@openremote/rest 1.33.0 → 1.34.0-snapshot.20261027165134

package/build/lib/restclient.d.ts

@@ -9,309 +9,301 @@ export interface HttpClient<O> {
         options?: O;
     }): RestResponse<R>;
 }
-export declare class GatewayServiceResourceClient<O> {
+export declare class ConfigurationResourceClient<O> {
     protected httpClient: HttpClient<O>;
     constructor(httpClient: HttpClient<O>);
     /**
-     * Requests a TCP tunnel through a connected gateway and returns its allocated local endpoint. When realm is omitted, the authenticated realm is used.
-     * Response code 417 - The gateway could not establish the requested tunnel
-     * HTTP POST /gateway/tunnel
-     * Java method: org.openremote.model.gateway.GatewayServiceResource.startTunnel
-     */
-    startTunnel(tunnelInfo: Model.GatewayTunnelInfo, options?: O): RestResponse<Model.GatewayTunnelInfo>;
-    /**
-     * Stops the tunnel identified by the supplied gateway, target, and port information. When realm is omitted, the authenticated realm is used.
-     * HTTP DELETE /gateway/tunnel
-     * Java method: org.openremote.model.gateway.GatewayServiceResource.stopTunnel
+     * Returns the public Manager application configuration used by clients before and after authentication.
+     * HTTP GET /configuration/manager
+     * Java method: org.openremote.model.manager.ConfigurationResource.getManagerConfig
      */
-    stopTunnel(tunnelInfo: Model.GatewayTunnelInfo, options?: O): RestResponse<void>;
+    getManagerConfig(options?: O): RestResponse<Model.ManagerAppConfig>;
     /**
-     * Returns active tunnels for all gateway assets in the requested realm. Restricted users cannot list an entire realm.
-     * HTTP GET /gateway/tunnel/{realm}
-     * Java method: org.openremote.model.gateway.GatewayServiceResource.getAllActiveTunnelInfos
+     * Replaces manager_config.json and returns the stored configuration. This administrative change affects Manager UI branding and behavior. This operation is restricted to a super administrator.
+     * HTTP PUT /configuration/manager
+     * Java method: org.openremote.model.manager.ConfigurationResource.update
      */
-    getAllActiveTunnelInfos(realm: string, options?: O): RestResponse<Model.GatewayTunnelInfo[]>;
+    update(managerConfiguration: Model.ManagerAppConfig, options?: O): RestResponse<Model.ManagerAppConfig>;
     /**
-     * Returns active tunnels for one gateway asset. Restricted users may query only a linked gateway.
-     * HTTP GET /gateway/tunnel/{realm}/{id}
-     * Java method: org.openremote.model.gateway.GatewayServiceResource.getGatewayActiveTunnelInfos
+     * Validates and stores the supplied image FileInfo at the requested relative path, replacing an existing image, then returns its Manager API path. This operation is restricted to a super administrator.
+     * HTTP POST /configuration/manager/image
+     * Java method: org.openremote.model.manager.ConfigurationResource.imageUpload
      */
-    getGatewayActiveTunnelInfos(realm: string, id: string, options?: O): RestResponse<Model.GatewayTunnelInfo[]>;
+    imageUpload(fileInfo: Model.FileInfo, queryParams?: {
+        path?: string;
+    }, options?: O): RestResponse<string>;
     /**
-     * Returns the tunnel matching realm, gateway, target host, and target port, or null when no active tunnel matches.
-     * Response code 204 - No active tunnel matches the requested endpoint
-     * HTTP GET /gateway/tunnel/{realm}/{id}/{target}/{targetPort}
-     * Java method: org.openremote.model.gateway.GatewayServiceResource.getActiveTunnelInfo
+     * Streams a configuration image using a fixed media type determined by its filename extension. Only png, jpg, jpeg, ico, and svg extensions are served, ignoring case; unsupported extensions return 404.
+     * Response code 200 - The image file
+     * HTTP GET /configuration/manager/image/{filename: .+}
+     * Java method: org.openremote.model.manager.ConfigurationResource.getManagerConfigImage
      */
-    getActiveTunnelInfo(realm: string, id: string, target: string, targetPort: number, options?: O): RestResponse<Model.GatewayTunnelInfo>;
+    getManagerConfigImage(filename: string, options?: O): RestResponse<any>;
 }
-export declare class AssetModelResourceClient<O> {
+export declare class AlarmResourceClient<O> {
     protected httpClient: HttpClient<O>;
     constructor(httpClient: HttpClient<O>);
     /**
-     * Returns the descriptors used to construct supported asset types, using a gateway model when the optional parent context resolves below a gateway.
-     * HTTP GET /model/assetDescriptors
-     * Java method: org.openremote.model.asset.AssetModelResource.getAssetDescriptors
+     * Creates a manual alarm in an accessible realm and optionally links it to the supplied asset IDs. The authenticated user or client becomes the alarm source.
+     * HTTP POST /alarm
+     * Java method: org.openremote.model.alarm.AlarmResource.createAlarm
      */
-    getAssetDescriptors(queryParams?: {
-        parentId?: string;
-        parentType?: string;
-    }, options?: O): RestResponse<Model.AssetDescriptor[]>;
+    createAlarm(alarm: Model.Alarm, queryParams?: {
+        assetIds?: string[];
+    }, options?: O): RestResponse<Model.SentAlarm>;
     /**
-     * Returns metadata for one asset type from this Manager or, when parentId is below a gateway, from that gateway's model. An unknown or gateway-provided type that is not locally available returns no content.
-     * Response code 204 - No model information is available for the requested asset type
-     * HTTP GET /model/assetInfo/{assetType}
-     * Java method: org.openremote.model.asset.AssetModelResource.getAssetInfo
+     * Returns alarms in the requested accessible realm, optionally filtered by status, linked asset, or assignee. When realm is omitted, the authenticated realm is used.
+     * HTTP GET /alarm
+     * Java method: org.openremote.model.alarm.AlarmResource.getAlarms
      */
-    getAssetInfo(assetType: string, queryParams?: {
-        parentId?: string;
-    }, options?: O): RestResponse<Model.AssetTypeInfo>;
+    getAlarms(queryParams?: {
+        realm?: string;
+        status?: Model.AlarmStatus;
+        assetId?: string;
+        assigneeId?: string;
+    }, options?: O): RestResponse<Model.SentAlarm[]>;
     /**
-     * Returns type metadata from this Manager by default. When parentId identifies an asset below a gateway, the gateway's model is used instead; parentType can provide type context for a new parent that does not yet exist.
-     * HTTP GET /model/assetInfos
-     * Java method: org.openremote.model.asset.AssetModelResource.getAssetInfos
+     * Permanently removes all alarms identified by the request body after verifying access to every alarm's realm.
+     * HTTP DELETE /alarm
+     * Java method: org.openremote.model.alarm.AlarmResource.removeAlarms
      */
-    getAssetInfos(queryParams?: {
-        parentId?: string;
-        parentType?: string;
-    }, options?: O): RestResponse<Model.AssetTypeInfo[]>;
+    removeAlarms(ids: number[], options?: O): RestResponse<void>;
     /**
-     * Returns the JSON Schema and a weak ETag for the named value descriptor. Send If-None-Match on later requests to receive 304 when the schema has not changed.
-     * Response code 200 - The current JSON Schema
-     * Response code 304 - The supplied ETag still identifies the current schema
-     * HTTP GET /model/getValueDescriptorSchema
-     * Java method: org.openremote.model.asset.AssetModelResource.getValueDescriptorSchema
+     * Adds links between assets and one existing alarm.
