a connected gateway and returns its allocated local endpoint. When realm is omitted, the authenticated realm is used.
-     * Response code 417 - The gateway could not establish the requested tunnel
-     * HTTP POST /gateway/tunnel
-     * Java method: org.openremote.model.gateway.GatewayServiceResource.startTunnel
+     * Returns every supported flow node definition except the internal LOG_OUTPUT node.
+     * HTTP GET /flow
+     * Java method: org.openremote.model.rules.flow.FlowResource.getAllNodeDefinitions
      */
-    startTunnel(tunnelInfo: Model.GatewayTunnelInfo, options?: O): RestResponse<Model.GatewayTunnelInfo>;
+    getAllNodeDefinitions(options?: O): RestResponse<Model.Node[]>;
     /**
-     * Stops the tunnel identified by the supplied gateway, target, and port information. When realm is omitted, the authenticated realm is used.
-     * HTTP DELETE /gateway/tunnel
-     * Java method: org.openremote.model.gateway.GatewayServiceResource.stopTunnel
+     * Resolves one flow node definition by its model name.
+     * HTTP GET /flow/{name}
+     * Java method: org.openremote.model.rules.flow.FlowResource.getNodeDefinition
      */
-    stopTunnel(tunnelInfo: Model.GatewayTunnelInfo, options?: O): RestResponse<void>;
+    getNodeDefinition(name: string, options?: O): RestResponse<Model.Node>;
     /**
-     * Returns active tunnels for all gateway assets in the requested realm. Restricted users cannot list an entire realm.
-     * HTTP GET /gateway/tunnel/{realm}
-     * Java method: org.openremote.model.gateway.GatewayServiceResource.getAllActiveTunnelInfos
+     * Returns supported flow node definitions whose category matches the requested node type.
+     * HTTP GET /flow/{type}
+     * Java method: org.openremote.model.rules.flow.FlowResource.getAllNodeDefinitionsByType
      */
-    getAllActiveTunnelInfos(realm: string, options?: O): RestResponse<Model.GatewayTunnelInfo[]>;
+    getAllNodeDefinitionsByType(type: Model.NodeType, options?: O): RestResponse<Model.Node[]>;
+}
+export declare class SyslogResourceClient<O> {
+    protected httpClient: HttpClient<O>;
+    constructor(httpClient: HttpClient<O>);
     /**
-     * Returns active tunnels for one gateway asset. Restricted users may query only a linked gateway.
-     * HTTP GET /gateway/tunnel/{realm}/{id}
-     * Java method: org.openremote.model.gateway.GatewayServiceResource.getGatewayActiveTunnelInfos
+     * Returns the current log-storage and retention configuration. This operation is restricted to a super administrator.
+     * HTTP GET /syslog/config
+     * Java method: org.openremote.model.syslog.SyslogResource.getConfig
      */
-    getGatewayActiveTunnelInfos(realm: string, id: string, options?: O): RestResponse<Model.GatewayTunnelInfo[]>;
+    getConfig(options?: O): RestResponse<Model.SyslogConfig>;
     /**
-     * Returns the tunnel matching realm, gateway, target host, and target port, or null when no active tunnel matches.
-     * Response code 204 - No active tunnel matches the requested endpoint
-     * HTTP GET /gateway/tunnel/{realm}/{id}/{target}/{targetPort}
-     * Java method: org.openremote.model.gateway.GatewayServiceResource.getActiveTunnelInfo
+     * Validates and applies log-storage and retention settings. This operation is restricted to a super administrator.
+     * HTTP PUT /syslog/config
+     * Java method: org.openremote.model.syslog.SyslogResource.updateConfig
      */
-    getActiveTunnelInfo(realm: string, id: string, target: string, targetPort: number, options?: O): RestResponse<Model.GatewayTunnelInfo>;
+    updateConfig(config: Model.SyslogConfig, options?: O): RestResponse<void>;
+    /**
+     * Permanently removes all events from the configured syslog storage. This operation is restricted to a super administrator.
+     * HTTP DELETE /syslog/event
+     * Java method: org.openremote.model.syslog.SyslogResource.clearEvents
+     */
+    clearEvents(options?: O): RestResponse<void>;
+    /**
+     * Returns a page of log events filtered by severity, Unix-millisecond time range, categories, and subcategories. RFC 8288 Link headers point to the next and last pages.
+     * Response code 200 - The requested page of syslog events
+     * HTTP GET /syslog/event
+     * Java method: org.openremote.model.syslog.SyslogResource.getEvents
+     */
+    getEvents(queryParams?: {
+        level?: Model.SyslogLevel;
+        per_page?: number;
+        page?: number;
+        from?: number;
+        to?: number;
+        category?: Model.SyslogCategory[];
+        subCategory?: string[];
+    }, options?: O): RestResponse<any>;
 }
-export declare class AssetModelResourceClient<O> {
+export declare class ProvisioningResourceClient<O> {
     protected httpClient: HttpClient<O>;
     constructor(httpClient: HttpClient<O>);
     /**
-     * Returns the descriptors used to construct supported asset types, using a gateway model when the optional parent context resolves below a gateway.
-     * HTTP GET /model/assetDescriptors
-     * Java method: org.openremote.model.asset.AssetModelResource.getAssetDescriptors
+     * Persists a new provisioning configuration and returns its generated numeric identifier. This operation is restricted to a super administrator.
+     * HTTP POST /provisioning
+     * Java method: org.openremote.model.provisioning.ProvisioningResource.createProvisioningConfig
      */
-    getAssetDescriptors(queryParams?: {
-        parentId?: string;
-        parentType?: string;
-    }, options?: O): RestResponse<Model.AssetDescriptor[]>;
+    createProvisioningConfig(provisioningConfig: Model.ProvisioningConfigUnion<any, any>, options?: O): RestResponse<number>;
     /**
-     * Returns metadata for one asset type from this Manager or, when parentId is below a gateway, from that gateway's model. An unknown or gateway-provided type that is not locally available returns no content.
-     * Response code 204 - No model information is available for the requested asset type
-     * HTTP GET /model/assetInfo/{assetType}
-     * Java method: org.openremote.model.asset.AssetModelResource.getAssetInfo
+     * Returns every provisioning configuration. This operation is restricted to a super administrator.
+     * HTTP GET /provisioning
+     * Java method: org.openremote.model.provisioning.ProvisioningResource.getProvisioningConfigs
      */
-    getAssetInfo(assetType: string, queryParams?: {
-        parentId?: string;
-    }, options?: O): RestResponse<Model.AssetTypeInfo>;
+    getProvisioningConfigs(options?: O): RestResponse<Model.ProvisioningConfigUnion<any, any>[]>;
     /**
-     * Returns type metadata from this Manager by default. When parentId identifies an asset below a gateway, the gateway's model is used instead; parentType can provide type context for a new parent that does not yet exist.
-     * HTTP GET /model/assetInfos
-     * Java method: org.openremote.model.asset.AssetModelResource.getAssetInfos
+     * Permanently removes the provisioning configuration identified by the path. This operation is restricted to a super administrator.
+     * HTTP DELETE /provisioning/{id}
+     * Java method: org.openremote.model.provisioning.ProvisioningResource.deleteProvisioningConfig
      */
-    getAssetInfos(queryParams?: {
-        parentId?: string;
-        parentType?: string;
-    }, options?: O): RestResponse<Model.AssetTypeInfo[]>;
+    deleteProvisioningConfig(id: number, options?: O): RestResponse<void>;
     /**
-     * Returns the JSON Schema and a weak ETag for the named value descriptor. Send If-None-Match on later requests to receive 304 when the schema has not changed.
-     * Response code 200 - The current JSON Schema
-     * Response code 304 - The supplied ETag still identifies the current schema
-     * HTTP GET /model/getValueDescriptorSchema
-     * Java method: org.openremote.model.asset.AssetModelResource.getValueDescriptorSchema
+     * Replaces the provisioning configuration identified by the path. This operation is restricted to a super administrator.
+     * HTTP PUT /provisioning/{id}
+     * Java method: org.openremote.model.provisioning.ProvisioningResource.updateProvisioningConfig
      */
-    getValueDescriptorSchema(queryParams?: {
-        name?: string;
-    }, options?: O): RestResponse<any>;
+    updateProvisioningConfig(id: number, provisioningConfig: Model.ProvisioningConfigUnion<any, any>, options?: O): RestResponse<void>;
+}
+export declare class DashboardResourceClient<O> {
+    protected httpClient: HttpClient<O>;
+    constructor(httpClient: HttpClient<O>);
     /**
-     * Returns attribute metadata descriptors keyed by descriptor name, using a gateway model when parentId resolves below a gateway.
-     * HTTP GET /model/metaItemDescriptors
-     * Java method: org.openremote.model.asset.AssetModelResource.getMetaItemDescriptors
+     * Creates a dashboard in an accessible realm. The server assigns the authenticated user as owner and initially stores the dashboard with shared access.
+     * HTTP POST /dashboard
+     * Java method: org.openremote.model.dashboard.DashboardResource.create
      */
-    getMetaItemDescriptors(queryParams?: {
-        parentId?: string;
-    }, options?: O): RestResponse<{
-        [index: string]: Model.MetaItemDescriptor;
-    }>;
+    create(dashboard: Model.Dashboard, options?: O): RestResponse<Model.Dashboard>;
     /**
-     * Returns attribute value descriptors keyed by descriptor name, using a gateway model when parentId resolves below a gateway.
-     * HTTP GET /model/valueDescriptors
-     * Java method: org.openremote.model.asset.AssetModelResource.getValueDescriptors
+     * Updates an existing dashboard when the authenticated user can modify it in the dashboard's realm.
+     * HTTP PUT /dashboard
+     * Java method: org.openremote.model.dashboard.DashboardResource.update
      */
-    getValueDescriptors(queryParams?: {
-        parentId?: string;
-    }, options?: O): RestResponse<{
-        [index: string]: Model.ValueDescriptor;
-    }>;
+    update(dashboard: Model.Dashboard, options?: O): RestResponse<Model.Dashboard>;
+    /**
+     * Returns dashboards visible to the caller in the requested realm. Anonymous callers receive public dashboards only; authenticated access also depends on roles, ownership, and linked assets.
+     * HTTP GET /dashboard/all/{realm}
+     * Java method: org.openremote.model.dashboard.DashboardResource.getAllRealmDashboards
+     */
+    getAllRealmDashboards(realm: string, options?: O): RestResponse<Model.Dashboard[]>;
+    /**
+     * Executes a dashboard query after constraining it to the caller's realm, roles, ownership, and asset access. A missing body uses the request realm and default visibility rules.
+     * HTTP POST /dashboard/query
+     * Java method: org.openremote.model.dashboard.DashboardResource.query
+     */
+    query(dashboardQuery: Model.DashboardQuery, options?: O): RestResponse<Model.Dashboard[]>;
+    /**
+     * Permanently removes a dashboard when the authenticated user can modify it in the requested realm.
+     * HTTP DELETE /dashboard/{realm}/{dashboardId}
+     * Java method: org.openremote.model.dashboard.DashboardResource.delete
+     */
+    delete(realm: string, dashboardId: string, options?: O): RestResponse<void>;
+    /**
+     * Returns one dashboard only when it is visible to the caller. Inaccessible and nonexistent dashboards both return 404 to avoid disclosing their existence.
+     * HTTP GET /dashboard/{realm}/{dashboardId}
+     * Java method: org.openremote.model.dashboard.DashboardResource.get
+     */
+    get(realm: string, dashboardId: string, options?: O): RestResponse<Model.Dashboard>;
+}
+export declare class ExternalServiceResourceClient<O> {
+    protected httpClient: HttpClient<O>;
+    constructor(httpClient: HttpClient<O>);
+    /**
+     * Returns all active realm-scoped service registrations for an active realm accessible to the caller.
+     * Response code 200 - List of registered external services
+     * HTTP GET /service
+     * Java method: org.openremote.model.services.ExternalServiceResource.getServices
+     */
+    getServices(queryParams?: {
+        realm?: string;
+    }, options?: O): RestResponse<Model.ExternalService[]>;
+    /**
+     * Registers a realm-scoped service instance for the request realm. The caller must be a service account; the returned object contains the assigned instance ID and initial lease state.
+     * Response code 200 - Service registered successfully
+     * Response code 400 - Invalid external service object
+     * Response code 409 - ExternalService instance already registered
+     * HTTP POST /service
+     * Java method: org.openremote.model.services.ExternalServiceResource.registerService
+     */
+    registerService(service: Model.ExternalService, options?: O): RestResponse<Model.ExternalService>;
+    /**
+     * Returns active registrations marked as globally available across realms.
+     * Response code 200 - List of registered external services
+     * HTTP GET /service/global
+     * Java method: org.openremote.model.services.ExternalServiceResource.getGlobalServices
+     */
+    getGlobalServices(options?: O): RestResponse<Model.ExternalService[]>;
+    /**
+     * Registers a service visible in every realm. The caller must be a super-user service account and the request must use the master realm.
+     * Response code 200 - Service registered successfully
+     * Response code 400 - Invalid external service object
+     * Response code 409 - ExternalService instance already registered
+     * HTTP POST /service/global
+     * Java method: org.openremote.model.services.ExternalServiceResource.registerGlobalService
+     */
+    registerGlobalService(service: Model.ExternalService, options?: O): RestResponse<Model.ExternalService>;
+    /**
+     * Removes an active service registration. The caller must be the service account that registered it; global-service removal additionally requires a super user.
+     * Response code 204 - Service deregistered successfully
+     * Response code 404 - Service instance not found
+     * HTTP DELETE /service/{serviceId}/{instanceId}
+     * Java method: org.openremote.model.services.ExternalServiceResource.deregisterService
+     */
+    deregisterService(serviceId: string, instanceId: number, options?: O): RestResponse<void>;
+    /**
+     * Returns one registered instance by stable service ID and numeric instance ID, after verifying access to the service's realm.
+     * Response code 200 - ExternalService retrieved successfully
+     * Response code 404 - ExternalService not found
+     * HTTP GET /service/{serviceId}/{instanceId}
+     * Java method: org.openremote.model.services.ExternalServiceResource.getService
+     */
+    getService(serviceId: string, instanceId: number, options?: O): RestResponse<Model.ExternalService>;
+    /**
+     * Extends the lease of one service instance. The caller must be the service account that registered it; global-service heartbeats additionally require a super user.
+     * Response code 204 - Heartbeat sent successfully
+     * Response code 404 - Service instance not found
+     * HTTP PUT /service/{serviceId}/{instanceId}
+     * Java method: org.openremote.model.services.ExternalServiceResource.heartbeat
+     */
+    heartbeat(serviceId: string, instanceId: number, options?: O): RestResponse<void>;
 }
 export declare class GatewayClientResourceClient<O> {
     protected httpClient: HttpClient<O>;
@@ -149,439 +241,459 @@ export declare class GatewayClientResourceClient<O> {
      */
     getConnectionStatus(realm: string, options?: O): RestResponse<Model.ConnectionStatus>;
 }
-export declare class RulesResourceClient<O> {
+export declare class AssetResourceClient<O> {
     protected httpClient: HttpClient<O>;
     constructor(httpClient: HttpClient<O>);
     /**
-     * Creates and deploys a global ruleset and returns its numeric ID. Super-user access is required; legacy JavaScript rulesets cannot be created.