+
+The request body is a list for backward compatibility, but this operation now has single-alarm semantics:
+every item must contain the same `id.realm` and the same `id.alarmId`. The alarm must exist in that realm,
+every asset must exist in the same realm, and the authenticated user must have access to that realm. Requests
+containing mixed alarm IDs or realms are rejected as bad requests.
+
+Existing links are left unchanged; duplicate links in the request or links that already exist are ignored.
+This operation does not remove existing links from the alarm.
+
+     * HTTP PUT /alarm/assets
+     * Java method: org.openremote.model.alarm.AlarmResource.setAssetLinks
      */
-    getValueDescriptorSchema(queryParams?: {
-        name?: string;
-    }, options?: O): RestResponse<any>;
+    setAssetLinks(links: Model.AlarmAssetLink[], options?: O): RestResponse<void>;
     /**
-     * Returns attribute metadata descriptors keyed by descriptor name, using a gateway model when parentId resolves below a gateway.
-     * HTTP GET /model/metaItemDescriptors
-     * Java method: org.openremote.model.asset.AssetModelResource.getMetaItemDescriptors
+     * Returns one alarm when its realm is active and accessible to the authenticated user.
+     * HTTP GET /alarm/{alarmId}
+     * Java method: org.openremote.model.alarm.AlarmResource.getAlarm
      */
-    getMetaItemDescriptors(queryParams?: {
-        parentId?: string;
-    }, options?: O): RestResponse<{
-        [index: string]: Model.MetaItemDescriptor;
-    }>;
+    getAlarm(alarmId: number, options?: O): RestResponse<Model.SentAlarm>;
     /**
-     * Returns attribute value descriptors keyed by descriptor name, using a gateway model when parentId resolves below a gateway.
-     * HTTP GET /model/valueDescriptors
-     * Java method: org.openremote.model.asset.AssetModelResource.getValueDescriptors
+     * Permanently removes one alarm after verifying access to its realm.
+     * HTTP DELETE /alarm/{alarmId}
+     * Java method: org.openremote.model.alarm.AlarmResource.removeAlarm
      */
-    getValueDescriptors(queryParams?: {
-        parentId?: string;
-    }, options?: O): RestResponse<{
-        [index: string]: Model.ValueDescriptor;
-    }>;
+    removeAlarm(alarmId: number, options?: O): RestResponse<void>;
+    /**
+     * Updates the mutable state of an existing alarm after verifying access to its current realm.
+     * HTTP PUT /alarm/{alarmId}
+     * Java method: org.openremote.model.alarm.AlarmResource.updateAlarm
+     */
+    updateAlarm(alarmId: number, alarm: Model.SentAlarm, options?: O): RestResponse<void>;
+    /**
+     * Returns links from the alarm to assets in the explicitly supplied accessible realm.
+     * HTTP GET /alarm/{alarmId}/assets
+     * Java method: org.openremote.model.alarm.AlarmResource.getAssetLinks
+     */
+    getAssetLinks(alarmId: number, queryParams?: {
+        realm?: string;
+    }, options?: O): RestResponse<Model.AlarmAssetLink[]>;
 }
-export declare class GatewayClientResourceClient<O> {
+export declare class DashboardResourceClient<O> {
     protected httpClient: HttpClient<O>;
     constructor(httpClient: HttpClient<O>);
     /**
-     * Removes connections for all repeated realm query parameters. Deleting multiple realms is restricted to super users.
-     * HTTP DELETE /gateway/connection
-     * Java method: org.openremote.model.gateway.GatewayClientResource.deleteConnections
+     * Creates a dashboard in an accessible realm. The server assigns the authenticated user as owner and initially stores the dashboard with shared access.
+     * HTTP POST /dashboard
+     * Java method: org.openremote.model.dashboard.DashboardResource.create
      */
-    deleteConnections(queryParams?: {
-        realm?: string[];
-    }, options?: O): RestResponse<void>;
+    create(dashboard: Model.Dashboard, options?: O): RestResponse<Model.Dashboard>;
     /**
-     * Returns every configured central-manager connection. Unlike the single-realm endpoint, this operation is restricted to super users.
-     * HTTP GET /gateway/connection
-     * Java method: org.openremote.model.gateway.GatewayClientResource.getConnections
+     * Updates an existing dashboard when the authenticated user can modify it in the dashboard's realm.
+     * HTTP PUT /dashboard
+     * Java method: org.openremote.model.dashboard.DashboardResource.update
      */
-    getConnections(options?: O): RestResponse<Model.GatewayConnection[]>;
+    update(dashboard: Model.Dashboard, options?: O): RestResponse<Model.Dashboard>;
     /**
-     * Removes the central-manager connection for one realm. Realm administrators can remove their own connection; super users can remove any connection.
-     * HTTP DELETE /gateway/connection/{realm}
-     * Java method: org.openremote.model.gateway.GatewayClientResource.deleteConnection
+     * Returns dashboards visible to the caller in the requested realm. Anonymous callers receive public dashboards only; authenticated access also depends on roles, ownership, and linked assets.
+     * HTTP GET /dashboard/all/{realm}
+     * Java method: org.openremote.model.dashboard.DashboardResource.getAllRealmDashboards
      */
-    deleteConnection(realm: string, options?: O): RestResponse<void>;
+    getAllRealmDashboards(realm: string, options?: O): RestResponse<Model.Dashboard[]>;
     /**
-     * Returns the central-manager connection configured for a realm, or null when none exists. Realm administrators can read their own realm; super users can read any realm.
-     * Response code 204 - No gateway connection is configured for the realm
-     * HTTP GET /gateway/connection/{realm}
-     * Java method: org.openremote.model.gateway.GatewayClientResource.getConnection
+     * Executes a dashboard query after constraining it to the caller's realm, roles, ownership, and asset access. A missing body uses the request realm and default visibility rules.
+     * HTTP POST /dashboard/query
+     * Java method: org.openremote.model.dashboard.DashboardResource.query
      */
-    getConnection(realm: string, options?: O): RestResponse<Model.GatewayConnection>;
+    query(dashboardQuery: Model.DashboardQuery, options?: O): RestResponse<Model.Dashboard[]>;
     /**
-     * Creates or replaces the connection for the path realm. The server forces the local realm, including realm predicates in attribute filters, to match the path.
-     * HTTP PUT /gateway/connection/{realm}
-     * Java method: org.openremote.model.gateway.GatewayClientResource.setConnection
+     * Permanently removes a dashboard when the authenticated user can modify it in the requested realm.
+     * HTTP DELETE /dashboard/{realm}/{dashboardId}
+     * Java method: org.openremote.model.dashboard.DashboardResource.delete
      */
-    setConnection(realm: string, connection: Model.GatewayConnection, options?: O): RestResponse<void>;
+    delete(realm: string, dashboardId: string, options?: O): RestResponse<void>;
     /**
-     * Returns the live connection state for the requested local realm.
-     * HTTP GET /gateway/status/{realm}
-     * Java method: org.openremote.model.gateway.GatewayClientResource.getConnectionStatus
+     * Returns one dashboard only when it is visible to the caller. Inaccessible and nonexistent dashboards both return 404 to avoid disclosing their existence.
+     * HTTP GET /dashboard/{realm}/{dashboardId}
+     * Java method: org.openremote.model.dashboard.DashboardResource.get
      */
-    getConnectionStatus(realm: string, options?: O): RestResponse<Model.ConnectionStatus>;
+    get(realm: string, dashboardId: string, options?: O): RestResponse<Model.Dashboard>;
 }
-export declare class RulesResourceClient<O> {
+export declare class UserResourceClient<O> {
     protected httpClient: HttpClient<O>;
     constructor(httpClient: HttpClient<O>);
     /**
-     * Creates and deploys a global ruleset and returns its numeric ID. Super-user access is required; legacy JavaScript rulesets cannot be created.
-     * HTTP POST /rules
-     * Java method: org.openremote.model.rules.RulesResource.createGlobalRuleset
+     * Stores the supplied non-empty locale string as the caller's identity-provider locale attribute. The target realm must be active unless the caller is a superuser.
+     * HTTP PUT /user/locale
+     * Java method: org.openremote.model.security.UserResource.updateCurrentUserLocale
      */
-    createGlobalRuleset(ruleset: Model.GlobalRuleset, options?: O): RestResponse<number>;
+    updateCurrentUserLocale(locale: string, options?: O): RestResponse<void>;
     /**
-     * Returns global rulesets filtered by repeated language parameters. fullyPopulate controls whether rule source and other large fields are loaded; super-user access is required.
-     * HTTP GET /rules
-     * Java method: org.openremote.model.rules.RulesResource.getGlobalRulesets
+     * Executes a UserQuery. Non-super users are forced into their authenticated realm and cannot see system accounts; callers with read-users but not read-admin receive basic fields only. The target realm must be active unless the caller is a superuser.
+     * HTTP POST /user/query
+     * Java method: org.openremote.model.security.UserResource.query
      */
-    getGlobalRulesets(queryParams?: {
-        language?: Model.RulesetLang[];
-        fullyPopulate?: boolean;
-    }, options?: O): RestResponse<Model.GlobalRuleset[]>;
+    query(query: Model.UserQuery, options?: O): RestResponse<Model.User[]>;
     /**
-     * Creates and deploys a ruleset for an accessible asset and returns its numeric ID. The assetId is taken from the request body.
-     * HTTP POST /rules/asset
-     * Java method: org.openremote.model.rules.RulesResource.createAssetRuleset
+     * Initiates the identity provider's configured password-reset action for the caller's own account. The target realm must be active unless the caller is a superuser.
+     * HTTP PUT /user/request-password-reset
+     * Java method: org.openremote.model.security.UserResource.requestPasswordResetCurrent
      */
-    createAssetRuleset(ruleset: Model.AssetRuleset, options?: O): RestResponse<number>;
+    requestPasswordResetCurrent(options?: O): RestResponse<void>;
     /**
-     * Returns asset rulesets filtered by language. Callers without full access receive public rulesets only; a nonexistent asset produces an empty array.
-     * HTTP GET /rules/asset/for/{assetId}
-     * Java method: org.openremote.model.rules.RulesResource.getAssetRulesets
+     * Replaces the caller's own identity-provider credential using the supplied credential representation. The target realm must be active unless the caller is a superuser.
+     * HTTP PUT /user/reset-password
+     * Java method: org.openremote.model.security.UserResource.updatePasswordCurrent
      */
-    getAssetRulesets(assetId: string, queryParams?: {
-        language?: Model.RulesetLang[];
-        fullyPopulate?: boolean;
-    }, options?: O): RestResponse<Model.AssetRuleset[]>;
+    updatePasswordCurrent(credential: Model.Credential, options?: O): RestResponse<void>;
     /**
-     * Permanently removes and undeploys one ruleset from an accessible asset.
-     * HTTP DELETE /rules/asset/{id}
-     * Java method: org.openremote.model.rules.RulesResource.deleteAssetRuleset
+     * Updates the caller's own profile. A supplied user ID must match the access token; role and realm administration are not provided by this endpoint. The target realm must be active unless the caller is a superuser.
+     * HTTP PUT /user/update
+     * Java method: org.openremote.model.security.UserResource.updateCurrent
      */
-    deleteAssetRuleset(id: number, options?: O): RestResponse<void>;
+    updateCurrent(user: Model.User, options?: O): RestResponse<Model.User>;
     /**
-     * Returns one fully populated asset ruleset when the caller can access its realm and owning asset.
-     * HTTP GET /rules/asset/{id}
-     * Java method: org.openremote.model.rules.RulesResource.getAssetRuleset
+     * Returns the identity-provider record corresponding to the current access token. The target realm must be active unless the caller is a superuser.
+     * HTTP GET /user/user
+     * Java method: org.openremote.model.security.UserResource.getCurrent
      */
-    getAssetRuleset(id: number, options?: O): RestResponse<Model.AssetRuleset>;
+    getCurrent(options?: O): RestResponse<Model.User>;
     /**
-     * Replaces and redeploys one asset ruleset. The ID must match and an existing ruleset cannot be reassigned to another asset.
-     * HTTP PUT /rules/asset/{id}
-     * Java method: org.openremote.model.rules.RulesResource.updateAssetRuleset
+     * Returns realm-level role names assigned to the caller. The target realm must be active unless the caller is a superuser.
+     * HTTP GET /user/userRealmRoles
+     * Java method: org.openremote.model.security.UserResource.getCurrentUserRealmRoles
      */
-    updateAssetRuleset(id: number, ruleset: Model.AssetRuleset, options?: O): RestResponse<void>;
+    getCurrentUserRealmRoles(options?: O): RestResponse<string[]>;
     /**
-     * Extracts geofence definitions relevant to the asset. Anonymous access requires a public-readable asset; authenticated restricted users require an asset link.
-     * HTTP GET /rules/geofences/{assetId}
-     * Java method: org.openremote.model.rules.RulesResource.getAssetGeofences
+     * Returns role names assigned to the caller for the named identity-provider client. The target realm must be active unless the caller is a superuser.
+     * HTTP GET /user/userRoles/{clientId}
+     * Java method: org.openremote.model.security.UserResource.getCurrentUserClientRoles
      */
-    getAssetGeofences(assetId: string, options?: O): RestResponse<Model.GeofenceDefinition[]>;
+    getCurrentUserClientRoles(clientId: string, options?: O): RestResponse<string[]>;
     /**
-     * Returns runtime status and error counts for an accessible asset engine. Returns null when the asset or its engine does not exist.
-     * Response code 204 - The asset or its rules engine does not exist
-     * HTTP GET /rules/info/asset/{assetId}
-     * Java method: org.openremote.model.rules.RulesResource.getAssetEngineInfo
+     * Terminates the active MQTT connection identified by sessionID. The realm must match the session owner's realm. Authenticated users may disconnect their own sessions without an additional client role. Disconnecting another user's session requires the openremote client role write:admin or superuser status. Non-superusers are limited to their own active realm; superusers may disconnect sessions across realms, including inactive realms.
+     * Response code 403 - The realm is inactive for a non-superuser, or the caller is neither the session owner, a user with write:admin, nor a superuser
+     * Response code 404 - The session or its owning user does not exist, or the session does not belong to the specified realm
+     * Response code 405 - A non-superuser cannot access the session owner's realm
+     * HTTP DELETE /user/{realm}/disconnect/{sessionID}
+     * Java method: org.openremote.model.security.UserResource.disconnectUserSession
      */
-    getAssetEngineInfo(assetId: string, options?: O): RestResponse<Model.RulesEngineInfo>;
+    disconnectUserSession(realm: string, sessionID: string, options?: O): RestResponse<void>;
     /**
-     * Returns runtime status and compilation/execution error counts for the global engine, or null when that engine is not running. Super-user access is required.
-     * Response code 204 - The global rules engine is not running
-     * HTTP GET /rules/info/global
-     * Java method: org.openremote.model.rules.RulesResource.getGlobalEngineInfo
+     * Asks the identity provider to send or initiate its configured password-reset action for the specified user. The target realm must be active unless the caller is a superuser.