-     * HTTP POST /rules
-     * Java method: org.openremote.model.rules.RulesResource.createGlobalRuleset
+     * Creates an asset in an accessible realm and returns the persisted representation. The server generates an ID when absent; supplied IDs must be globally unique and 22 characters long.
+     * HTTP POST /asset
+     * Java method: org.openremote.model.asset.AssetResource.create
      */
-    createGlobalRuleset(ruleset: Model.GlobalRuleset, options?: O): RestResponse<number>;
+    create(asset: Model.Asset, options?: O): RestResponse<Model.Asset>;
     /**
-     * Returns global rulesets filtered by repeated language parameters. fullyPopulate controls whether rule source and other large fields are loaded; super-user access is required.
-     * HTTP GET /rules
-     * Java method: org.openremote.model.rules.RulesResource.getGlobalRulesets
+     * Permanently deletes every asset identified by repeated assetId query parameters, subject to realm and restricted-user access rules.
+     * HTTP DELETE /asset
+     * Java method: org.openremote.model.asset.AssetResource.delete
      */
-    getGlobalRulesets(queryParams?: {
-        language?: Model.RulesetLang[];
-        fullyPopulate?: boolean;
-    }, options?: O): RestResponse<Model.GlobalRuleset[]>;
+    delete(queryParams?: {
+        assetId?: string[];
+    }, options?: O): RestResponse<void>;
     /**
-     * Creates and deploys a ruleset for an accessible asset and returns its numeric ID. The assetId is taken from the request body.
-     * HTTP POST /rules/asset
-     * Java method: org.openremote.model.rules.RulesResource.createAssetRuleset
+     * Submits a batch of attribute states using current server time and returns one result per input item. Authorization and processing failures are encoded in each AttributeWriteResult rather than returned as an HTTP error.
+     * HTTP PUT /asset/attributes
+     * Java method: org.openremote.model.asset.AssetResource.writeAttributeValues
      */
-    createAssetRuleset(ruleset: Model.AssetRuleset, options?: O): RestResponse<number>;
+    writeAttributeValues(attributeStates: Model.AttributeState[], options?: O): RestResponse<Model.AttributeWriteResult[]>;
     /**
-     * Returns asset rulesets filtered by language. Callers without full access receive public rulesets only; a nonexistent asset produces an empty array.
-     * HTTP GET /rules/asset/for/{assetId}
-     * Java method: org.openremote.model.rules.RulesResource.getAssetRulesets
+     * Submits a batch of complete attribute events and returns one result per input item. Supplied timestamps are preserved; authorization and processing failures are encoded per result rather than returned as an HTTP error.
+     * HTTP PUT /asset/attributes/timestamp
+     * Java method: org.openremote.model.asset.AssetResource.writeAttributeEvents
      */
-    getAssetRulesets(assetId: string, queryParams?: {
-        language?: Model.RulesetLang[];
-        fullyPopulate?: boolean;
-    }, options?: O): RestResponse<Model.AssetRuleset[]>;
+    writeAttributeEvents(attributeEvents: Model.AttributeEvent[], options?: O): RestResponse<Model.AttributeWriteResult[]>;
     /**
-     * Permanently removes and undeploys one ruleset from an accessible asset.
-     * HTTP DELETE /rules/asset/{id}
-     * Java method: org.openremote.model.rules.RulesResource.deleteAssetRuleset
+     * Returns only the number of assets matching an AssetQuery after applying the caller's realm, public, and linked-asset access constraints.
+     * HTTP POST /asset/count
+     * Java method: org.openremote.model.asset.AssetResource.queryCount
      */
-    deleteAssetRuleset(id: number, options?: O): RestResponse<void>;
+    queryCount(query: Model.AssetQuery, options?: O): RestResponse<number>;
     /**
-     * Returns one fully populated asset ruleset when the caller can access its realm and owning asset.
-     * HTTP GET /rules/asset/{id}
-     * Java method: org.openremote.model.rules.RulesResource.getAssetRuleset
+     * Clears the parent reference of every asset listed in repeated assetIds query parameters.
+     * HTTP DELETE /asset/parent
+     * Java method: org.openremote.model.asset.AssetResource.updateNoneParent
      */
-    getAssetRuleset(id: number, options?: O): RestResponse<Model.AssetRuleset>;
+    updateNoneParent(queryParams?: {
+        assetIds?: string[];
+    }, options?: O): RestResponse<void>;
     /**
-     * Replaces and redeploys one asset ruleset. The ID must match and an existing ruleset cannot be reassigned to another asset.
-     * HTTP PUT /rules/asset/{id}
-     * Java method: org.openremote.model.rules.RulesResource.updateAssetRuleset
+     * Returns the asset identity and properties without loading attributes or path data. The same access rules as getAsset apply.
+     * HTTP GET /asset/partial/{assetId}
+     * Java method: org.openremote.model.asset.AssetResource.getPartial
      */
-    updateAssetRuleset(id: number, ruleset: Model.AssetRuleset, options?: O): RestResponse<void>;
+    getPartial(assetId: string, options?: O): RestResponse<Model.Asset>;
     /**
-     * Extracts geofence definitions relevant to the asset. Anonymous access requires a public-readable asset; authenticated restricted users require an asset link.
-     * HTTP GET /rules/geofences/{assetId}
-     * Java method: org.openremote.model.rules.RulesResource.getAssetGeofences
+     * Executes an AssetQuery after constraining realm and linked-asset access. Anonymous callers receive public-readable assets only; the query select clause controls which fields are populated.
+     * HTTP POST /asset/query
+     * Java method: org.openremote.model.asset.AssetResource.queryAssets
      */
-    getAssetGeofences(assetId: string, options?: O): RestResponse<Model.GeofenceDefinition[]>;
+    queryAssets(query: Model.AssetQuery, options?: O): RestResponse<Model.Asset[]>;
     /**
-     * Returns runtime status and error counts for an accessible asset engine. Returns null when the asset or its engine does not exist.
-     * Response code 204 - The asset or its rules engine does not exist
-     * HTTP GET /rules/info/asset/{assetId}
-     * Java method: org.openremote.model.rules.RulesResource.getAssetEngineInfo
+     * Applies the same authorization and selection rules as queryAssets, then returns a hierarchy optimized for tree display rather than a flat asset array.
+     * HTTP POST /asset/tree
+     * Java method: org.openremote.model.asset.AssetResource.queryAssetTree
      */
-    getAssetEngineInfo(assetId: string, options?: O): RestResponse<Model.RulesEngineInfo>;
+    queryAssetTree(query: Model.AssetQuery, options?: O): RestResponse<Model.AssetTree>;
     /**
-     * Returns runtime status and compilation/execution error counts for the global engine, or null when that engine is not running. Super-user access is required.
-     * Response code 204 - The global rules engine is not running
-     * HTTP GET /rules/info/global
-     * Java method: org.openremote.model.rules.RulesResource.getGlobalEngineInfo
+     * Returns partial linked assets for a restricted user, root assets for an unrestricted realm user, and an empty array for a super user. Attributes and paths are omitted; use getAsset for full details.
+     * HTTP GET /asset/user/current
+     * Java method: org.openremote.model.asset.AssetResource.getCurrentUserAssets
      */
-    getGlobalEngineInfo(options?: O): RestResponse<Model.RulesEngineInfo>;
+    getCurrentUserAssets(options?: O): RestResponse<Model.Asset[]>;
     /**
-     * Returns runtime status and error counts for an accessible realm engine, or null when that engine is not running. Restricted users cannot inspect realm engines.
-     * Response code 204 - The requested realm rules engine is not running
-     * HTTP GET /rules/info/realm/{realm}
-     * Java method: org.openremote.model.rules.RulesResource.getRealmEngineInfo
+     * Creates all supplied links as one operation. Every item must identify the same realm and user, and every referenced realm, user, and asset must exist.
+     * HTTP POST /asset/user/link
+     * Java method: org.openremote.model.asset.AssetResource.createUserAssetLinks
      */
-    getRealmEngineInfo(realm: string, options?: O): RestResponse<Model.RulesEngineInfo>;
+    createUserAssetLinks(userAssets: Model.UserAssetLink[], options?: O): RestResponse<void>;
     /**
-     * Creates and deploys a ruleset in its body realm and returns its numeric ID. Restricted users cannot create realm rulesets; legacy JavaScript is not accepted.
-     * HTTP POST /rules/realm
-     * Java method: org.openremote.model.rules.RulesResource.createRealmRuleset
+     * Returns user-asset links in the required realm, optionally filtered by userId and assetId. Missing users or assets produce an empty result; restricted users cannot call this operation.
+     * HTTP GET /asset/user/link
+     * Java method: org.openremote.model.asset.AssetResource.getUserAssetLinks
      */
-    createRealmRuleset(ruleset: Model.RealmRuleset, options?: O): RestResponse<number>;
+    getUserAssetLinks(queryParams?: {
+        realm?: string;
+        userId?: string;
+        assetId?: string;
+    }, options?: O): RestResponse<Model.UserAssetLink[]>;
     /**
-     * Returns realm rulesets filtered by language. Anonymous, restricted, or callers without read-rules permission receive public rulesets only; fullyPopulate controls loading of rule source.
-     * HTTP GET /rules/realm/for/{realm}
-     * Java method: org.openremote.model.rules.RulesResource.getRealmRulesets
+     * Removes all supplied links. Every item must identify the same realm and user.
+     * HTTP POST /asset/user/link/delete
+     * Java method: org.openremote.model.asset.AssetResource.deleteUserAssetLinks
      */
-    getRealmRulesets(realm: string, queryParams?: {
-        language?: Model.RulesetLang[];
-        fullyPopulate?: boolean;
-    }, options?: O): RestResponse<Model.RealmRuleset[]>;
+    deleteUserAssetLinks(userAssets: Model.UserAssetLink[], options?: O): RestResponse<void>;
     /**
-     * Permanently removes and undeploys one ruleset from an accessible realm.
-     * HTTP DELETE /rules/realm/{id}
-     * Java method: org.openremote.model.rules.RulesResource.deleteRealmRuleset
+     * Removes every asset link belonging to the user in the requested realm.
+     * HTTP DELETE /asset/user/link/{realm}/{userId}
+     * Java method: org.openremote.model.asset.AssetResource.deleteAllUserAssetLinks
      */
-    deleteRealmRuleset(id: number, options?: O): RestResponse<void>;
+    deleteAllUserAssetLinks(realm: string, userId: string, options?: O): RestResponse<void>;
     /**
-     * Returns one fully populated realm ruleset when its realm is accessible to the caller.
-     * HTTP GET /rules/realm/{id}
-     * Java method: org.openremote.model.rules.RulesResource.getRealmRuleset
+     * Removes the link identified by realm, user, and asset. The caller must be allowed to administer asset links in that realm.
+     * HTTP DELETE /asset/user/link/{realm}/{userId}/{assetId}
+     * Java method: org.openremote.model.asset.AssetResource.deleteUserAssetLink
      */
-    getRealmRuleset(id: number, options?: O): RestResponse<Model.RealmRuleset>;
+    deleteUserAssetLink(realm: string, userId: string, assetId: string, options?: O): RestResponse<void>;
     /**
-     * Replaces and redeploys one realm ruleset. Path and body IDs and the existing realm must match; legacy JavaScript cannot be updated.
-     * HTTP PUT /rules/realm/{id}
-     * Java method: org.openremote.model.rules.RulesResource.updateRealmRuleset
+     * Returns a fully loaded asset including its path and attributes. Access is constrained to the caller's realm and, for restricted users, linked assets.
+     * HTTP GET /asset/{assetId}
+     * Java method: org.openremote.model.asset.AssetResource.get
      */
-    updateRealmRuleset(id: number, ruleset: Model.RealmRuleset, options?: O): RestResponse<void>;
+    get(assetId: string, options?: O): RestResponse<Model.Asset>;
     /**
-     * Permanently removes and undeploys one global ruleset. Super-user access is required.
-     * HTTP DELETE /rules/{id}
-     * Java method: org.openremote.model.rules.RulesResource.deleteGlobalRuleset
+     * Replaces mutable asset data while preserving the path identifier. Realm, parent, restricted-user, and private-metadata rules are validated; disallowed restricted-user fields may be ignored.
+     * HTTP PUT /asset/{assetId}
+     * Java method: org.openremote.model.asset.AssetResource.update
      */
-    deleteGlobalRuleset(id: number, options?: O): RestResponse<void>;
+    update(assetId: string, asset: Model.Asset, options?: O): RestResponse<Model.Asset>;
     /**
-     * Returns one fully populated global ruleset including transient deployment status and errors. Super-user access is required.
-     * HTTP GET /rules/{id}
-     * Java method: org.openremote.model.rules.RulesResource.getGlobalRuleset
+     * Submits an asynchronous attribute write using the current server time. The result reports whether the event was accepted, not whether downstream processing ultimately succeeded. Anonymous writes require public-write metadata.
+     * Response code 400 - The attribute write failed
+     * Response code 406 - The supplied value is not valid for the attribute
+     * Response code 429 - The attribute event queue is full; retry the write later
+     * HTTP PUT /asset/{assetId}/attribute/{attributeName}
+     * Java method: org.openremote.model.asset.AssetResource.writeAttributeValue
      */
-    getGlobalRuleset(id: number, options?: O): RestResponse<Model.GlobalRuleset>;
+    writeAttributeValue$PUT$asset_assetId_attribute_attributeName(assetId: string, attributeName: string, value: any, options?: O): RestResponse<Model.AttributeWriteResult>;
     /**
-     * Replaces and redeploys the identified global ruleset. Path and body IDs must match; legacy JavaScript rulesets cannot be updated.
-     * HTTP PUT /rules/{id}
-     * Java method: org.openremote.model.rules.RulesResource.updateGlobalRuleset
+     * Submits an asynchronous attribute write using the supplied Unix timestamp in milliseconds. The result reports acceptance only; anonymous writes require public-write metadata.
+     * Response code 400 - The attribute write failed
+     * Response code 406 - The supplied value is not valid for the attribute
+     * Response code 429 - The attribute event queue is full; retry the write later
+     * HTTP PUT /asset/{assetId}/attribute/{attributeName}/{timestamp}
+     * Java method: org.openremote.model.asset.AssetResource.writeAttributeValue
      */
-    updateGlobalRuleset(id: number, ruleset: Model.GlobalRuleset, options?: O): RestResponse<void>;
-}
-export declare class ConsoleResourceClient<O> {
-    protected httpClient: HttpClient<O>;
-    constructor(httpClient: HttpClient<O>);
+    writeAttributeValue$PUT$asset_assetId_attribute_attributeName_timestamp(assetId: string, attributeName: string, timestamp: number, value: any, options?: O): RestResponse<Model.AttributeWriteResult>;
     /**
-     * Creates an anonymous console registration when id is absent, or updates an existing registration when id is present. Authenticated new registrations are linked to the caller; updates require that link. The returned registration contains the durable asset ID for later calls.