+     * Response code 405 - The caller cannot mutate a user in the requested realm
+     * HTTP PUT /user/{realm}/request-password-reset/{userId}
+     * Java method: org.openremote.model.security.UserResource.requestPasswordReset
      */
-    getGlobalEngineInfo(options?: O): RestResponse<Model.RulesEngineInfo>;
+    requestPasswordReset(realm: string, userId: string, options?: O): RestResponse<void>;
     /**
-     * Returns runtime status and error counts for an accessible realm engine, or null when that engine is not running. Restricted users cannot inspect realm engines.
-     * Response code 204 - The requested realm rules engine is not running
-     * HTTP GET /rules/info/realm/{realm}
-     * Java method: org.openremote.model.rules.RulesResource.getRealmEngineInfo
+     * Replaces a user's credential in an administered realm using the supplied credential representation. The target realm must be active unless the caller is a superuser.
+     * Response code 405 - The caller cannot mutate a user in the requested realm
+     * HTTP PUT /user/{realm}/reset-password/{userId}
+     * Java method: org.openremote.model.security.UserResource.updatePassword
      */
-    getRealmEngineInfo(realm: string, options?: O): RestResponse<Model.RulesEngineInfo>;
+    updatePassword(realm: string, userId: string, credential: Model.Credential, options?: O): RestResponse<void>;
     /**
-     * Creates and deploys a ruleset in its body realm and returns its numeric ID. Restricted users cannot create realm rulesets; legacy JavaScript is not accepted.
-     * HTTP POST /rules/realm
-     * Java method: org.openremote.model.rules.RulesResource.createRealmRuleset
+     * Generates and returns a new client secret for a service user in an administered realm. The target realm must be active unless the caller is a superuser.
+     * HTTP GET /user/{realm}/reset-secret/{userId}
+     * Java method: org.openremote.model.security.UserResource.resetSecret
      */
-    createRealmRuleset(ruleset: Model.RealmRuleset, options?: O): RestResponse<number>;
+    resetSecret(realm: string, userId: string, options?: O): RestResponse<string>;
     /**
-     * Returns realm rulesets filtered by language. Anonymous, restricted, or callers without read-rules permission receive public rulesets only; fullyPopulate controls loading of rule source.
-     * HTTP GET /rules/realm/for/{realm}
-     * Java method: org.openremote.model.rules.RulesResource.getRealmRulesets
+     * Creates, updates, or removes role definitions for the default OpenRemote client in the requested realm. The target realm must be active unless the caller is a superuser.
+     * HTTP PUT /user/{realm}/roles
+     * Java method: org.openremote.model.security.UserResource.updateRoles
      */
-    getRealmRulesets(realm: string, queryParams?: {
-        language?: Model.RulesetLang[];
-        fullyPopulate?: boolean;
-    }, options?: O): RestResponse<Model.RealmRuleset[]>;
+    updateRoles(realm: string, roles: Model.Role[], options?: O): RestResponse<void>;
     /**
-     * Permanently removes and undeploys one ruleset from an accessible realm.
-     * HTTP DELETE /rules/realm/{id}
-     * Java method: org.openremote.model.rules.RulesResource.deleteRealmRuleset
+     * Returns realm-level role names assigned to one user. Without read-admin permission, callers may retrieve only their own roles. The target realm must be active unless the caller is a superuser.
+     * HTTP GET /user/{realm}/userRealmRoles/{userId}
+     * Java method: org.openremote.model.security.UserResource.getUserRealmRoles
      */
-    deleteRealmRuleset(id: number, options?: O): RestResponse<void>;
+    getUserRealmRoles(realm: string, userId: string, options?: O): RestResponse<string[]>;
     /**
-     * Returns one fully populated realm ruleset when its realm is accessible to the caller.
-     * HTTP GET /rules/realm/{id}
-     * Java method: org.openremote.model.rules.RulesResource.getRealmRuleset
+     * Replaces the user's assigned realm-level role names in an administered realm. The target realm must be active unless the caller is a superuser.
+     * HTTP PUT /user/{realm}/userRealmRoles/{userId}
+     * Java method: org.openremote.model.security.UserResource.updateUserRealmRoles
      */
-    getRealmRuleset(id: number, options?: O): RestResponse<Model.RealmRuleset>;
+    updateUserRealmRoles(realm: string, userId: string, roles: string[], options?: O): RestResponse<void>;
     /**
-     * Replaces and redeploys one realm ruleset. Path and body IDs and the existing realm must match; legacy JavaScript cannot be updated.
-     * HTTP PUT /rules/realm/{id}
-     * Java method: org.openremote.model.rules.RulesResource.updateRealmRuleset
+     * Returns role names assigned to one user for the named client. Without read-admin permission, callers may retrieve only their own roles. The target realm must be active unless the caller is a superuser.
+     * HTTP GET /user/{realm}/userRoles/{userId}/{clientId}
+     * Java method: org.openremote.model.security.UserResource.getUserClientRoles
      */
-    updateRealmRuleset(id: number, ruleset: Model.RealmRuleset, options?: O): RestResponse<void>;
+    getUserClientRoles(realm: string, userId: string, clientId: string, options?: O): RestResponse<string[]>;
     /**
-     * Permanently removes and undeploys one global ruleset. Super-user access is required.
-     * HTTP DELETE /rules/{id}
-     * Java method: org.openremote.model.rules.RulesResource.deleteGlobalRuleset
+     * Replaces the user's assigned role names for the named client in an administered realm. The target realm must be active unless the caller is a superuser.
+     * HTTP PUT /user/{realm}/userRoles/{userId}/{clientId}
+     * Java method: org.openremote.model.security.UserResource.updateUserClientRoles
      */
-    deleteGlobalRuleset(id: number, options?: O): RestResponse<void>;
+    updateUserClientRoles(realm: string, userId: string, clientId: string, roles: string[], options?: O): RestResponse<void>;
     /**
-     * Returns one fully populated global ruleset including transient deployment status and errors. Super-user access is required.
-     * HTTP GET /rules/{id}
-     * Java method: org.openremote.model.rules.RulesResource.getGlobalRuleset
+     * Returns active MQTT sessions for one user, including connection ID, creation time, and remote address. Without read-admin permission, callers may inspect only themselves. The target realm must be active unless the caller is a superuser.
+     * HTTP GET /user/{realm}/userSessions/{userId}
+     * Java method: org.openremote.model.security.UserResource.getUserSessions
      */
-    getGlobalRuleset(id: number, options?: O): RestResponse<Model.GlobalRuleset>;
+    getUserSessions(realm: string, userId: string, options?: O): RestResponse<Model.UserSession[]>;
     /**
-     * Replaces and redeploys the identified global ruleset. Path and body IDs must match; legacy JavaScript rulesets cannot be updated.
-     * HTTP PUT /rules/{id}
-     * Java method: org.openremote.model.rules.RulesResource.updateGlobalRuleset
+     * Creates an identity-provider user in a realm administered by the caller and returns the resulting user record. The target realm must be active unless the caller is a superuser.
+     * HTTP POST /user/{realm}/users
+     * Java method: org.openremote.model.security.UserResource.create
      */
-    updateGlobalRuleset(id: number, ruleset: Model.GlobalRuleset, options?: O): RestResponse<void>;
-}
-export declare class ConsoleResourceClient<O> {
-    protected httpClient: HttpClient<O>;
-    constructor(httpClient: HttpClient<O>);
+    create(realm: string, user: Model.User, options?: O): RestResponse<Model.User>;
     /**
-     * Creates an anonymous console registration when id is absent, or updates an existing registration when id is present. Authenticated new registrations are linked to the caller; updates require that link. The returned registration contains the durable asset ID for later calls.
-     * HTTP POST /console/register
-     * Java method: org.openremote.model.console.ConsoleResource.register
+     * Updates an existing identity-provider user in an administered realm. The master administrator cannot be disabled. The target realm must be active unless the caller is a superuser.