-     * HTTP POST /console/register
-     * Java method: org.openremote.model.console.ConsoleResource.register
+     * Sets parentAssetId as the parent of every asset listed in repeated assetIds query parameters. Parent and children must satisfy realm, access, and hierarchy constraints.
+     * HTTP PUT /asset/{parentAssetId}/child
+     * Java method: org.openremote.model.asset.AssetResource.updateParent
      */
-    register(consoleRegistration: Model.ConsoleRegistration, options?: O): RestResponse<Model.ConsoleRegistration>;
+    updateParent(parentAssetId: string, queryParams?: {
+        assetIds?: string[];
+    }, options?: O): RestResponse<void>;
 }
-export declare class AppResourceClient<O> {
+export declare class StatusResourceClient<O> {
     protected httpClient: HttpClient<O>;
     constructor(httpClient: HttpClient<O>);
     /**
-     * Returns the identifiers of applications installed in the Manager web root.
-     * HTTP GET /apps
-     * Java method: org.openremote.model.apps.AppResource.getApps
-     */
-    getApps(options?: O): RestResponse<string[]>;
-    /**
-     * Loads the public console_config.json document used to configure console clients before sign-in.
-     * HTTP GET /apps/consoleConfig
-     * Java method: org.openremote.model.apps.AppResource.getConsoleConfig
+     * Returns health data keyed by registered health-provider name. A null provider result is represented as JSON null.
+     * HTTP GET /health
+     * Java method: org.openremote.model.system.StatusResource.getHealthStatus
      */
-    getConsoleConfig(options?: O): RestResponse<any>;
+    getHealthStatus(options?: O): RestResponse<{
+        [index: string]: any;
+    }>;
     /**
-     * Loads each installed application's info.json file and returns the documents keyed by application identifier.
-     * HTTP GET /apps/info
-     * Java method: org.openremote.model.apps.AppResource.getAppInfos
+     * Returns public bootstrap information, including the Manager version and identity-provider URL.
+     * HTTP GET /info
+     * Java method: org.openremote.model.system.StatusResource.getInfo
      */
-    getAppInfos(options?: O): RestResponse<{
+    getInfo(options?: O): RestResponse<{
         [index: string]: any;
     }>;
 }
-export declare class ExternalServiceResourceClient<O> {
+export declare class UserResourceClient<O> {
     protected httpClient: HttpClient<O>;
     constructor(httpClient: HttpClient<O>);
     /**
-     * Returns all active realm-scoped service registrations for an active realm accessible to the caller.
-     * Response code 200 - List of registered external services
-     * HTTP GET /service
-     * Java method: org.openremote.model.services.ExternalServiceResource.getServices
+     * Stores the supplied non-empty locale string as the caller's identity-provider locale attribute. The target realm must be active unless the caller is a superuser.
+     * HTTP PUT /user/locale
+     * Java method: org.openremote.model.security.UserResource.updateCurrentUserLocale
      */
-    getServices(queryParams?: {
-        realm?: string;
-    }, options?: O): RestResponse<Model.ExternalService[]>;
+    updateCurrentUserLocale(locale: string, options?: O): RestResponse<void>;
     /**
-     * Registers a realm-scoped service instance for the request realm. The caller must be a service account; the returned object contains the assigned instance ID and initial lease state.
-     * Response code 200 - Service registered successfully
-     * Response code 400 - Invalid external service object
-     * Response code 409 - ExternalService instance already registered
-     * HTTP POST /service
-     * Java method: org.openremote.model.services.ExternalServiceResource.registerService
+     * Executes a UserQuery. Non-super users are forced into their authenticated realm and cannot see system accounts; callers with read-users but not read-admin receive basic fields only. The target realm must be active unless the caller is a superuser.
+     * HTTP POST /user/query
+     * Java method: org.openremote.model.security.UserResource.query
      */
-    registerService(service: Model.ExternalService, options?: O): RestResponse<Model.ExternalService>;
+    query(query: Model.UserQuery, options?: O): RestResponse<Model.User[]>;
     /**
-     * Returns active registrations marked as globally available across realms.
-     * Response code 200 - List of registered external services
-     * HTTP GET /service/global
-     * Java method: org.openremote.model.services.ExternalServiceResource.getGlobalServices
+     * Initiates the identity provider's configured password-reset action for the caller's own account. The target realm must be active unless the caller is a superuser.
+     * HTTP PUT /user/request-password-reset
+     * Java method: org.openremote.model.security.UserResource.requestPasswordResetCurrent
      */
-    getGlobalServices(options?: O): RestResponse<Model.ExternalService[]>;
+    requestPasswordResetCurrent(options?: O): RestResponse<void>;
     /**
-     * Registers a service visible in every realm. The caller must be a super-user service account and the request must use the master realm.
-     * Response code 200 - Service registered successfully
-     * Response code 400 - Invalid external service object
-     * Response code 409 - ExternalService instance already registered
-     * HTTP POST /service/global
-     * Java method: org.openremote.model.services.ExternalServiceResource.registerGlobalService
+     * Replaces the caller's own identity-provider credential using the supplied credential representation. The target realm must be active unless the caller is a superuser.
+     * HTTP PUT /user/reset-password
+     * Java method: org.openremote.model.security.UserResource.updatePasswordCurrent
      */
-    registerGlobalService(service: Model.ExternalService, options?: O): RestResponse<Model.ExternalService>;
+    updatePasswordCurrent(credential: Model.Credential, options?: O): RestResponse<void>;
     /**
-     * Removes an active service registration. The caller must be the service account that registered it; global-service removal additionally requires a super user.
-     * Response code 204 - Service deregistered successfully
-     * Response code 404 - Service instance not found
-     * HTTP DELETE /service/{serviceId}/{instanceId}
-     * Java method: org.openremote.model.services.ExternalServiceResource.deregisterService
+     * Updates the caller's own profile. A supplied user ID must match the access token; role and realm administration are not provided by this endpoint. The target realm must be active unless the caller is a superuser.
+     * HTTP PUT /user/update
+     * Java method: org.openremote.model.security.UserResource.updateCurrent
      */
-    deregisterService(serviceId: string, instanceId: number, options?: O): RestResponse<void>;
+    updateCurrent(user: Model.User, options?: O): RestResponse<Model.User>;
     /**
-     * Returns one registered instance by stable service ID and numeric instance ID, after verifying access to the service's realm.
-     * Response code 200 - ExternalService retrieved successfully
-     * Response code 404 - ExternalService not found
-     * HTTP GET /service/{serviceId}/{instanceId}
-     * Java method: org.openremote.model.services.ExternalServiceResource.getService
+     * Returns the identity-provider record corresponding to the current access token. The target realm must be active unless the caller is a superuser.
+     * HTTP GET /user/user
+     * Java method: org.openremote.model.security.UserResource.getCurrent
      */
-    getService(serviceId: string, instanceId: number, options?: O): RestResponse<Model.ExternalService>;
+    getCurrent(options?: O): RestResponse<Model.User>;
     /**
-     * Extends the lease of one service instance. The caller must be the service account that registered it; global-service heartbeats additionally require a super user.
-     * Response code 204 - Heartbeat sent successfully
-     * Response code 404 - Service instance not found
-     * HTTP PUT /service/{serviceId}/{instanceId}
-     * Java method: org.openremote.model.services.ExternalServiceResource.heartbeat
+     * Returns realm-level role names assigned to the caller. The target realm must be active unless the caller is a superuser.
+     * HTTP GET /user/userRealmRoles
+     * Java method: org.openremote.model.security.UserResource.getCurrentUserRealmRoles
      */
-    heartbeat(serviceId: string, instanceId: number, options?: O): RestResponse<void>;
-}
-export declare class AgentResourceClient<O> {
-    protected httpClient: HttpClient<O>;
-    constructor(httpClient: HttpClient<O>);
+    getCurrentUserRealmRoles(options?: O): RestResponse<string[]>;
     /**
-     * Runs the agent protocol's asset discovery, waits up to ten seconds for results, returns the discovered tree, and asynchronously persists discovered assets below the agent.
-     * HTTP GET /agent/assetDiscovery/{agentId}
-     * Java method: org.openremote.model.asset.agent.AgentResource.doProtocolAssetDiscovery
+     * Returns role names assigned to the caller for the named identity-provider client. The target realm must be active unless the caller is a superuser.
+     * HTTP GET /user/userRoles/{clientId}
+     * Java method: org.openremote.model.security.UserResource.getCurrentUserClientRoles
      */
-    doProtocolAssetDiscovery(agentId: string, queryParams?: {
-        realm?: string;
-    }, options?: O): RestResponse<Model.AssetTreeNode[]>;
+    getCurrentUserClientRoles(clientId: string, options?: O): RestResponse<string[]>;
     /**
-     * Decodes the supplied FileInfo, asks the agent protocol to import it, persists the returned asset tree below the agent, and returns that tree.
-     * Response code 405 - The selected agent protocol does not support asset import
-     * HTTP POST /agent/assetImport/{agentId}
-     * Java method: org.openremote.model.asset.agent.AgentResource.doProtocolAssetImport
+     * Terminates the active MQTT connection identified by sessionID. The realm must match the session owner's realm. Authenticated users may disconnect their own sessions without an additional client role. Disconnecting another user's session requires the openremote client role write:admin or superuser status. Non-superusers are limited to their own active realm; superusers may disconnect sessions across realms, including inactive realms.
+     * Response code 403 - The realm is inactive for a non-superuser, or the caller is neither the session owner, a user with write:admin, nor a superuser
+     * Response code 404 - The session or its owning user does not exist, or the session does not belong to the specified realm
+     * Response code 405 - A non-superuser cannot access the session owner's realm
+     * HTTP DELETE /user/{realm}/disconnect/{sessionID}
+     * Java method: org.openremote.model.security.UserResource.disconnectUserSession
      */
-    doProtocolAssetImport(agentId: string, fileInfo: Model.FileInfo, queryParams?: {
-        realm?: string;
-    }, options?: O): RestResponse<Model.AssetTreeNode[]>;
+    disconnectUserSession(realm: string, sessionID: string, options?: O): RestResponse<void>;
     /**
-     * Runs instance discovery for an agent type and returns candidate Agent assets. parentId selects local versus edge-gateway discovery; non-super users are always constrained to their authenticated realm.
-     * Response code 415 - The selected agent protocol does not support instance discovery
-     * HTTP GET /agent/instanceDiscovery/{agentType}
-     * Java method: org.openremote.model.asset.agent.AgentResource.doProtocolInstanceDiscovery
+     * Asks the identity provider to send or initiate its configured password-reset action for the specified user. The target realm must be active unless the caller is a superuser.
+     * Response code 405 - The caller cannot mutate a user in the requested realm
+     * HTTP PUT /user/{realm}/request-password-reset/{userId}
+     * Java method: org.openremote.model.security.UserResource.requestPasswordReset
      */
-    doProtocolInstanceDiscovery(agentType: string, queryParams?: {
-        parentId?: string;
-        realm?: string;
-    }, options?: O): RestResponse<Model.Agent[]>;
-}
-export declare class SyslogResourceClient<O> {
-    protected httpClient: HttpClient<O>;
-    constructor(httpClient: HttpClient<O>);
+    requestPasswordReset(realm: string, userId: string, options?: O): RestResponse<void>;
     /**
-     * Returns the current log-storage and retention configuration. This operation is restricted to a super administrator.
-     * HTTP GET /syslog/config
-     * Java method: org.openremote.model.syslog.SyslogResource.getConfig
+     * Replaces a user's credential in an administered realm using the supplied credential representation. The target realm must be active unless the caller is a superuser.
+     * Response code 405 - The caller cannot mutate a user in the requested realm
+     * HTTP PUT /user/{realm}/reset-password/{userId}
+     * Java method: org.openremote.model.security.UserResource.updatePassword
      */
-    getConfig(options?: O): RestResponse<Model.SyslogConfig>;
+    updatePassword(realm: string, userId: string, credential: Model.Credential, options?: O): RestResponse<void>;
     /**
-     * Validates and applies log-storage and retention settings. This operation is restricted to a super administrator.
-     * HTTP PUT /syslog/config
-     * Java method: org.openremote.model.syslog.SyslogResource.updateConfig
+     * Generates and returns a new client secret for a service user in an administered realm. The target realm must be active unless the caller is a superuser.
+     * HTTP GET /user/{realm}/reset-secret/{userId}
+     * Java method: org.openremote.model.security.UserResource.resetSecret
      */
-    updateConfig(config: Model.SyslogConfig, options?: O): RestResponse<void>;
+    resetSecret(realm: string, userId: string, options?: O): RestResponse<string>;
     /**
-     * Permanently removes all events from the configured syslog storage. This operation is restricted to a super administrator.
-     * HTTP DELETE /syslog/event
-     * Java method: org.openremote.model.syslog.SyslogResource.clearEvents
+     * Creates, updates, or removes role definitions for the default OpenRemote client in the requested realm. The target realm must be active unless the caller is a superuser.
+     * HTTP PUT /user/{realm}/roles
+     * Java method: org.openremote.model.security.UserResource.updateRoles
      */
-    clearEvents(options?: O): RestResponse<void>;
+    updateRoles(realm: string, roles: Model.Role[], options?: O): RestResponse<void>;
     /**
-     * Returns a page of log events filtered by severity, Unix-millisecond time range, categories, and subcategories. RFC 8288 Link headers point to the next and last pages.
-     * Response code 200 - The requested page of syslog events
-     * HTTP GET /syslog/event
-     * Java method: org.openremote.model.syslog.SyslogResource.getEvents
+     * Returns realm-level role names assigned to one user. Without read-admin permission, callers may retrieve only their own roles. The target realm must be active unless the caller is a superuser.
+     * HTTP GET /user/{realm}/userRealmRoles/{userId}
+     * Java method: org.openremote.model.security.UserResource.getUserRealmRoles
      */
-    getEvents(queryParams?: {
-        level?: Model.SyslogLevel;
-        per_page?: number;
-        page?: number;
-        from?: number;
-        to?: number;
-        category?: Model.SyslogCategory[];
-        subCategory?: string[];
-    }, options?: O): RestResponse<any>;
-}
-export declare class AlarmResourceClient<O> {
-    protected httpClient: HttpClient<O>;
-    constructor(httpClient: HttpClient<O>);
+    getUserRealmRoles(realm: string, userId: string, options?: O): RestResponse<string[]>;
     /**
-     * Creates a manual alarm in an accessible realm and optionally links it to the supplied asset IDs. The authenticated user or client becomes the alarm source.
-     * HTTP POST /alarm
-     * Java method: org.openremote.model.alarm.AlarmResource.createAlarm
+     * Replaces the user's assigned realm-level role names in an administered realm. The target realm must be active unless the caller is a superuser.
+     * HTTP PUT /user/{realm}/userRealmRoles/{userId}
+     * Java method: org.openremote.model.security.UserResource.updateUserRealmRoles
      */
-    createAlarm(alarm: Model.Alarm, queryParams?: {
-        assetIds?: string[];
-    }, options?: O): RestResponse<Model.SentAlarm>;
+    updateUserRealmRoles(realm: string, userId: string, roles: string[], options?: O): RestResponse<void>;
     /**
-     * Returns alarms in the requested accessible realm, optionally filtered by status, linked asset, or assignee. When realm is omitted, the authenticated realm is used.
-     * HTTP GET /alarm
-     * Java method: org.openremote.model.alarm.AlarmResource.getAlarms
+     * Returns role names assigned to one user for the named client. Without read-admin permission, callers may retrieve only their own roles. The target realm must be active unless the caller is a superuser.
+     * HTTP GET /user/{realm}/userRoles/{userId}/{clientId}
+     * Java method: org.openremote.model.security.UserResource.getUserClientRoles
      */
-    getAlarms(queryParams?: {
-        realm?: string;
-        status?: Model.AlarmStatus;
-        assetId?: string;
-        assigneeId?: string;
-    }, options?: O): RestResponse<Model.SentAlarm[]>;
+    getUserClientRoles(realm: string, userId: string, clientId: string, options?: O): RestResponse<string[]>;
     /**
-     * Permanently removes all alarms identified by the request body after verifying access to every alarm's realm.
-     * HTTP DELETE /alarm
-     * Java method: org.openremote.model.alarm.AlarmResource.removeAlarms
+     * Replaces the user's assigned role names for the named client in an administered realm. The target realm must be active unless the caller is a superuser.
+     * HTTP PUT /user/{realm}/userRoles/{userId}/{clientId}
+     * Java method: org.openremote.model.security.UserResource.updateUserClientRoles
      */
-    removeAlarms(ids: number[], options?: O): RestResponse<void>;
+    updateUserClientRoles(realm: string, userId: string, clientId: string, roles: string[], options?: O): RestResponse<void>;
     /**
-     * Adds links between assets and one existing alarm.
-
-The request body is a list for backward compatibility, but this operation now has single-alarm semantics:
-every item must contain the same `id.realm` and the same `id.alarmId`. The alarm must exist in that realm,
-every asset must exist in the same realm, and the authenticated user must have access to that realm. Requests
-containing mixed alarm IDs or realms are rejected as bad requests.
-
-Existing links are left unchanged; duplicate links in the request or links that already exist are ignored.
-This operation does not remove existing links from the alarm.
-
-     * HTTP PUT /alarm/assets
-     * Java method: org.openremote.model.alarm.AlarmResource.setAssetLinks
+     * Returns active MQTT sessions for one user, including connection ID, creation time, and remote address. Without read-admin permission, callers may inspect only themselves. The target realm must be active unless the caller is a superuser.
+     * HTTP GET /user/{realm}/userSessions/{userId}
+     * Java method: org.openremote.model.security.UserResource.getUserSessions
      */
-    setAssetLinks(links: Model.AlarmAssetLink[], options?: O): RestResponse<void>;
+    getUserSessions(realm: string, userId: string, options?: O): RestResponse<Model.UserSession[]>;
     /**
-     * Returns one alarm when its realm is active and accessible to the authenticated user.
-     * HTTP GET /alarm/{alarmId}
-     * Java method: org.openremote.model.alarm.AlarmResource.getAlarm
+     * Creates an identity-provider user in a realm administered by the caller and returns the resulting user record. The target realm must be active unless the caller is a superuser.
+     * HTTP POST /user/{realm}/users
+     * Java method: org.openremote.model.security.UserResource.create
      */
-    getAlarm(alarmId: number, options?: O): RestResponse<Model.SentAlarm>;
+    create(realm: string, user: Model.User, options?: O): RestResponse<Model.User>;
     /**
-     * Permanently removes one alarm after verifying access to its realm.
-     * HTTP DELETE /alarm/{alarmId}
-     * Java method: org.openremote.model.alarm.AlarmResource.removeAlarm
+     * Updates an existing identity-provider user in an administered realm. The master administrator cannot be disabled. The target realm must be active unless the caller is a superuser.
+     * Response code 405 - The requested cross-realm or protected master-administrator mutation is not allowed
+     * HTTP PUT /user/{realm}/users
+     * Java method: org.openremote.model.security.UserResource.update
      */
-    removeAlarm(alarmId: number, options?: O): RestResponse<void>;
+    update(realm: string, user: Model.User, options?: O): RestResponse<Model.User>;
     /**
-     * Updates the mutable state of an existing alarm after verifying access to its current realm.
-     * HTTP PUT /alarm/{alarmId}
-     * Java method: org.openremote.model.alarm.AlarmResource.updateAlarm
+     * Permanently deletes a user from an administered realm. The master-realm administrator cannot be deleted. The target realm must be active unless the caller is a superuser.
+     * Response code 405 - The master-realm administrator cannot be deleted
+     * HTTP DELETE /user/{realm}/users/{userId}
+     * Java method: org.openremote.model.security.UserResource.delete
      */
-    updateAlarm(alarmId: number, alarm: Model.SentAlarm, options?: O): RestResponse<void>;
+    delete(realm: string, userId: string, options?: O): RestResponse<void>;
     /**
-     * Returns links from the alarm to assets in the explicitly supplied accessible realm.
-     * HTTP GET /alarm/{alarmId}/assets
-     * Java method: org.openremote.model.alarm.AlarmResource.getAssetLinks
+     * Returns all role definitions exposed by the named identity-provider client. Realm-administrator access is required. The target realm must be active unless the caller is a superuser.
+     * HTTP GET /user/{realm}/{clientId}/roles
+     * Java method: org.openremote.model.security.UserResource.getClientRoles
      */
-    getAssetLinks(alarmId: number, queryParams?: {
-        realm?: string;
-    }, options?: O): RestResponse<Model.AlarmAssetLink[]>;
+    getClientRoles(realm: string, clientId: string, options?: O): RestResponse<Model.Role[]>;
+    /**
+     * Creates, updates, or removes role definitions for a named identity-provider client. The target realm must be active unless the caller is a superuser.
+     * HTTP PUT /user/{realm}/{clientId}/roles
+     * Java method: org.openremote.model.security.UserResource.updateClientRoles
+     */
+    updateClientRoles(realm: string, clientId: string, roles: Model.Role[], options?: O): RestResponse<void>;
+    /**
+     * Returns one user when it belongs to the requested accessible realm. Without read-admin permission, callers may retrieve only their own user. The target realm must be active unless the caller is a superuser.
+     * HTTP GET /user/{realm}/{userId}
+     * Java method: org.openremote.model.security.UserResource.get
+     */
+    get(realm: string, userId: string, options?: O): RestResponse<Model.User>;
 }
-export declare class ProvisioningResourceClient<O> {
+export declare class MapResourceClient<O> {
     protected httpClient: HttpClient<O>;
     constructor(httpClient: HttpClient<O>);
     /**
-     * Persists a new provisioning configuration and returns its generated numeric identifier. This operation is restricted to a super administrator.
-     * HTTP POST /provisioning
-     * Java method: org.openremote.model.provisioning.ProvisioningResource.createProvisioningConfig
+     * Returns realm-aware public MapLibre settings with externally reachable URLs derived from proxy headers.
+     * HTTP GET /map
+     * Java method: org.openremote.model.map.MapResource.getSettings
      */
-    createProvisioningConfig(provisioningConfig: Model.ProvisioningConfigUnion<any, any>, options?: O): RestResponse<number>;
+    getSettings(options?: O): RestResponse<{
+        [id: string]: unknown;
+    }>;
     /**
-     * Returns every provisioning configuration. This operation is restricted to a super administrator.
-     * HTTP GET /provisioning
-     * Java method: org.openremote.model.provisioning.ProvisioningResource.getProvisioningConfigs
+     * Stores the map configuration and returns the resulting public MapLibre settings. This operation is restricted to a super administrator.
+     * HTTP PUT /map
+     * Java method: org.openremote.model.map.MapResource.saveSettings
      */
-    getProvisioningConfigs(options?: O): RestResponse<Model.ProvisioningConfigUnion<any, any>[]>;
+    saveSettings(mapConfig: Model.MapConfig, options?: O): RestResponse<{
+        [id: string]: unknown;
+    }>;
     /**
-     * Permanently removes the provisioning configuration identified by the path. This operation is restricted to a super administrator.
-     * HTTP DELETE /provisioning/{id}
-     * Java method: org.openremote.model.provisioning.ProvisioningResource.deleteProvisioningConfig
+     * Deletes the installed custom MBTiles database and returns the fallback public map settings. This operation is restricted to a super administrator.
+     * HTTP DELETE /map/deleteMap
+     * Java method: org.openremote.model.map.MapResource.deleteMap
      */
-    deleteProvisioningConfig(id: number, options?: O): RestResponse<void>;
+    deleteMap(options?: O): RestResponse<{
+        [id: string]: unknown;
+    }>;
     /**
-     * Replaces the provisioning configuration identified by the path. This operation is restricted to a super administrator.
-     * HTTP PUT /provisioning/{id}
-     * Java method: org.openremote.model.provisioning.ProvisioningResource.updateProvisioningConfig
+     * Reports whether custom MBTiles data is installed and the maximum accepted upload size.
+     * HTTP GET /map/getCustomMapInfo
+     * Java method: org.openremote.model.map.MapResource.getCustomMapInfo
      */
-    updateProvisioningConfig(id: number, provisioningConfig: Model.ProvisioningConfigUnion<any, any>, options?: O): RestResponse<void>;
+    getCustomMapInfo(options?: O): RestResponse<{
+        [id: string]: unknown;
+    }>;
+    /**
+     * Returns a pre-compressed Mapbox vector tile for the requested zoom, column, and row coordinates.
+     * Response code 200 - Gzip-compressed vector tile
+     * Response code 204 - No tile exists at the requested coordinates
+     * HTTP GET /map/tile/{zoom}/{column}/{row}
+     * Java method: org.openremote.model.map.MapResource.getTile
+     */
+    getTile(zoom: number, column: number, row: number, options?: O): RestResponse<any>;
+    /**
+     * Stores the raw request body as the realm's custom MBTiles database and returns the resulting public map settings. This operation is restricted to a super administrator.
+     * HTTP POST /map/upload
+     * Java method: org.openremote.model.map.MapResource.uploadMap
+     */
+    uploadMap(queryParams?: {
+        filename?: string;
+    }, options?: O): RestResponse<{
+        [id: string]: unknown;
+    }>;
 }
-export declare class StatusResourceClient<O> {
+export declare class AssetModelResourceClient<O> {
     protected httpClient: HttpClient<O>;
     constructor(httpClient: HttpClient<O>);
     /**
-     * Returns health data keyed by registered health-provider name. A null provider result is represented as JSON null.
-     * HTTP GET /health
-     * Java method: org.openremote.model.system.StatusResource.getHealthStatus
+     * Returns the descriptors used to construct supported asset types, using a gateway model when the optional parent context resolves below a gateway.
+     * HTTP GET /model/assetDescriptors
+     * Java method: org.openremote.model.asset.AssetModelResource.getAssetDescriptors
      */
-    getHealthStatus(options?: O): RestResponse<{
-        [index: string]: any;
+    getAssetDescriptors(queryParams?: {
+        parentId?: string;
+        parentType?: string;
+    }, options?: O): RestResponse<Model.AssetDescriptor[]>;
+    /**
+     * Returns metadata for one asset type from this Manager or, when parentId is below a gateway, from that gateway's model. An unknown or gateway-provided type that is not locally available returns no content.
+     * Response code 204 - No model information is available for the requested asset type
+     * HTTP GET /model/assetInfo/{assetType}
+     * Java method: org.openremote.model.asset.AssetModelResource.getAssetInfo
+     */
+    getAssetInfo(assetType: string, queryParams?: {
+        parentId?: string;
+    }, options?: O): RestResponse<Model.AssetTypeInfo>;
+    /**
+     * Returns type metadata from this Manager by default. When parentId identifies an asset below a gateway, the gateway's model is used instead; parentType can provide type context for a new parent that does not yet exist.
+     * HTTP GET /model/assetInfos
+     * Java method: org.openremote.model.asset.AssetModelResource.getAssetInfos
+     */
+    getAssetInfos(queryParams?: {
+        parentId?: string;
+        parentType?: string;
+    }, options?: O): RestResponse<Model.AssetTypeInfo[]>;
+    /**
+     * Returns the JSON Schema and a weak ETag for the named value descriptor. Send If-None-Match on later requests to receive 304 when the schema has not changed.
+     * Response code 200 - The current JSON Schema
+     * Response code 304 - The supplied ETag still identifies the current schema
+     * HTTP GET /model/getValueDescriptorSchema
+     * Java method: org.openremote.model.asset.AssetModelResource.getValueDescriptorSchema
+     */
+    getValueDescriptorSchema(queryParams?: {
+        name?: string;
+    }, options?: O): RestResponse<any>;
+    /**
+     * Returns attribute metadata descriptors keyed by descriptor name, using a gateway model when parentId resolves below a gateway.
+     * HTTP GET /model/metaItemDescriptors
+     * Java method: org.openremote.model.asset.AssetModelResource.getMetaItemDescriptors
+     */
+    getMetaItemDescriptors(queryParams?: {
+        parentId?: string;
+    }, options?: O): RestResponse<{
+        [index: string]: Model.MetaItemDescriptor;
     }>;
     /**
-     * Returns public bootstrap information, including the Manager version and identity-provider URL.
-     * HTTP GET /info
-     * Java method: org.openremote.model.system.StatusResource.getInfo
+     * Returns attribute value descriptors keyed by descriptor name, using a gateway model when parentId resolves below a gateway.
+     * HTTP GET /model/valueDescriptors
+     * Java method: org.openremote.model.asset.AssetModelResource.getValueDescriptors
      */
-    getInfo(options?: O): RestResponse<{
-        [index: string]: any;
+    getValueDescriptors(queryParams?: {
+        parentId?: string;
+    }, options?: O): RestResponse<{
+        [index: string]: Model.ValueDescriptor;
     }>;
 }
-export declare class FlowResourceClient<O> {
+export declare class AppResourceClient<O> {
     protected httpClient: HttpClient<O>;
     constructor(httpClient: HttpClient<O>);
     /**
-     * Returns every supported flow node definition except the internal LOG_OUTPUT node.
-     * HTTP GET /flow
-     * Java method: org.openremote.model.rules.flow.FlowResource.getAllNodeDefinitions
+     * Returns the identifiers of applications installed in the Manager web root.