+     * Response code 405 - The requested cross-realm or protected master-administrator mutation is not allowed
+     * HTTP PUT /user/{realm}/users
+     * Java method: org.openremote.model.security.UserResource.update
      */
-    register(consoleRegistration: Model.ConsoleRegistration, options?: O): RestResponse<Model.ConsoleRegistration>;
-}
-export declare class AppResourceClient<O> {
-    protected httpClient: HttpClient<O>;
-    constructor(httpClient: HttpClient<O>);
+    update(realm: string, user: Model.User, options?: O): RestResponse<Model.User>;
     /**
-     * Returns the identifiers of applications installed in the Manager web root.
-     * HTTP GET /apps
-     * Java method: org.openremote.model.apps.AppResource.getApps
+     * Permanently deletes a user from an administered realm. The master-realm administrator cannot be deleted. The target realm must be active unless the caller is a superuser.
+     * Response code 405 - The master-realm administrator cannot be deleted
+     * HTTP DELETE /user/{realm}/users/{userId}
+     * Java method: org.openremote.model.security.UserResource.delete
      */
-    getApps(options?: O): RestResponse<string[]>;
+    delete(realm: string, userId: string, options?: O): RestResponse<void>;
     /**
-     * Loads the public console_config.json document used to configure console clients before sign-in.
-     * HTTP GET /apps/consoleConfig
-     * Java method: org.openremote.model.apps.AppResource.getConsoleConfig
+     * Returns all role definitions exposed by the named identity-provider client. Realm-administrator access is required. The target realm must be active unless the caller is a superuser.
+     * HTTP GET /user/{realm}/{clientId}/roles
+     * Java method: org.openremote.model.security.UserResource.getClientRoles
      */
-    getConsoleConfig(options?: O): RestResponse<any>;
+    getClientRoles(realm: string, clientId: string, options?: O): RestResponse<Model.Role[]>;
     /**
-     * Loads each installed application's info.json file and returns the documents keyed by application identifier.
-     * HTTP GET /apps/info
-     * Java method: org.openremote.model.apps.AppResource.getAppInfos
+     * Creates, updates, or removes role definitions for a named identity-provider client. The target realm must be active unless the caller is a superuser.
+     * HTTP PUT /user/{realm}/{clientId}/roles
+     * Java method: org.openremote.model.security.UserResource.updateClientRoles
      */
-    getAppInfos(options?: O): RestResponse<{
-        [index: string]: any;
-    }>;
+    updateClientRoles(realm: string, clientId: string, roles: Model.Role[], options?: O): RestResponse<void>;
+    /**
+     * Returns one user when it belongs to the requested accessible realm. Without read-admin permission, callers may retrieve only their own user. The target realm must be active unless the caller is a superuser.
+     * HTTP GET /user/{realm}/{userId}
+     * Java method: org.openremote.model.security.UserResource.get
+     */
+    get(realm: string, userId: string, options?: O): RestResponse<Model.User>;
 }
 export declare class ExternalServiceResourceClient<O> {
     protected httpClient: HttpClient<O>;
@@ -375,327 +367,297 @@ export declare class ExternalServiceResourceClient<O> {
      */
     heartbeat(serviceId: string, instanceId: number, options?: O): RestResponse<void>;
 }
-export declare class AgentResourceClient<O> {
+export declare class FlowResourceClient<O> {
     protected httpClient: HttpClient<O>;
     constructor(httpClient: HttpClient<O>);
     /**
-     * Runs the agent protocol's asset discovery, waits up to ten seconds for results, returns the discovered tree, and asynchronously persists discovered assets below the agent.
-     * HTTP GET /agent/assetDiscovery/{agentId}
-     * Java method: org.openremote.model.asset.agent.AgentResource.doProtocolAssetDiscovery
+     * Returns every supported flow node definition except the internal LOG_OUTPUT node.
+     * HTTP GET /flow
+     * Java method: org.openremote.model.rules.flow.FlowResource.getAllNodeDefinitions
      */
-    doProtocolAssetDiscovery(agentId: string, queryParams?: {
-        realm?: string;
-    }, options?: O): RestResponse<Model.AssetTreeNode[]>;
+    getAllNodeDefinitions(options?: O): RestResponse<Model.Node[]>;
     /**
-     * Decodes the supplied FileInfo, asks the agent protocol to import it, persists the returned asset tree below the agent, and returns that tree.
-     * Response code 405 - The selected agent protocol does not support asset import
-     * HTTP POST /agent/assetImport/{agentId}
-     * Java method: org.openremote.model.asset.agent.AgentResource.doProtocolAssetImport
+     * Resolves one flow node definition by its model name.
+     * HTTP GET /flow/{name}
+     * Java method: org.openremote.model.rules.flow.FlowResource.getNodeDefinition
      */
-    doProtocolAssetImport(agentId: string, fileInfo: Model.FileInfo, queryParams?: {
-        realm?: string;
-    }, options?: O): RestResponse<Model.AssetTreeNode[]>;
+    getNodeDefinition(name: string, options?: O): RestResponse<Model.Node>;
     /**
-     * Runs instance discovery for an agent type and returns candidate Agent assets. parentId selects local versus edge-gateway discovery; non-super users are always constrained to their authenticated realm.
-     * Response code 415 - The selected agent protocol does not support instance discovery
-     * HTTP GET /agent/instanceDiscovery/{agentType}
-     * Java method: org.openremote.model.asset.agent.AgentResource.doProtocolInstanceDiscovery
+     * Returns supported flow node definitions whose category matches the requested node type.
+     * HTTP GET /flow/{type}
+     * Java method: org.openremote.model.rules.flow.FlowResource.getAllNodeDefinitionsByType
      */
-    doProtocolInstanceDiscovery(agentType: string, queryParams?: {
-        parentId?: string;
-        realm?: string;
-    }, options?: O): RestResponse<Model.Agent[]>;
+    getAllNodeDefinitionsByType(type: Model.NodeType, options?: O): RestResponse<Model.Node[]>;
 }
-export declare class SyslogResourceClient<O> {
+export declare class RealmResourceClient<O> {
     protected httpClient: HttpClient<O>;
     constructor(httpClient: HttpClient<O>);
     /**
-     * Returns the current log-storage and retention configuration. This operation is restricted to a super administrator.
-     * HTTP GET /syslog/config
-     * Java method: org.openremote.model.syslog.SyslogResource.getConfig
+     * Creates and configures a realm in the identity provider. This operation is restricted to a super user.
+     * HTTP POST /realm
+     * Java method: org.openremote.model.security.RealmResource.create
      */
-    getConfig(options?: O): RestResponse<Model.SyslogConfig>;
+    create(realm: Model.Realm, options?: O): RestResponse<void>;
     /**
-     * Validates and applies log-storage and retention settings. This operation is restricted to a super administrator.
-     * HTTP PUT /syslog/config
-     * Java method: org.openremote.model.syslog.SyslogResource.updateConfig
+     * Returns complete realm records from the identity provider. This operation is restricted to a super user.
+     * HTTP GET /realm
+     * Java method: org.openremote.model.security.RealmResource.getAll
      */
-    updateConfig(config: Model.SyslogConfig, options?: O): RestResponse<void>;
+    getAll(options?: O): RestResponse<Model.Realm[]>;
     /**
-     * Permanently removes all events from the configured syslog storage. This operation is restricted to a super administrator.
-     * HTTP DELETE /syslog/event
-     * Java method: org.openremote.model.syslog.SyslogResource.clearEvents
+     * Returns only realm name and display name. Super users receive all realms; authenticated users receive their realm; anonymous callers receive the request realm.