+     * HTTP GET /apps
+     * Java method: org.openremote.model.apps.AppResource.getApps
      */
-    getAllNodeDefinitions(options?: O): RestResponse<Model.Node[]>;
+    getApps(options?: O): RestResponse<string[]>;
     /**
-     * Resolves one flow node definition by its model name.
-     * HTTP GET /flow/{name}
-     * Java method: org.openremote.model.rules.flow.FlowResource.getNodeDefinition
+     * Loads the public console_config.json document used to configure console clients before sign-in.
+     * HTTP GET /apps/consoleConfig
+     * Java method: org.openremote.model.apps.AppResource.getConsoleConfig
      */
-    getNodeDefinition(name: string, options?: O): RestResponse<Model.Node>;
+    getConsoleConfig(options?: O): RestResponse<any>;
     /**
-     * Returns supported flow node definitions whose category matches the requested node type.
-     * HTTP GET /flow/{type}
-     * Java method: org.openremote.model.rules.flow.FlowResource.getAllNodeDefinitionsByType
+     * Loads each installed application's info.json file and returns the documents keyed by application identifier.
+     * HTTP GET /apps/info
+     * Java method: org.openremote.model.apps.AppResource.getAppInfos
      */
-    getAllNodeDefinitionsByType(type: Model.NodeType, options?: O): RestResponse<Model.Node[]>;
+    getAppInfos(options?: O): RestResponse<{
+        [index: string]: any;
+    }>;
 }
 export declare class AssetDatapointResourceClient<O> {
     protected httpClient: HttpClient<O>;
@@ -614,259 +726,271 @@ export declare class AssetDatapointResourceClient<O> {
      */
     getDatapoints(assetId: string, attributeName: string, query: Model.AssetDatapointQueryUnion, options?: O): RestResponse<Model.ValueDatapoint<any>[]>;
 }
-export declare class DashboardResourceClient<O> {
+export declare class ConsoleResourceClient<O> {
     protected httpClient: HttpClient<O>;
     constructor(httpClient: HttpClient<O>);
     /**
-     * Creates a dashboard in an accessible realm. The server assigns the authenticated user as owner and initially stores the dashboard with shared access.
-     * HTTP POST /dashboard
-     * Java method: org.openremote.model.dashboard.DashboardResource.create
-     */
-    create(dashboard: Model.Dashboard, options?: O): RestResponse<Model.Dashboard>;
-    /**
-     * Updates an existing dashboard when the authenticated user can modify it in the dashboard's realm.
-     * HTTP PUT /dashboard
-     * Java method: org.openremote.model.dashboard.DashboardResource.update
+     * Creates an anonymous console registration when id is absent, or updates an existing registration when id is present. Authenticated new registrations are linked to the caller; updates require that link. The returned registration contains the durable asset ID for later calls.
+     * HTTP POST /console/register
+     * Java method: org.openremote.model.console.ConsoleResource.register
      */
-    update(dashboard: Model.Dashboard, options?: O): RestResponse<Model.Dashboard>;
+    register(consoleRegistration: Model.ConsoleRegistration, options?: O): RestResponse<Model.ConsoleRegistration>;
+}
+export declare class RulesResourceClient<O> {
+    protected httpClient: HttpClient<O>;
+    constructor(httpClient: HttpClient<O>);
     /**
-     * Returns dashboards visible to the caller in the requested realm. Anonymous callers receive public dashboards only; authenticated access also depends on roles, ownership, and linked assets.
-     * HTTP GET /dashboard/all/{realm}
-     * Java method: org.openremote.model.dashboard.DashboardResource.getAllRealmDashboards
+     * Creates and deploys a global ruleset and returns its numeric ID. Super-user access is required; legacy JavaScript rulesets cannot be created.
+     * HTTP POST /rules
+     * Java method: org.openremote.model.rules.RulesResource.createGlobalRuleset
      */
-    getAllRealmDashboards(realm: string, options?: O): RestResponse<Model.Dashboard[]>;
+    createGlobalRuleset(ruleset: Model.GlobalRuleset, options?: O): RestResponse<number>;
     /**
-     * Executes a dashboard query after constraining it to the caller's realm, roles, ownership, and asset access. A missing body uses the request realm and default visibility rules.
-     * HTTP POST /dashboard/query
-     * Java method: org.openremote.model.dashboard.DashboardResource.query
+     * Returns global rulesets filtered by repeated language parameters. fullyPopulate controls whether rule source and other large fields are loaded; super-user access is required.
+     * HTTP GET /rules
+     * Java method: org.openremote.model.rules.RulesResource.getGlobalRulesets
      */
-    query(dashboardQuery: Model.DashboardQuery, options?: O): RestResponse<Model.Dashboard[]>;
+    getGlobalRulesets(queryParams?: {
+        language?: Model.RulesetLang[];
+        fullyPopulate?: boolean;
+    }, options?: O): RestResponse<Model.GlobalRuleset[]>;
     /**
-     * Permanently removes a dashboard when the authenticated user can modify it in the requested realm.
-     * HTTP DELETE /dashboard/{realm}/{dashboardId}
-     * Java method: org.openremote.model.dashboard.DashboardResource.delete
+     * Creates and deploys a ruleset for an accessible asset and returns its numeric ID. The assetId is taken from the request body.
+     * HTTP POST /rules/asset
+     * Java method: org.openremote.model.rules.RulesResource.createAssetRuleset
      */
-    delete(realm: string, dashboardId: string, options?: O): RestResponse<void>;
+    createAssetRuleset(ruleset: Model.AssetRuleset, options?: O): RestResponse<number>;
     /**
-     * Returns one dashboard only when it is visible to the caller. Inaccessible and nonexistent dashboards both return 404 to avoid disclosing their existence.
-     * HTTP GET /dashboard/{realm}/{dashboardId}
-     * Java method: org.openremote.model.dashboard.DashboardResource.get
+     * Returns asset rulesets filtered by language. Callers without full access receive public rulesets only; a nonexistent asset produces an empty array.
+     * HTTP GET /rules/asset/for/{assetId}
+     * Java method: org.openremote.model.rules.RulesResource.getAssetRulesets
      */
-    get(realm: string, dashboardId: string, options?: O): RestResponse<Model.Dashboard>;
-}
-export declare class RealmResourceClient<O> {
-    protected httpClient: HttpClient<O>;
-    constructor(httpClient: HttpClient<O>);
+    getAssetRulesets(assetId: string, queryParams?: {
+        language?: Model.RulesetLang[];
+        fullyPopulate?: boolean;
+    }, options?: O): RestResponse<Model.AssetRuleset[]>;
     /**
-     * Creates and configures a realm in the identity provider. This operation is restricted to a super user.
-     * HTTP POST /realm
-     * Java method: org.openremote.model.security.RealmResource.create
+     * Permanently removes and undeploys one ruleset from an accessible asset.
+     * HTTP DELETE /rules/asset/{id}
+     * Java method: org.openremote.model.rules.RulesResource.deleteAssetRuleset
      */
-    create(realm: Model.Realm, options?: O): RestResponse<void>;
+    deleteAssetRuleset(id: number, options?: O): RestResponse<void>;
     /**
-     * Returns complete realm records from the identity provider. This operation is restricted to a super user.
-     * HTTP GET /realm
-     * Java method: org.openremote.model.security.RealmResource.getAll
+     * Returns one fully populated asset ruleset when the caller can access its realm and owning asset.
+     * HTTP GET /rules/asset/{id}
+     * Java method: org.openremote.model.rules.RulesResource.getAssetRuleset
      */
-    getAll(options?: O): RestResponse<Model.Realm[]>;
+    getAssetRuleset(id: number, options?: O): RestResponse<Model.AssetRuleset>;
     /**
-     * Returns only realm name and display name. Super users receive all realms; authenticated users receive their realm; anonymous callers receive the request realm.
-     * HTTP GET /realm/accessible
-     * Java method: org.openremote.model.security.RealmResource.getAccessible
+     * Replaces and redeploys one asset ruleset. The ID must match and an existing ruleset cannot be reassigned to another asset.
+     * HTTP PUT /rules/asset/{id}
+     * Java method: org.openremote.model.rules.RulesResource.updateAssetRuleset
      */
-    getAccessible(options?: O): RestResponse<Model.Realm[]>;
+    updateAssetRuleset(id: number, ruleset: Model.AssetRuleset, options?: O): RestResponse<void>;
     /**
-     * Permanently deletes a realm from the identity provider. The master realm cannot be deleted; related Manager data is not automatically removed.
-     * Response code 405 - The master realm cannot be deleted
-     * Response code 409 - Realm cannot be deleted while it still contains assets
-     * HTTP DELETE /realm/{name}
-     * Java method: org.openremote.model.security.RealmResource.delete
+     * Extracts geofence definitions relevant to the asset. Anonymous access requires a public-readable asset; authenticated restricted users require an asset link.
+     * HTTP GET /rules/geofences/{assetId}
+     * Java method: org.openremote.model.rules.RulesResource.getAssetGeofences
      */
-    delete(name: string, options?: O): RestResponse<void>;
+    getAssetGeofences(assetId: string, options?: O): RestResponse<Model.GeofenceDefinition[]>;
     /**
-     * Returns complete details for a named active realm when it is accessible to the caller. Regular users cannot use this endpoint to inspect other realms.
-     * HTTP GET /realm/{name}
-     * Java method: org.openremote.model.security.RealmResource.get
+     * Returns runtime status and error counts for an accessible asset engine. Returns null when the asset or its engine does not exist.
+     * Response code 204 - The asset or its rules engine does not exist
+     * HTTP GET /rules/info/asset/{assetId}
+     * Java method: org.openremote.model.rules.RulesResource.getAssetEngineInfo
      */
-    get(name: string, options?: O): RestResponse<Model.Realm>;
+    getAssetEngineInfo(assetId: string, options?: O): RestResponse<Model.RulesEngineInfo>;
     /**
-     * Updates a realm through the identity provider. Super-user access is required; the master realm cannot be renamed or disabled.
-     * Response code 405 - The requested mutation is not allowed for the master realm
-     * HTTP PUT /realm/{name}
-     * Java method: org.openremote.model.security.RealmResource.update
+     * Returns runtime status and compilation/execution error counts for the global engine, or null when that engine is not running. Super-user access is required.
+     * Response code 204 - The global rules engine is not running
+     * HTTP GET /rules/info/global
+     * Java method: org.openremote.model.rules.RulesResource.getGlobalEngineInfo
      */
-    update(name: string, realm: Model.Realm, options?: O): RestResponse<void>;
-}
-export declare class AssetPredictedDatapointResourceClient<O> {
-    protected httpClient: HttpClient<O>;
-    constructor(httpClient: HttpClient<O>);
+    getGlobalEngineInfo(options?: O): RestResponse<Model.RulesEngineInfo>;
     /**
-     * Queries predicted values for one attribute using the supplied time-range and aggregation criteria. Anonymous access requires public-read access on both asset and attribute.
-     * HTTP POST /asset/predicted/{assetId}/{attributeName}
-     * Java method: org.openremote.model.datapoint.AssetPredictedDatapointResource.getPredictedDatapoints
+     * Returns runtime status and error counts for an accessible realm engine, or null when that engine is not running. Restricted users cannot inspect realm engines.
+     * Response code 204 - The requested realm rules engine is not running
+     * HTTP GET /rules/info/realm/{realm}
+     * Java method: org.openremote.model.rules.RulesResource.getRealmEngineInfo
      */
-    getPredictedDatapoints(assetId: string, attributeName: string, query: Model.AssetDatapointQueryUnion, options?: O): RestResponse<Model.ValueDatapoint<any>[]>;
+    getRealmEngineInfo(realm: string, options?: O): RestResponse<Model.RulesEngineInfo>;
     /**
-     * Replaces or adds predicted values for one attribute. Anonymous access is allowed only when the asset and attribute are public-write; authenticated callers require attribute-write access.
-     * HTTP PUT /asset/predicted/{assetId}/{attributeName}
-     * Java method: org.openremote.model.datapoint.AssetPredictedDatapointResource.writePredictedDatapoints
+     * Creates and deploys a ruleset in its body realm and returns its numeric ID. Restricted users cannot create realm rulesets; legacy JavaScript is not accepted.
+     * HTTP POST /rules/realm
+     * Java method: org.openremote.model.rules.RulesResource.createRealmRuleset
      */
-    writePredictedDatapoints(assetId: string, attributeName: string, predictedDatapoints: Model.ValueDatapoint<any>[], options?: O): RestResponse<void>;
-}
-export declare class UserResourceClient<O> {
-    protected httpClient: HttpClient<O>;
-    constructor(httpClient: HttpClient<O>);
+    createRealmRuleset(ruleset: Model.RealmRuleset, options?: O): RestResponse<number>;
     /**
-     * Stores the supplied non-empty locale string as the caller's identity-provider locale attribute. The target realm must be active unless the caller is a superuser.
-     * HTTP PUT /user/locale
-     * Java method: org.openremote.model.security.UserResource.updateCurrentUserLocale
+     * Returns realm rulesets filtered by language. Anonymous, restricted, or callers without read-rules permission receive public rulesets only; fullyPopulate controls loading of rule source.
+     * HTTP GET /rules/realm/for/{realm}
+     * Java method: org.openremote.model.rules.RulesResource.getRealmRulesets
      */
-    updateCurrentUserLocale(locale: string, options?: O): RestResponse<void>;
+    getRealmRulesets(realm: string, queryParams?: {
+        language?: Model.RulesetLang[];
+        fullyPopulate?: boolean;
+    }, options?: O): RestResponse<Model.RealmRuleset[]>;
     /**
-     * Executes a UserQuery. Non-super users are forced into their authenticated realm and cannot see system accounts; callers with read-users but not read-admin receive basic fields only. The target realm must be active unless the caller is a superuser.
-     * HTTP POST /user/query
-     * Java method: org.openremote.model.security.UserResource.query
+     * Permanently removes and undeploys one ruleset from an accessible realm.
+     * HTTP DELETE /rules/realm/{id}
+     * Java method: org.openremote.model.rules.RulesResource.deleteRealmRuleset
      */
-    query(query: Model.UserQuery, options?: O): RestResponse<Model.User[]>;
+    deleteRealmRuleset(id: number, options?: O): RestResponse<void>;
     /**
-     * Initiates the identity provider's configured password-reset action for the caller's own account. The target realm must be active unless the caller is a superuser.
-     * HTTP PUT /user/request-password-reset
-     * Java method: org.openremote.model.security.UserResource.requestPasswordResetCurrent
+     * Returns one fully populated realm ruleset when its realm is accessible to the caller.
+     * HTTP GET /rules/realm/{id}
+     * Java method: org.openremote.model.rules.RulesResource.getRealmRuleset
      */
-    requestPasswordResetCurrent(options?: O): RestResponse<void>;
+    getRealmRuleset(id: number, options?: O): RestResponse<Model.RealmRuleset>;
     /**
-     * Replaces the caller's own identity-provider credential using the supplied credential representation. The target realm must be active unless the caller is a superuser.
-     * HTTP PUT /user/reset-password
-     * Java method: org.openremote.model.security.UserResource.updatePasswordCurrent
+     * Replaces and redeploys one realm ruleset. Path and body IDs and the existing realm must match; legacy JavaScript cannot be updated.
+     * HTTP PUT /rules/realm/{id}
+     * Java method: org.openremote.model.rules.RulesResource.updateRealmRuleset
      */
-    updatePasswordCurrent(credential: Model.Credential, options?: O): RestResponse<void>;
+    updateRealmRuleset(id: number, ruleset: Model.RealmRuleset, options?: O): RestResponse<void>;
     /**
-     * Updates the caller's own profile. A supplied user ID must match the access token; role and realm administration are not provided by this endpoint. The target realm must be active unless the caller is a superuser.
-     * HTTP PUT /user/update
-     * Java method: org.openremote.model.security.UserResource.updateCurrent
+     * Permanently removes and undeploys one global ruleset. Super-user access is required.
+     * HTTP DELETE /rules/{id}
+     * Java method: org.openremote.model.rules.RulesResource.deleteGlobalRuleset
      */
-    updateCurrent(user: Model.User, options?: O): RestResponse<Model.User>;
+    deleteGlobalRuleset(id: number, options?: O): RestResponse<void>;
     /**
-     * Returns the identity-provider record corresponding to the current access token. The target realm must be active unless the caller is a superuser.
-     * HTTP GET /user/user
-     * Java method: org.openremote.model.security.UserResource.getCurrent
+     * Returns one fully populated global ruleset including transient deployment status and errors. Super-user access is required.
+     * HTTP GET /rules/{id}
+     * Java method: org.openremote.model.rules.RulesResource.getGlobalRuleset
      */
-    getCurrent(options?: O): RestResponse<Model.User>;
+    getGlobalRuleset(id: number, options?: O): RestResponse<Model.GlobalRuleset>;
     /**
-     * Returns realm-level role names assigned to the caller. The target realm must be active unless the caller is a superuser.
-     * HTTP GET /user/userRealmRoles
-     * Java method: org.openremote.model.security.UserResource.getCurrentUserRealmRoles
+     * Replaces and redeploys the identified global ruleset. Path and body IDs must match; legacy JavaScript rulesets cannot be updated.
+     * HTTP PUT /rules/{id}
+     * Java method: org.openremote.model.rules.RulesResource.updateGlobalRuleset
      */
-    getCurrentUserRealmRoles(options?: O): RestResponse<string[]>;
+    updateGlobalRuleset(id: number, ruleset: Model.GlobalRuleset, options?: O): RestResponse<void>;
+}
+export declare class GatewayServiceResourceClient<O> {
+    protected httpClient: HttpClient<O>;
+    constructor(httpClient: HttpClient<O>);
     /**
-     * Returns role names assigned to the caller for the named identity-provider client. The target realm must be active unless the caller is a superuser.
-     * HTTP GET /user/userRoles/{clientId}
-     * Java method: org.openremote.model.security.UserResource.getCurrentUserClientRoles
+     * Requests a TCP tunnel through a connected gateway and returns its allocated local endpoint. When realm is omitted, the authenticated realm is used.
+     * Response code 417 - The gateway could not establish the requested tunnel
+     * HTTP POST /gateway/tunnel
+     * Java method: org.openremote.model.gateway.GatewayServiceResource.startTunnel
      */
-    getCurrentUserClientRoles(clientId: string, options?: O): RestResponse<string[]>;
+    startTunnel(tunnelInfo: Model.GatewayTunnelInfo, options?: O): RestResponse<Model.GatewayTunnelInfo>;
     /**
-     * Terminates the active MQTT connection identified by sessionID. The realm must match the session owner's realm. Authenticated users may disconnect their own sessions without an additional client role. Disconnecting another user's session requires the openremote client role write:admin or superuser status. Non-superusers are limited to their own active realm; superusers may disconnect sessions across realms, including inactive realms.
-     * Response code 403 - The realm is inactive for a non-superuser, or the caller is neither the session owner, a user with write:admin, nor a superuser
-     * Response code 404 - The session or its owning user does not exist, or the session does not belong to the specified realm
-     * Response code 405 - A non-superuser cannot access the session owner's realm
-     * HTTP DELETE /user/{realm}/disconnect/{sessionID}
-     * Java method: org.openremote.model.security.UserResource.disconnectUserSession
+     * Stops the tunnel identified by the supplied gateway, target, and port information. When realm is omitted, the authenticated realm is used.
+     * HTTP DELETE /gateway/tunnel
+     * Java method: org.openremote.model.gateway.GatewayServiceResource.stopTunnel
      */
-    disconnectUserSession(realm: string, sessionID: string, options?: O): RestResponse<void>;
+    stopTunnel(tunnelInfo: Model.GatewayTunnelInfo, options?: O): RestResponse<void>;
     /**
-     * Asks the identity provider to send or initiate its configured password-reset action for the specified user. The target realm must be active unless the caller is a superuser.
-     * Response code 405 - The caller cannot mutate a user in the requested realm
-     * HTTP PUT /user/{realm}/request-password-reset/{userId}
-     * Java method: org.openremote.model.security.UserResource.requestPasswordReset
+     * Returns active tunnels for all gateway assets in the requested realm. Restricted users cannot list an entire realm.
+     * HTTP GET /gateway/tunnel/{realm}
+     * Java method: org.openremote.model.gateway.GatewayServiceResource.getAllActiveTunnelInfos
      */
-    requestPasswordReset(realm: string, userId: string, options?: O): RestResponse<void>;
+    getAllActiveTunnelInfos(realm: string, options?: O): RestResponse<Model.GatewayTunnelInfo[]>;
     /**
-     * Replaces a user's credential in an administered realm using the supplied credential representation. The target realm must be active unless the caller is a superuser.
-     * Response code 405 - The caller cannot mutate a user in the requested realm
-     * HTTP PUT /user/{realm}/reset-password/{userId}
-     * Java method: org.openremote.model.security.UserResource.updatePassword
+     * Returns active tunnels for one gateway asset. Restricted users may query only a linked gateway.
+     * HTTP GET /gateway/tunnel/{realm}/{id}
+     * Java method: org.openremote.model.gateway.GatewayServiceResource.getGatewayActiveTunnelInfos
      */
-    updatePassword(realm: string, userId: string, credential: Model.Credential, options?: O): RestResponse<void>;
+    getGatewayActiveTunnelInfos(realm: string, id: string, options?: O): RestResponse<Model.GatewayTunnelInfo[]>;
     /**
-     * Generates and returns a new client secret for a service user in an administered realm. The target realm must be active unless the caller is a superuser.
-     * HTTP GET /user/{realm}/reset-secret/{userId}
-     * Java method: org.openremote.model.security.UserResource.resetSecret
+     * Returns the tunnel matching realm, gateway, target host, and target port, or null when no active tunnel matches.
+     * Response code 204 - No active tunnel matches the requested endpoint
+     * HTTP GET /gateway/tunnel/{realm}/{id}/{target}/{targetPort}
+     * Java method: org.openremote.model.gateway.GatewayServiceResource.getActiveTunnelInfo
      */
-    resetSecret(realm: string, userId: string, options?: O): RestResponse<string>;
+    getActiveTunnelInfo(realm: string, id: string, target: string, targetPort: number, options?: O): RestResponse<Model.GatewayTunnelInfo>;
+}
+export declare class RealmResourceClient<O> {
+    protected httpClient: HttpClient<O>;
+    constructor(httpClient: HttpClient<O>);
     /**
-     * Creates, updates, or removes role definitions for the default OpenRemote client in the requested realm. The target realm must be active unless the caller is a superuser.
-     * HTTP PUT /user/{realm}/roles
-     * Java method: org.openremote.model.security.UserResource.updateRoles
+     * Creates and configures a realm in the identity provider. This operation is restricted to a super user.
+     * HTTP POST /realm
+     * Java method: org.openremote.model.security.RealmResource.create
      */
-    updateRoles(realm: string, roles: Model.Role[], options?: O): RestResponse<void>;
+    create(realm: Model.Realm, options?: O): RestResponse<void>;
     /**
-     * Returns realm-level role names assigned to one user. Without read-admin permission, callers may retrieve only their own roles. The target realm must be active unless the caller is a superuser.
-     * HTTP GET /user/{realm}/userRealmRoles/{userId}
-     * Java method: org.openremote.model.security.UserResource.getUserRealmRoles
+     * Returns complete realm records from the identity provider. This operation is restricted to a super user.
+     * HTTP GET /realm
+     * Java method: org.openremote.model.security.RealmResource.getAll
      */
-    getUserRealmRoles(realm: string, userId: string, options?: O): RestResponse<string[]>;
+    getAll(options?: O): RestResponse<Model.Realm[]>;
     /**
-     * Replaces the user's assigned realm-level role names in an administered realm. The target realm must be active unless the caller is a superuser.
-     * HTTP PUT /user/{realm}/userRealmRoles/{userId}
-     * Java method: org.openremote.model.security.UserResource.updateUserRealmRoles
+     * Returns only realm name and display name. Super users receive all realms; authenticated users receive their realm; anonymous callers receive the request realm.
+     * HTTP GET /realm/accessible
+     * Java method: org.openremote.model.security.RealmResource.getAccessible
      */
-    updateUserRealmRoles(realm: string, userId: string, roles: string[], options?: O): RestResponse<void>;
+    getAccessible(options?: O): RestResponse<Model.Realm[]>;
     /**
-     * Returns role names assigned to one user for the named client. Without read-admin permission, callers may retrieve only their own roles. The target realm must be active unless the caller is a superuser.
-     * HTTP GET /user/{realm}/userRoles/{userId}/{clientId}
-     * Java method: org.openremote.model.security.UserResource.getUserClientRoles
+     * Permanently deletes a realm from the identity provider. The master realm cannot be deleted; related Manager data is not automatically removed.
+     * Response code 405 - The master realm cannot be deleted
+     * Response code 409 - Realm cannot be deleted while it still contains assets
+     * HTTP DELETE /realm/{name}
+     * Java method: org.openremote.model.security.RealmResource.delete
      */
-    getUserClientRoles(realm: string, userId: string, clientId: string, options?: O): RestResponse<string[]>;
+    delete(name: string, options?: O): RestResponse<void>;
     /**
-     * Replaces the user's assigned role names for the named client in an administered realm. The target realm must be active unless the caller is a superuser.
-     * HTTP PUT /user/{realm}/userRoles/{userId}/{clientId}
-     * Java method: org.openremote.model.security.UserResource.updateUserClientRoles
+     * Returns complete details for a named active realm when it is accessible to the caller. Regular users cannot use this endpoint to inspect other realms.
+     * HTTP GET /realm/{name}
+     * Java method: org.openremote.model.security.RealmResource.get
      */
-    updateUserClientRoles(realm: string, userId: string, clientId: string, roles: string[], options?: O): RestResponse<void>;
+    get(name: string, options?: O): RestResponse<Model.Realm>;
     /**
-     * Returns active MQTT sessions for one user, including connection ID, creation time, and remote address. Without read-admin permission, callers may inspect only themselves. The target realm must be active unless the caller is a superuser.
-     * HTTP GET /user/{realm}/userSessions/{userId}
-     * Java method: org.openremote.model.security.UserResource.getUserSessions
+     * Updates a realm through the identity provider. Super-user access is required; the master realm cannot be renamed or disabled.
+     * Response code 405 - The requested mutation is not allowed for the master realm
+     * HTTP PUT /realm/{name}
+     * Java method: org.openremote.model.security.RealmResource.update
      */
-    getUserSessions(realm: string, userId: string, options?: O): RestResponse<Model.UserSession[]>;
+    update(name: string, realm: Model.Realm, options?: O): RestResponse<void>;
+}
+export declare class AssetPredictedDatapointResourceClient<O> {
+    protected httpClient: HttpClient<O>;
+    constructor(httpClient: HttpClient<O>);
     /**
-     * Creates an identity-provider user in a realm administered by the caller and returns the resulting user record. The target realm must be active unless the caller is a superuser.
-     * HTTP POST /user/{realm}/users
-     * Java method: org.openremote.model.security.UserResource.create
+     * Queries predicted values for one attribute using the supplied time-range and aggregation criteria. Anonymous access requires public-read access on both asset and attribute.
+     * HTTP POST /asset/predicted/{assetId}/{attributeName}
+     * Java method: org.openremote.model.datapoint.AssetPredictedDatapointResource.getPredictedDatapoints
      */
-    create(realm: string, user: Model.User, options?: O): RestResponse<Model.User>;
+    getPredictedDatapoints(assetId: string, attributeName: string, query: Model.AssetDatapointQueryUnion, options?: O): RestResponse<Model.ValueDatapoint<any>[]>;
     /**
-     * Updates an existing identity-provider user in an administered realm. The master administrator cannot be disabled. The target realm must be active unless the caller is a superuser.
-     * Response code 405 - The requested cross-realm or protected master-administrator mutation is not allowed
-     * HTTP PUT /user/{realm}/users
-     * Java method: org.openremote.model.security.UserResource.update
+     * Replaces or adds predicted values for one attribute. Anonymous access is allowed only when the asset and attribute are public-write; authenticated callers require attribute-write access.
+     * HTTP PUT /asset/predicted/{assetId}/{attributeName}
+     * Java method: org.openremote.model.datapoint.AssetPredictedDatapointResource.writePredictedDatapoints
      */
-    update(realm: string, user: Model.User, options?: O): RestResponse<Model.User>;
+    writePredictedDatapoints(assetId: string, attributeName: string, predictedDatapoints: Model.ValueDatapoint<any>[], options?: O): RestResponse<void>;
+}
+export declare class ConfigurationResourceClient<O> {
+    protected httpClient: HttpClient<O>;
+    constructor(httpClient: HttpClient<O>);
     /**
-     * Permanently deletes a user from an administered realm. The master-realm administrator cannot be deleted. The target realm must be active unless the caller is a superuser.
-     * Response code 405 - The master-realm administrator cannot be deleted
-     * HTTP DELETE /user/{realm}/users/{userId}
-     * Java method: org.openremote.model.security.UserResource.delete
+     * Returns the public Manager application configuration used by clients before and after authentication.
+     * HTTP GET /configuration/manager
+     * Java method: org.openremote.model.manager.ConfigurationResource.getManagerConfig
      */
-    delete(realm: string, userId: string, options?: O): RestResponse<void>;
+    getManagerConfig(options?: O): RestResponse<Model.ManagerAppConfig>;
     /**
-     * Returns all role definitions exposed by the named identity-provider client. Realm-administrator access is required. The target realm must be active unless the caller is a superuser.
-     * HTTP GET /user/{realm}/{clientId}/roles
-     * Java method: org.openremote.model.security.UserResource.getClientRoles
+     * Replaces manager_config.json and returns the stored configuration. This administrative change affects Manager UI branding and behavior. This operation is restricted to a super administrator.