+     * HTTP GET /realm/accessible
+     * Java method: org.openremote.model.security.RealmResource.getAccessible
      */
-    clearEvents(options?: O): RestResponse<void>;
+    getAccessible(options?: O): RestResponse<Model.Realm[]>;
     /**
-     * Returns a page of log events filtered by severity, Unix-millisecond time range, categories, and subcategories. RFC 8288 Link headers point to the next and last pages.
-     * Response code 200 - The requested page of syslog events
-     * HTTP GET /syslog/event
-     * Java method: org.openremote.model.syslog.SyslogResource.getEvents
+     * Permanently deletes a realm from the identity provider. The master realm cannot be deleted; related Manager data is not automatically removed.
+     * Response code 405 - The master realm cannot be deleted
+     * Response code 409 - Realm cannot be deleted while it still contains assets
+     * HTTP DELETE /realm/{name}
+     * Java method: org.openremote.model.security.RealmResource.delete
      */
-    getEvents(queryParams?: {
-        level?: Model.SyslogLevel;
-        per_page?: number;
-        page?: number;
-        from?: number;
-        to?: number;
-        category?: Model.SyslogCategory[];
-        subCategory?: string[];
-    }, options?: O): RestResponse<any>;
-}
-export declare class AlarmResourceClient<O> {
-    protected httpClient: HttpClient<O>;
-    constructor(httpClient: HttpClient<O>);
+    delete(name: string, options?: O): RestResponse<void>;
     /**
-     * Creates a manual alarm in an accessible realm and optionally links it to the supplied asset IDs. The authenticated user or client becomes the alarm source.
-     * HTTP POST /alarm
-     * Java method: org.openremote.model.alarm.AlarmResource.createAlarm
+     * Returns complete details for a named active realm when it is accessible to the caller. Regular users cannot use this endpoint to inspect other realms.
+     * HTTP GET /realm/{name}
+     * Java method: org.openremote.model.security.RealmResource.get
      */
-    createAlarm(alarm: Model.Alarm, queryParams?: {
-        assetIds?: string[];
-    }, options?: O): RestResponse<Model.SentAlarm>;
-    /**
-     * Returns alarms in the requested accessible realm, optionally filtered by status, linked asset, or assignee. When realm is omitted, the authenticated realm is used.
-     * HTTP GET /alarm
-     * Java method: org.openremote.model.alarm.AlarmResource.getAlarms
-     */
-    getAlarms(queryParams?: {
-        realm?: string;
-        status?: Model.AlarmStatus;
-        assetId?: string;
-        assigneeId?: string;
-    }, options?: O): RestResponse<Model.SentAlarm[]>;
+    get(name: string, options?: O): RestResponse<Model.Realm>;
     /**
-     * Permanently removes all alarms identified by the request body after verifying access to every alarm's realm.
-     * HTTP DELETE /alarm
-     * Java method: org.openremote.model.alarm.AlarmResource.removeAlarms
+     * Updates a realm through the identity provider. Super-user access is required; the master realm cannot be renamed or disabled.
+     * Response code 405 - The requested mutation is not allowed for the master realm
+     * HTTP PUT /realm/{name}
+     * Java method: org.openremote.model.security.RealmResource.update
      */
-    removeAlarms(ids: number[], options?: O): RestResponse<void>;
+    update(name: string, realm: Model.Realm, options?: O): RestResponse<void>;
+}
+export declare class GatewayServiceResourceClient<O> {
+    protected httpClient: HttpClient<O>;
+    constructor(httpClient: HttpClient<O>);
     /**
-     * Adds links between assets and one existing alarm.
-
-The request body is a list for backward compatibility, but this operation now has single-alarm semantics:
-every item must contain the same `id.realm` and the same `id.alarmId`. The alarm must exist in that realm,
-every asset must exist in the same realm, and the authenticated user must have access to that realm. Requests
-containing mixed alarm IDs or realms are rejected as bad requests.
-
-Existing links are left unchanged; duplicate links in the request or links that already exist are ignored.
-This operation does not remove existing links from the alarm.
-
-     * HTTP PUT /alarm/assets
-     * Java method: org.openremote.model.alarm.AlarmResource.setAssetLinks
+     * Requests a TCP tunnel through a connected gateway and returns its allocated local endpoint. When realm is omitted, the authenticated realm is used.
+     * Response code 417 - The gateway could not establish the requested tunnel
+     * HTTP POST /gateway/tunnel
+     * Java method: org.openremote.model.gateway.GatewayServiceResource.startTunnel
      */
-    setAssetLinks(links: Model.AlarmAssetLink[], options?: O): RestResponse<void>;
+    startTunnel(tunnelInfo: Model.GatewayTunnelInfo, options?: O): RestResponse<Model.GatewayTunnelInfo>;
     /**
-     * Returns one alarm when its realm is active and accessible to the authenticated user.
-     * HTTP GET /alarm/{alarmId}
-     * Java method: org.openremote.model.alarm.AlarmResource.getAlarm
+     * Stops the tunnel identified by the supplied gateway, target, and port information. When realm is omitted, the authenticated realm is used.
+     * HTTP DELETE /gateway/tunnel
+     * Java method: org.openremote.model.gateway.GatewayServiceResource.stopTunnel
      */
-    getAlarm(alarmId: number, options?: O): RestResponse<Model.SentAlarm>;
+    stopTunnel(tunnelInfo: Model.GatewayTunnelInfo, options?: O): RestResponse<void>;
     /**
-     * Permanently removes one alarm after verifying access to its realm.
-     * HTTP DELETE /alarm/{alarmId}
-     * Java method: org.openremote.model.alarm.AlarmResource.removeAlarm
+     * Returns active tunnels for all gateway assets in the requested realm. Restricted users cannot list an entire realm.
+     * HTTP GET /gateway/tunnel/{realm}
+     * Java method: org.openremote.model.gateway.GatewayServiceResource.getAllActiveTunnelInfos
      */
-    removeAlarm(alarmId: number, options?: O): RestResponse<void>;
+    getAllActiveTunnelInfos(realm: string, options?: O): RestResponse<Model.GatewayTunnelInfo[]>;
     /**
-     * Updates the mutable state of an existing alarm after verifying access to its current realm.
-     * HTTP PUT /alarm/{alarmId}
-     * Java method: org.openremote.model.alarm.AlarmResource.updateAlarm
+     * Returns active tunnels for one gateway asset. Restricted users may query only a linked gateway.
+     * HTTP GET /gateway/tunnel/{realm}/{id}
+     * Java method: org.openremote.model.gateway.GatewayServiceResource.getGatewayActiveTunnelInfos
      */
-    updateAlarm(alarmId: number, alarm: Model.SentAlarm, options?: O): RestResponse<void>;
+    getGatewayActiveTunnelInfos(realm: string, id: string, options?: O): RestResponse<Model.GatewayTunnelInfo[]>;
     /**
-     * Returns links from the alarm to assets in the explicitly supplied accessible realm.
-     * HTTP GET /alarm/{alarmId}/assets
-     * Java method: org.openremote.model.alarm.AlarmResource.getAssetLinks
+     * Returns the tunnel matching realm, gateway, target host, and target port, or null when no active tunnel matches.
+     * Response code 204 - No active tunnel matches the requested endpoint
+     * HTTP GET /gateway/tunnel/{realm}/{id}/{target}/{targetPort}
+     * Java method: org.openremote.model.gateway.GatewayServiceResource.getActiveTunnelInfo
      */
-    getAssetLinks(alarmId: number, queryParams?: {
-        realm?: string;
-    }, options?: O): RestResponse<Model.AlarmAssetLink[]>;
+    getActiveTunnelInfo(realm: string, id: string, target: string, targetPort: number, options?: O): RestResponse<Model.GatewayTunnelInfo>;
 }
-export declare class ProvisioningResourceClient<O> {
+export declare class AssetResourceClient<O> {
     protected httpClient: HttpClient<O>;
     constructor(httpClient: HttpClient<O>);
     /**
-     * Persists a new provisioning configuration and returns its generated numeric identifier. This operation is restricted to a super administrator.