+     * HTTP PUT /configuration/manager
+     * Java method: org.openremote.model.manager.ConfigurationResource.update
      */
-    getClientRoles(realm: string, clientId: string, options?: O): RestResponse<Model.Role[]>;
+    update(managerConfiguration: Model.ManagerAppConfig, options?: O): RestResponse<Model.ManagerAppConfig>;
     /**
-     * Creates, updates, or removes role definitions for a named identity-provider client. The target realm must be active unless the caller is a superuser.
-     * HTTP PUT /user/{realm}/{clientId}/roles
-     * Java method: org.openremote.model.security.UserResource.updateClientRoles
+     * Validates and stores the supplied image FileInfo at the requested relative path, replacing an existing image, then returns its Manager API path. This operation is restricted to a super administrator.
+     * HTTP POST /configuration/manager/image
+     * Java method: org.openremote.model.manager.ConfigurationResource.imageUpload
      */
-    updateClientRoles(realm: string, clientId: string, roles: Model.Role[], options?: O): RestResponse<void>;
+    imageUpload(fileInfo: Model.FileInfo, queryParams?: {
+        path?: string;
+    }, options?: O): RestResponse<string>;
     /**
-     * Returns one user when it belongs to the requested accessible realm. Without read-admin permission, callers may retrieve only their own user. The target realm must be active unless the caller is a superuser.
-     * HTTP GET /user/{realm}/{userId}
-     * Java method: org.openremote.model.security.UserResource.get
+     * Streams a configuration image using a fixed media type determined by its filename extension. Only png, jpg, jpeg, ico, and svg extensions are served, ignoring case; unsupported extensions return 404.
+     * Response code 200 - The image file
+     * HTTP GET /configuration/manager/image/{filename: .+}
+     * Java method: org.openremote.model.manager.ConfigurationResource.getManagerConfigImage
      */
-    get(realm: string, userId: string, options?: O): RestResponse<Model.User>;
+    getManagerConfigImage(filename: string, options?: O): RestResponse<any>;
 }
 export declare class NotificationResourceClient<O> {
     protected httpClient: HttpClient<O>;
@@ -925,300 +1049,176 @@ export declare class NotificationResourceClient<O> {
         source?: Model.NotificationSource;
     }, options?: O): RestResponse<number>;
     /**
-     * Permanently removes one sent-notification record. This operation is restricted to a super user and is idempotent when the ID does not exist.
-     * HTTP DELETE /notification/{notificationId}
-     * Java method: org.openremote.model.notification.NotificationResource.removeNotification
-     */
-    removeNotification(notificationId: number, options?: O): RestResponse<void>;
-    /**
-     * Marks one target's notification as acknowledged and stores the optional JSON acknowledgement value. Access rules are identical to notificationDelivered.
-     * HTTP PUT /notification/{notificationId}/acknowledged
-     * Java method: org.openremote.model.notification.NotificationResource.notificationAcknowledged
-     */
-    notificationAcknowledged(notificationId: number, acknowledgement: any, queryParams?: {
-        targetId?: string;
-    }, options?: O): RestResponse<void>;
-    /**
-     * Marks one target's notification as delivered after matching both notificationId and targetId. Anonymous callers may update notifications sent to a public asset; authenticated callers are constrained to their own user, realm, or accessible assets.
-     * HTTP PUT /notification/{notificationId}/delivered
-     * Java method: org.openremote.model.notification.NotificationResource.notificationDelivered
-     */
-    notificationDelivered(notificationId: number, queryParams?: {
-        targetId?: string;
-    }, options?: O): RestResponse<void>;
-}
-export declare class MapResourceClient<O> {
-    protected httpClient: HttpClient<O>;
-    constructor(httpClient: HttpClient<O>);
-    /**
-     * Returns realm-aware public MapLibre settings with externally reachable URLs derived from proxy headers.
-     * HTTP GET /map
-     * Java method: org.openremote.model.map.MapResource.getSettings
-     */
-    getSettings(options?: O): RestResponse<{
-        [id: string]: unknown;
-    }>;
-    /**
-     * Stores the map configuration and returns the resulting public MapLibre settings. This operation is restricted to a super administrator.
-     * HTTP PUT /map
-     * Java method: org.openremote.model.map.MapResource.saveSettings
-     */
-    saveSettings(mapConfig: Model.MapConfig, options?: O): RestResponse<{
-        [id: string]: unknown;
-    }>;
-    /**
-     * Deletes the installed custom MBTiles database and returns the fallback public map settings. This operation is restricted to a super administrator.
-     * HTTP DELETE /map/deleteMap
-     * Java method: org.openremote.model.map.MapResource.deleteMap
-     */
-    deleteMap(options?: O): RestResponse<{
-        [id: string]: unknown;
-    }>;
-    /**
-     * Reports whether custom MBTiles data is installed and the maximum accepted upload size.
-     * HTTP GET /map/getCustomMapInfo
-     * Java method: org.openremote.model.map.MapResource.getCustomMapInfo
-     */
-    getCustomMapInfo(options?: O): RestResponse<{
-        [id: string]: unknown;
-    }>;
-    /**
-     * Returns a pre-compressed Mapbox vector tile for the requested zoom, column, and row coordinates.
-     * Response code 200 - Gzip-compressed vector tile
-     * Response code 204 - No tile exists at the requested coordinates
-     * HTTP GET /map/tile/{zoom}/{column}/{row}
-     * Java method: org.openremote.model.map.MapResource.getTile
-     */
-    getTile(zoom: number, column: number, row: number, options?: O): RestResponse<any>;
-    /**
-     * Stores the raw request body as the realm's custom MBTiles database and returns the resulting public map settings. This operation is restricted to a super administrator.
-     * HTTP POST /map/upload
-     * Java method: org.openremote.model.map.MapResource.uploadMap
-     */
-    uploadMap(queryParams?: {
-        filename?: string;
-    }, options?: O): RestResponse<{
-        [id: string]: unknown;
-    }>;
-}
-export declare class ConfigurationResourceClient<O> {
-    protected httpClient: HttpClient<O>;
-    constructor(httpClient: HttpClient<O>);
-    /**
-     * Returns the public Manager application configuration used by clients before and after authentication.
-     * HTTP GET /configuration/manager
-     * Java method: org.openremote.model.manager.ConfigurationResource.getManagerConfig
-     */
-    getManagerConfig(options?: O): RestResponse<Model.ManagerAppConfig>;
-    /**
-     * Replaces manager_config.json and returns the stored configuration. This administrative change affects Manager UI branding and behavior. This operation is restricted to a super administrator.
-     * HTTP PUT /configuration/manager
-     * Java method: org.openremote.model.manager.ConfigurationResource.update
-     */
-    update(managerConfiguration: Model.ManagerAppConfig, options?: O): RestResponse<Model.ManagerAppConfig>;
-    /**
-     * Validates and stores the supplied image FileInfo at the requested relative path, replacing an existing image, then returns its Manager API path. This operation is restricted to a super administrator.
-     * HTTP POST /configuration/manager/image
-     * Java method: org.openremote.model.manager.ConfigurationResource.imageUpload
-     */
-    imageUpload(fileInfo: Model.FileInfo, queryParams?: {
-        path?: string;
-    }, options?: O): RestResponse<string>;
-    /**
-     * Streams a configuration image using a fixed media type determined by its filename extension. Only png, jpg, jpeg, ico, and svg extensions are served, ignoring case; unsupported extensions return 404.
-     * Response code 200 - The image file
-     * HTTP GET /configuration/manager/image/{filename: .+}
-     * Java method: org.openremote.model.manager.ConfigurationResource.getManagerConfigImage
-     */
-    getManagerConfigImage(filename: string, options?: O): RestResponse<any>;
-}
-export declare class AssetResourceClient<O> {
-    protected httpClient: HttpClient<O>;
-    constructor(httpClient: HttpClient<O>);
-    /**
-     * Creates an asset in an accessible realm and returns the persisted representation. The server generates an ID when absent; supplied IDs must be globally unique and 22 characters long.
-     * HTTP POST /asset
-     * Java method: org.openremote.model.asset.AssetResource.create
-     */
-    create(asset: Model.Asset, options?: O): RestResponse<Model.Asset>;
-    /**
-     * Permanently deletes every asset identified by repeated assetId query parameters, subject to realm and restricted-user access rules.
-     * HTTP DELETE /asset
-     * Java method: org.openremote.model.asset.AssetResource.delete
-     */
-    delete(queryParams?: {
-        assetId?: string[];
-    }, options?: O): RestResponse<void>;
-    /**
-     * Submits a batch of attribute states using current server time and returns one result per input item. Authorization and processing failures are encoded in each AttributeWriteResult rather than returned as an HTTP error.
-     * HTTP PUT /asset/attributes
-     * Java method: org.openremote.model.asset.AssetResource.writeAttributeValues
-     */
-    writeAttributeValues(attributeStates: Model.AttributeState[], options?: O): RestResponse<Model.AttributeWriteResult[]>;
-    /**
-     * Submits a batch of complete attribute events and returns one result per input item. Supplied timestamps are preserved; authorization and processing failures are encoded per result rather than returned as an HTTP error.
-     * HTTP PUT /asset/attributes/timestamp
-     * Java method: org.openremote.model.asset.AssetResource.writeAttributeEvents
-     */
-    writeAttributeEvents(attributeEvents: Model.AttributeEvent[], options?: O): RestResponse<Model.AttributeWriteResult[]>;
-    /**
-     * Returns only the number of assets matching an AssetQuery after applying the caller's realm, public, and linked-asset access constraints.
-     * HTTP POST /asset/count
-     * Java method: org.openremote.model.asset.AssetResource.queryCount
-     */
-    queryCount(query: Model.AssetQuery, options?: O): RestResponse<number>;
-    /**
-     * Clears the parent reference of every asset listed in repeated assetIds query parameters.
-     * HTTP DELETE /asset/parent
-     * Java method: org.openremote.model.asset.AssetResource.updateNoneParent
-     */
-    updateNoneParent(queryParams?: {
-        assetIds?: string[];
-    }, options?: O): RestResponse<void>;
-    /**
-     * Returns the asset identity and properties without loading attributes or path data. The same access rules as getAsset apply.
-     * HTTP GET /asset/partial/{assetId}
-     * Java method: org.openremote.model.asset.AssetResource.getPartial
-     */
-    getPartial(assetId: string, options?: O): RestResponse<Model.Asset>;
-    /**
-     * Executes an AssetQuery after constraining realm and linked-asset access. Anonymous callers receive public-readable assets only; the query select clause controls which fields are populated.
-     * HTTP POST /asset/query
-     * Java method: org.openremote.model.asset.AssetResource.queryAssets
+     * Permanently removes one sent-notification record. This operation is restricted to a super user and is idempotent when the ID does not exist.
+     * HTTP DELETE /notification/{notificationId}
+     * Java method: org.openremote.model.notification.NotificationResource.removeNotification
      */
-    queryAssets(query: Model.AssetQuery, options?: O): RestResponse<Model.Asset[]>;
+    removeNotification(notificationId: number, options?: O): RestResponse<void>;
     /**
-     * Applies the same authorization and selection rules as queryAssets, then returns a hierarchy optimized for tree display rather than a flat asset array.
-     * HTTP POST /asset/tree
-     * Java method: org.openremote.model.asset.AssetResource.queryAssetTree
+     * Marks one target's notification as acknowledged and stores the optional JSON acknowledgement value. Access rules are identical to notificationDelivered.
+     * HTTP PUT /notification/{notificationId}/acknowledged
+     * Java method: org.openremote.model.notification.NotificationResource.notificationAcknowledged
      */
-    queryAssetTree(query: Model.AssetQuery, options?: O): RestResponse<Model.AssetTree>;
+    notificationAcknowledged(notificationId: number, acknowledgement: any, queryParams?: {
+        targetId?: string;
+    }, options?: O): RestResponse<void>;
     /**
-     * Returns partial linked assets for a restricted user, root assets for an unrestricted realm user, and an empty array for a super user. Attributes and paths are omitted; use getAsset for full details.
-     * HTTP GET /asset/user/current
-     * Java method: org.openremote.model.asset.AssetResource.getCurrentUserAssets
+     * Marks one target's notification as delivered after matching both notificationId and targetId. Anonymous callers may update notifications sent to a public asset; authenticated callers are constrained to their own user, realm, or accessible assets.
+     * HTTP PUT /notification/{notificationId}/delivered
+     * Java method: org.openremote.model.notification.NotificationResource.notificationDelivered
      */
-    getCurrentUserAssets(options?: O): RestResponse<Model.Asset[]>;
+    notificationDelivered(notificationId: number, queryParams?: {
+        targetId?: string;
+    }, options?: O): RestResponse<void>;
+}
+export declare class AlarmResourceClient<O> {
+    protected httpClient: HttpClient<O>;
+    constructor(httpClient: HttpClient<O>);
     /**
-     * Creates all supplied links as one operation. Every item must identify the same realm and user, and every referenced realm, user, and asset must exist.
-     * HTTP POST /asset/user/link
-     * Java method: org.openremote.model.asset.AssetResource.createUserAssetLinks
+     * Creates a manual alarm in an accessible realm and optionally links it to the supplied asset IDs. The authenticated user or client becomes the alarm source.
+     * HTTP POST /alarm
+     * Java method: org.openremote.model.alarm.AlarmResource.createAlarm
      */
-    createUserAssetLinks(userAssets: Model.UserAssetLink[], options?: O): RestResponse<void>;
+    createAlarm(alarm: Model.Alarm, queryParams?: {
+        assetIds?: string[];
+    }, options?: O): RestResponse<Model.SentAlarm>;
     /**
-     * Returns user-asset links in the required realm, optionally filtered by userId and assetId. Missing users or assets produce an empty result; restricted users cannot call this operation.
-     * HTTP GET /asset/user/link
-     * Java method: org.openremote.model.asset.AssetResource.getUserAssetLinks
+     * Returns alarms in the requested accessible realm, optionally filtered by status, linked asset, or assignee. When realm is omitted, the authenticated realm is used.
+     * HTTP GET /alarm
+     * Java method: org.openremote.model.alarm.AlarmResource.getAlarms
      */
-    getUserAssetLinks(queryParams?: {
+    getAlarms(queryParams?: {
         realm?: string;
-        userId?: string;
+        status?: Model.AlarmStatus;
         assetId?: string;
-    }, options?: O): RestResponse<Model.UserAssetLink[]>;
+        assigneeId?: string;
+    }, options?: O): RestResponse<Model.SentAlarm[]>;
     /**
-     * Removes all supplied links. Every item must identify the same realm and user.
-     * HTTP POST /asset/user/link/delete
-     * Java method: org.openremote.model.asset.AssetResource.deleteUserAssetLinks
+     * Permanently removes all alarms identified by the request body after verifying access to every alarm's realm.
+     * HTTP DELETE /alarm
+     * Java method: org.openremote.model.alarm.AlarmResource.removeAlarms
      */
-    deleteUserAssetLinks(userAssets: Model.UserAssetLink[], options?: O): RestResponse<void>;
+    removeAlarms(ids: number[], options?: O): RestResponse<void>;
     /**
-     * Removes every asset link belonging to the user in the requested realm.
-     * HTTP DELETE /asset/user/link/{realm}/{userId}
-     * Java method: org.openremote.model.asset.AssetResource.deleteAllUserAssetLinks
+     * Adds links between assets and one existing alarm.
+
+The request body is a list for backward compatibility, but this operation now has single-alarm semantics:
+every item must contain the same `id.realm` and the same `id.alarmId`. The alarm must exist in that realm,
+every asset must exist in the same realm, and the authenticated user must have access to that realm. Requests
+containing mixed alarm IDs or realms are rejected as bad requests.
+
+Existing links are left unchanged; duplicate links in the request or links that already exist are ignored.
+This operation does not remove existing links from the alarm.
+
+     * HTTP PUT /alarm/assets
+     * Java method: org.openremote.model.alarm.AlarmResource.setAssetLinks
      */
-    deleteAllUserAssetLinks(realm: string, userId: string, options?: O): RestResponse<void>;
+    setAssetLinks(links: Model.AlarmAssetLink[], options?: O): RestResponse<void>;
     /**
-     * Removes the link identified by realm, user, and asset. The caller must be allowed to administer asset links in that realm.
-     * HTTP DELETE /asset/user/link/{realm}/{userId}/{assetId}
-     * Java method: org.openremote.model.asset.AssetResource.deleteUserAssetLink
+     * Returns one alarm when its realm is active and accessible to the authenticated user.
+     * HTTP GET /alarm/{alarmId}
+     * Java method: org.openremote.model.alarm.AlarmResource.getAlarm
      */
-    deleteUserAssetLink(realm: string, userId: string, assetId: string, options?: O): RestResponse<void>;
+    getAlarm(alarmId: number, options?: O): RestResponse<Model.SentAlarm>;
     /**
-     * Returns a fully loaded asset including its path and attributes. Access is constrained to the caller's realm and, for restricted users, linked assets.
-     * HTTP GET /asset/{assetId}
-     * Java method: org.openremote.model.asset.AssetResource.get
+     * Permanently removes one alarm after verifying access to its realm.
+     * HTTP DELETE /alarm/{alarmId}
+     * Java method: org.openremote.model.alarm.AlarmResource.removeAlarm
      */
-    get(assetId: string, options?: O): RestResponse<Model.Asset>;
+    removeAlarm(alarmId: number, options?: O): RestResponse<void>;
     /**
-     * Replaces mutable asset data while preserving the path identifier. Realm, parent, restricted-user, and private-metadata rules are validated; disallowed restricted-user fields may be ignored.
-     * HTTP PUT /asset/{assetId}
-     * Java method: org.openremote.model.asset.AssetResource.update
+     * Updates the mutable state of an existing alarm after verifying access to its current realm.
+     * HTTP PUT /alarm/{alarmId}
+     * Java method: org.openremote.model.alarm.AlarmResource.updateAlarm
      */
-    update(assetId: string, asset: Model.Asset, options?: O): RestResponse<Model.Asset>;
+    updateAlarm(alarmId: number, alarm: Model.SentAlarm, options?: O): RestResponse<void>;
     /**
-     * Submits an asynchronous attribute write using the current server time. The result reports whether the event was accepted, not whether downstream processing ultimately succeeded. Anonymous writes require public-write metadata.
-     * Response code 400 - The attribute write failed
-     * Response code 406 - The supplied value is not valid for the attribute
-     * Response code 429 - The attribute event queue is full; retry the write later
-     * HTTP PUT /asset/{assetId}/attribute/{attributeName}
-     * Java method: org.openremote.model.asset.AssetResource.writeAttributeValue
+     * Returns links from the alarm to assets in the explicitly supplied accessible realm.
+     * HTTP GET /alarm/{alarmId}/assets
+     * Java method: org.openremote.model.alarm.AlarmResource.getAssetLinks
      */
-    writeAttributeValue$PUT$asset_assetId_attribute_attributeName(assetId: string, attributeName: string, value: any, options?: O): RestResponse<Model.AttributeWriteResult>;
+    getAssetLinks(alarmId: number, queryParams?: {
+        realm?: string;
+    }, options?: O): RestResponse<Model.AlarmAssetLink[]>;
+}
+export declare class AgentResourceClient<O> {
+    protected httpClient: HttpClient<O>;
+    constructor(httpClient: HttpClient<O>);
     /**
-     * Submits an asynchronous attribute write using the supplied Unix timestamp in milliseconds. The result reports acceptance only; anonymous writes require public-write metadata.
-     * Response code 400 - The attribute write failed
-     * Response code 406 - The supplied value is not valid for the attribute
-     * Response code 429 - The attribute event queue is full; retry the write later
-     * HTTP PUT /asset/{assetId}/attribute/{attributeName}/{timestamp}
-     * Java method: org.openremote.model.asset.AssetResource.writeAttributeValue
+     * Runs the agent protocol's asset discovery, waits up to ten seconds for results, returns the discovered tree, and asynchronously persists discovered assets below the agent.
+     * HTTP GET /agent/assetDiscovery/{agentId}
+     * Java method: org.openremote.model.asset.agent.AgentResource.doProtocolAssetDiscovery
      */
-    writeAttributeValue$PUT$asset_assetId_attribute_attributeName_timestamp(assetId: string, attributeName: string, timestamp: number, value: any, options?: O): RestResponse<Model.AttributeWriteResult>;
+    doProtocolAssetDiscovery(agentId: string, queryParams?: {
+        realm?: string;
+    }, options?: O): RestResponse<Model.AssetTreeNode[]>;
     /**
-     * Sets parentAssetId as the parent of every asset listed in repeated assetIds query parameters. Parent and children must satisfy realm, access, and hierarchy constraints.
-     * HTTP PUT /asset/{parentAssetId}/child
-     * Java method: org.openremote.model.asset.AssetResource.updateParent
+     * Decodes the supplied FileInfo, asks the agent protocol to import it, persists the returned asset tree below the agent, and returns that tree.
+     * Response code 405 - The selected agent protocol does not support asset import
+     * HTTP POST /agent/assetImport/{agentId}
+     * Java method: org.openremote.model.asset.agent.AgentResource.doProtocolAssetImport
      */
-    updateParent(parentAssetId: string, queryParams?: {
-        assetIds?: string[];
-    }, options?: O): RestResponse<void>;
+    doProtocolAssetImport(agentId: string, fileInfo: Model.FileInfo, queryParams?: {
+        realm?: string;
+    }, options?: O): RestResponse<Model.AssetTreeNode[]>;
+    /**
+     * Runs instance discovery for an agent type and returns candidate Agent assets. parentId selects local versus edge-gateway discovery; non-super users are always constrained to their authenticated realm.
+     * Response code 415 - The selected agent protocol does not support instance discovery
+     * HTTP GET /agent/instanceDiscovery/{agentType}
+     * Java method: org.openremote.model.asset.agent.AgentResource.doProtocolInstanceDiscovery
+     */
+    doProtocolInstanceDiscovery(agentType: string, queryParams?: {
+        parentId?: string;
+        realm?: string;
+    }, options?: O): RestResponse<Model.Agent[]>;
 }
 export type RestResponse<R> = Promise<Axios.GenericAxiosResponse<R>>;
 export declare class ApiClient {
-    protected _gatewayServiceResource: AxiosGatewayServiceResourceClient;
-    protected _assetModelResource: AxiosAssetModelResourceClient;
-    protected _gatewayClientResource: AxiosGatewayClientResourceClient;
-    protected _rulesResource: AxiosRulesResourceClient;
-    protected _consoleResource: AxiosConsoleResourceClient;
-    protected _appResource: AxiosAppResourceClient;
-    protected _externalServiceResource: AxiosExternalServiceResourceClient;
-    protected _agentResource: AxiosAgentResourceClient;
+    protected _flowResource: AxiosFlowResourceClient;
     protected _syslogResource: AxiosSyslogResourceClient;
-    protected _alarmResource: AxiosAlarmResourceClient;
     protected _provisioningResource: AxiosProvisioningResourceClient;
+    protected _dashboardResource: AxiosDashboardResourceClient;
+    protected _externalServiceResource: AxiosExternalServiceResourceClient;
+    protected _gatewayClientResource: AxiosGatewayClientResourceClient;
+    protected _assetResource: AxiosAssetResourceClient;
     protected _statusResource: AxiosStatusResourceClient;
-    protected _flowResource: AxiosFlowResourceClient;
+    protected _userResource: AxiosUserResourceClient;
+    protected _mapResource: AxiosMapResourceClient;
+    protected _assetModelResource: AxiosAssetModelResourceClient;
+    protected _appResource: AxiosAppResourceClient;
     protected _assetDatapointResource: AxiosAssetDatapointResourceClient;
-    protected _dashboardResource: AxiosDashboardResourceClient;
+    protected _consoleResource: AxiosConsoleResourceClient;
+    protected _rulesResource: AxiosRulesResourceClient;
+    protected _gatewayServiceResource: AxiosGatewayServiceResourceClient;
     protected _realmResource: AxiosRealmResourceClient;
     protected _assetPredictedDatapointResource: AxiosAssetPredictedDatapointResourceClient;
-    protected _userResource: AxiosUserResourceClient;
-    protected _notificationResource: AxiosNotificationResourceClient;
-    protected _mapResource: AxiosMapResourceClient;
     protected _configurationResource: AxiosConfigurationResourceClient;
-    protected _assetResource: AxiosAssetResourceClient;
+    protected _notificationResource: AxiosNotificationResourceClient;
+    protected _alarmResource: AxiosAlarmResourceClient;
+    protected _agentResource: AxiosAgentResourceClient;
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
-    get GatewayServiceResource(): AxiosGatewayServiceResourceClient;
-    get AssetModelResource(): AxiosAssetModelResourceClient;
-    get GatewayClientResource(): AxiosGatewayClientResourceClient;
-    get RulesResource(): AxiosRulesResourceClient;
-    get ConsoleResource(): AxiosConsoleResourceClient;
-    get AppResource(): AxiosAppResourceClient;
-    get ExternalServiceResource(): AxiosExternalServiceResourceClient;
-    get AgentResource(): AxiosAgentResourceClient;
+    get FlowResource(): AxiosFlowResourceClient;
     get SyslogResource(): AxiosSyslogResourceClient;
-    get AlarmResource(): AxiosAlarmResourceClient;
     get ProvisioningResource(): AxiosProvisioningResourceClient;
+    get DashboardResource(): AxiosDashboardResourceClient;
+    get ExternalServiceResource(): AxiosExternalServiceResourceClient;
+    get GatewayClientResource(): AxiosGatewayClientResourceClient;
+    get AssetResource(): AxiosAssetResourceClient;
     get StatusResource(): AxiosStatusResourceClient;
-    get FlowResource(): AxiosFlowResourceClient;
+    get UserResource(): AxiosUserResourceClient;
+    get MapResource(): AxiosMapResourceClient;
+    get AssetModelResource(): AxiosAssetModelResourceClient;
+    get AppResource(): AxiosAppResourceClient;
     get AssetDatapointResource(): AxiosAssetDatapointResourceClient;
-    get DashboardResource(): AxiosDashboardResourceClient;
+    get ConsoleResource(): AxiosConsoleResourceClient;
+    get RulesResource(): AxiosRulesResourceClient;
+    get GatewayServiceResource(): AxiosGatewayServiceResourceClient;
     get RealmResource(): AxiosRealmResourceClient;
     get AssetPredictedDatapointResource(): AxiosAssetPredictedDatapointResourceClient;
-    get UserResource(): AxiosUserResourceClient;
-    get NotificationResource(): AxiosNotificationResourceClient;
-    get MapResource(): AxiosMapResourceClient;
     get ConfigurationResource(): AxiosConfigurationResourceClient;
-    get AssetResource(): AxiosAssetResourceClient;
+    get NotificationResource(): AxiosNotificationResourceClient;
+    get AlarmResource(): AxiosAlarmResourceClient;
+    get AgentResource(): AxiosAgentResourceClient;
 }
 import * as Axios from "axios";
 declare module "axios" {
@@ -1226,49 +1226,52 @@ declare module "axios" {
         data: R;
     }
 }
-export declare class AxiosGatewayServiceResourceClient extends GatewayServiceResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosFlowResourceClient extends FlowResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosAssetModelResourceClient extends AssetModelResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosSyslogResourceClient extends SyslogResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosGatewayClientResourceClient extends GatewayClientResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosProvisioningResourceClient extends ProvisioningResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosRulesResourceClient extends RulesResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosDashboardResourceClient extends DashboardResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosConsoleResourceClient extends ConsoleResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosExternalServiceResourceClient extends ExternalServiceResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosAppResourceClient extends AppResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosGatewayClientResourceClient extends GatewayClientResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosExternalServiceResourceClient extends ExternalServiceResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosAssetResourceClient extends AssetResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosAgentResourceClient extends AgentResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosStatusResourceClient extends StatusResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosSyslogResourceClient extends SyslogResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosUserResourceClient extends UserResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosAlarmResourceClient extends AlarmResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosMapResourceClient extends MapResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosProvisioningResourceClient extends ProvisioningResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosAssetModelResourceClient extends AssetModelResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosStatusResourceClient extends StatusResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosAppResourceClient extends AppResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosFlowResourceClient extends FlowResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosAssetDatapointResourceClient extends AssetDatapointResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosAssetDatapointResourceClient extends AssetDatapointResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosConsoleResourceClient extends ConsoleResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosDashboardResourceClient extends DashboardResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosRulesResourceClient extends RulesResourceClient<Axios.AxiosRequestConfig> {
+    constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
+}
+export declare class AxiosGatewayServiceResourceClient extends GatewayServiceResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
 export declare class AxiosRealmResourceClient extends RealmResourceClient<Axios.AxiosRequestConfig> {
@@ -1277,19 +1280,16 @@ export declare class AxiosRealmResourceClient extends RealmResourceClient<Axios.
 export declare class AxiosAssetPredictedDatapointResourceClient extends AssetPredictedDatapointResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosUserResourceClient extends UserResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosConfigurationResourceClient extends ConfigurationResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
 export declare class AxiosNotificationResourceClient extends NotificationResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosMapResourceClient extends MapResourceClient<Axios.AxiosRequestConfig> {
-    constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
-}
-export declare class AxiosConfigurationResourceClient extends ConfigurationResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosAlarmResourceClient extends AlarmResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosAssetResourceClient extends AssetResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosAgentResourceClient extends AgentResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
 //# sourceMappingURL=restclient.d.ts.map