-     * HTTP POST /provisioning
-     * Java method: org.openremote.model.provisioning.ProvisioningResource.createProvisioningConfig
+     * Creates an asset in an accessible realm and returns the persisted representation. The server generates an ID when absent; supplied IDs must be globally unique and 22 characters long.
+     * HTTP POST /asset
+     * Java method: org.openremote.model.asset.AssetResource.create
      */
-    createProvisioningConfig(provisioningConfig: Model.ProvisioningConfigUnion<any, any>, options?: O): RestResponse<number>;
+    create(asset: Model.Asset, options?: O): RestResponse<Model.Asset>;
     /**
-     * Returns every provisioning configuration. This operation is restricted to a super administrator.
-     * HTTP GET /provisioning
-     * Java method: org.openremote.model.provisioning.ProvisioningResource.getProvisioningConfigs
+     * Permanently deletes every asset identified by repeated assetId query parameters, subject to realm and restricted-user access rules.
+     * HTTP DELETE /asset
+     * Java method: org.openremote.model.asset.AssetResource.delete
      */
-    getProvisioningConfigs(options?: O): RestResponse<Model.ProvisioningConfigUnion<any, any>[]>;
+    delete(queryParams?: {
+        assetId?: string[];
+    }, options?: O): RestResponse<void>;
     /**
-     * Permanently removes the provisioning configuration identified by the path. This operation is restricted to a super administrator.
-     * HTTP DELETE /provisioning/{id}
-     * Java method: org.openremote.model.provisioning.ProvisioningResource.deleteProvisioningConfig
+     * Submits a batch of attribute states using current server time and returns one result per input item. Authorization and processing failures are encoded in each AttributeWriteResult rather than returned as an HTTP error.
+     * HTTP PUT /asset/attributes
+     * Java method: org.openremote.model.asset.AssetResource.writeAttributeValues
      */
-    deleteProvisioningConfig(id: number, options?: O): RestResponse<void>;
+    writeAttributeValues(attributeStates: Model.AttributeState[], options?: O): RestResponse<Model.AttributeWriteResult[]>;
     /**
-     * Replaces the provisioning configuration identified by the path. This operation is restricted to a super administrator.
-     * HTTP PUT /provisioning/{id}
-     * Java method: org.openremote.model.provisioning.ProvisioningResource.updateProvisioningConfig
+     * Submits a batch of complete attribute events and returns one result per input item. Supplied timestamps are preserved; authorization and processing failures are encoded per result rather than returned as an HTTP error.
+     * HTTP PUT /asset/attributes/timestamp
+     * Java method: org.openremote.model.asset.AssetResource.writeAttributeEvents
      */
-    updateProvisioningConfig(id: number, provisioningConfig: Model.ProvisioningConfigUnion<any, any>, options?: O): RestResponse<void>;
-}
-export declare class StatusResourceClient<O> {
-    protected httpClient: HttpClient<O>;
-    constructor(httpClient: HttpClient<O>);
+    writeAttributeEvents(attributeEvents: Model.AttributeEvent[], options?: O): RestResponse<Model.AttributeWriteResult[]>;
     /**
-     * Returns health data keyed by registered health-provider name. A null provider result is represented as JSON null.
-     * HTTP GET /health
-     * Java method: org.openremote.model.system.StatusResource.getHealthStatus
+     * Returns only the number of assets matching an AssetQuery after applying the caller's realm, public, and linked-asset access constraints.
+     * HTTP POST /asset/count
+     * Java method: org.openremote.model.asset.AssetResource.queryCount
      */
-    getHealthStatus(options?: O): RestResponse<{
-        [index: string]: any;
-    }>;
+    queryCount(query: Model.AssetQuery, options?: O): RestResponse<number>;
     /**
-     * Returns public bootstrap information, including the Manager version and identity-provider URL.
-     * HTTP GET /info
-     * Java method: org.openremote.model.system.StatusResource.getInfo
+     * Clears the parent reference of every asset listed in repeated assetIds query parameters.
+     * HTTP DELETE /asset/parent
+     * Java method: org.openremote.model.asset.AssetResource.updateNoneParent
      */
-    getInfo(options?: O): RestResponse<{
-        [index: string]: any;
-    }>;
-}
-export declare class FlowResourceClient<O> {
-    protected httpClient: HttpClient<O>;
-    constructor(httpClient: HttpClient<O>);
+    updateNoneParent(queryParams?: {
+        assetIds?: string[];
+    }, options?: O): RestResponse<void>;
     /**
-     * Returns every supported flow node definition except the internal LOG_OUTPUT node.
-     * HTTP GET /flow
-     * Java method: org.openremote.model.rules.flow.FlowResource.getAllNodeDefinitions
+     * Returns the asset identity and properties without loading attributes or path data. The same access rules as getAsset apply.
+     * HTTP GET /asset/partial/{assetId}
+     * Java method: org.openremote.model.asset.AssetResource.getPartial
      */
-    getAllNodeDefinitions(options?: O): RestResponse<Model.Node[]>;
+    getPartial(assetId: string, options?: O): RestResponse<Model.Asset>;
     /**
-     * Resolves one flow node definition by its model name.
-     * HTTP GET /flow/{name}
-     * Java method: org.openremote.model.rules.flow.FlowResource.getNodeDefinition
+     * Executes an AssetQuery after constraining realm and linked-asset access. Anonymous callers receive public-readable assets only; the query select clause controls which fields are populated.
+     * HTTP POST /asset/query
+     * Java method: org.openremote.model.asset.AssetResource.queryAssets
      */
-    getNodeDefinition(name: string, options?: O): RestResponse<Model.Node>;
+    queryAssets(query: Model.AssetQuery, options?: O): RestResponse<Model.Asset[]>;
     /**
-     * Returns supported flow node definitions whose category matches the requested node type.
-     * HTTP GET /flow/{type}
-     * Java method: org.openremote.model.rules.flow.FlowResource.getAllNodeDefinitionsByType
+     * Applies the same authorization and selection rules as queryAssets, then returns a hierarchy optimized for tree display rather than a flat asset array.
+     * HTTP POST /asset/tree
+     * Java method: org.openremote.model.asset.AssetResource.queryAssetTree
      */
-    getAllNodeDefinitionsByType(type: Model.NodeType, options?: O): RestResponse<Model.Node[]>;
-}
-export declare class AssetDatapointResourceClient<O> {
-    protected httpClient: HttpClient<O>;
-    constructor(httpClient: HttpClient<O>);
+    queryAssetTree(query: Model.AssetQuery, options?: O): RestResponse<Model.AssetTree>;
     /**
-     * Streams a ZIP archive containing exported datapoints for one or more attribute references over the requested inclusive time range. attributeRefs is a JSON-encoded array of objects with id and name fields.
-     * Response code 200 - A ZIP archive containing the exported data
-     * HTTP GET /asset/datapoint/export
-     * Java method: org.openremote.model.datapoint.AssetDatapointResource.getDatapointExport
+     * Returns partial linked assets for a restricted user, root assets for an unrestricted realm user, and an empty array for a super user. Attributes and paths are omitted; use getAsset for full details.
+     * HTTP GET /asset/user/current
+     * Java method: org.openremote.model.asset.AssetResource.getCurrentUserAssets
      */
-    getDatapointExport(queryParams?: {
-        attributeRefs?: string;
-        fromTimestamp?: number;
-        toTimestamp?: number;
-        format?: Model.DatapointExportFormat;
-    }, options?: O): RestResponse<any>;
+    getCurrentUserAssets(options?: O): RestResponse<Model.Asset[]>;
     /**
-     * Returns the oldest and newest stored timestamps for one attribute. The asset and attribute must be readable by the authenticated user and configured for datapoint storage.
-     * HTTP GET /asset/datapoint/periods
-     * Java method: org.openremote.model.datapoint.AssetDatapointResource.getDatapointPeriod
+     * Creates all supplied links as one operation. Every item must identify the same realm and user, and every referenced realm, user, and asset must exist.
+     * HTTP POST /asset/user/link
+     * Java method: org.openremote.model.asset.AssetResource.createUserAssetLinks
      */
-    getDatapointPeriod(queryParams?: {
+    createUserAssetLinks(userAssets: Model.UserAssetLink[], options?: O): RestResponse<void>;
+    /**
+     * Returns user-asset links in the required realm, optionally filtered by userId and assetId. Missing users or assets produce an empty result; restricted users cannot call this operation.
+     * HTTP GET /asset/user/link
+     * Java method: org.openremote.model.asset.AssetResource.getUserAssetLinks
+     */
+    getUserAssetLinks(queryParams?: {
+        realm?: string;
+        userId?: string;
         assetId?: string;
-        attributeName?: string;
-    }, options?: O): RestResponse<Model.DatapointPeriod>;
+    }, options?: O): RestResponse<Model.UserAssetLink[]>;
     /**
-     * Returns stored historical values for one attribute. A null body returns the available series; a polymorphic query body controls the time range and retrieval or aggregation strategy. Anonymous access requires public-read access on both asset and attribute.
-     * HTTP POST /asset/datapoint/{assetId}/{attributeName}
-     * Java method: org.openremote.model.datapoint.AssetDatapointResource.getDatapoints
+     * Removes all supplied links. Every item must identify the same realm and user.
+     * HTTP POST /asset/user/link/delete
+     * Java method: org.openremote.model.asset.AssetResource.deleteUserAssetLinks
      */
-    getDatapoints(assetId: string, attributeName: string, query: Model.AssetDatapointQueryUnion, options?: O): RestResponse<Model.ValueDatapoint<any>[]>;
-}
-export declare class DashboardResourceClient<O> {
-    protected httpClient: HttpClient<O>;
-    constructor(httpClient: HttpClient<O>);
+    deleteUserAssetLinks(userAssets: Model.UserAssetLink[], options?: O): RestResponse<void>;
     /**
-     * Creates a dashboard in an accessible realm. The server assigns the authenticated user as owner and initially stores the dashboard with shared access.
-     * HTTP POST /dashboard
-     * Java method: org.openremote.model.dashboard.DashboardResource.create
+     * Removes every asset link belonging to the user in the requested realm.
+     * HTTP DELETE /asset/user/link/{realm}/{userId}
+     * Java method: org.openremote.model.asset.AssetResource.deleteAllUserAssetLinks
      */
-    create(dashboard: Model.Dashboard, options?: O): RestResponse<Model.Dashboard>;
+    deleteAllUserAssetLinks(realm: string, userId: string, options?: O): RestResponse<void>;
     /**
-     * Updates an existing dashboard when the authenticated user can modify it in the dashboard's realm.
-     * HTTP PUT /dashboard
-     * Java method: org.openremote.model.dashboard.DashboardResource.update
+     * Removes the link identified by realm, user, and asset. The caller must be allowed to administer asset links in that realm.
+     * HTTP DELETE /asset/user/link/{realm}/{userId}/{assetId}
+     * Java method: org.openremote.model.asset.AssetResource.deleteUserAssetLink
      */
-    update(dashboard: Model.Dashboard, options?: O): RestResponse<Model.Dashboard>;
+    deleteUserAssetLink(realm: string, userId: string, assetId: string, options?: O): RestResponse<void>;
     /**
-     * Returns dashboards visible to the caller in the requested realm. Anonymous callers receive public dashboards only; authenticated access also depends on roles, ownership, and linked assets.
-     * HTTP GET /dashboard/all/{realm}
-     * Java method: org.openremote.model.dashboard.DashboardResource.getAllRealmDashboards
+     * Returns a fully loaded asset including its path and attributes. Access is constrained to the caller's realm and, for restricted users, linked assets.
+     * HTTP GET /asset/{assetId}
+     * Java method: org.openremote.model.asset.AssetResource.get
      */
-    getAllRealmDashboards(realm: string, options?: O): RestResponse<Model.Dashboard[]>;
+    get(assetId: string, options?: O): RestResponse<Model.Asset>;
     /**
-     * Executes a dashboard query after constraining it to the caller's realm, roles, ownership, and asset access. A missing body uses the request realm and default visibility rules.
-     * HTTP POST /dashboard/query
-     * Java method: org.openremote.model.dashboard.DashboardResource.query
+     * Replaces mutable asset data while preserving the path identifier. Realm, parent, restricted-user, and private-metadata rules are validated; disallowed restricted-user fields may be ignored.
+     * HTTP PUT /asset/{assetId}
+     * Java method: org.openremote.model.asset.AssetResource.update
      */
-    query(dashboardQuery: Model.DashboardQuery, options?: O): RestResponse<Model.Dashboard[]>;
+    update(assetId: string, asset: Model.Asset, options?: O): RestResponse<Model.Asset>;
     /**
-     * Permanently removes a dashboard when the authenticated user can modify it in the requested realm.
-     * HTTP DELETE /dashboard/{realm}/{dashboardId}
-     * Java method: org.openremote.model.dashboard.DashboardResource.delete
+     * Submits an asynchronous attribute write using the current server time. The result reports whether the event was accepted, not whether downstream processing ultimately succeeded. Anonymous writes require public-write metadata.
+     * Response code 400 - The attribute write failed
+     * Response code 406 - The supplied value is not valid for the attribute
+     * Response code 429 - The attribute event queue is full; retry the write later
+     * HTTP PUT /asset/{assetId}/attribute/{attributeName}
+     * Java method: org.openremote.model.asset.AssetResource.writeAttributeValue
      */
-    delete(realm: string, dashboardId: string, options?: O): RestResponse<void>;
+    writeAttributeValue$PUT$asset_assetId_attribute_attributeName(assetId: string, attributeName: string, value: any, options?: O): RestResponse<Model.AttributeWriteResult>;
     /**
-     * Returns one dashboard only when it is visible to the caller. Inaccessible and nonexistent dashboards both return 404 to avoid disclosing their existence.
-     * HTTP GET /dashboard/{realm}/{dashboardId}
-     * Java method: org.openremote.model.dashboard.DashboardResource.get
+     * Submits an asynchronous attribute write using the supplied Unix timestamp in milliseconds. The result reports acceptance only; anonymous writes require public-write metadata.
+     * Response code 400 - The attribute write failed
+     * Response code 406 - The supplied value is not valid for the attribute
+     * Response code 429 - The attribute event queue is full; retry the write later
+     * HTTP PUT /asset/{assetId}/attribute/{attributeName}/{timestamp}
+     * Java method: org.openremote.model.asset.AssetResource.writeAttributeValue
      */
-    get(realm: string, dashboardId: string, options?: O): RestResponse<Model.Dashboard>;
+    writeAttributeValue$PUT$asset_assetId_attribute_attributeName_timestamp(assetId: string, attributeName: string, timestamp: number, value: any, options?: O): RestResponse<Model.AttributeWriteResult>;
+    /**
+     * Sets parentAssetId as the parent of every asset listed in repeated assetIds query parameters. Parent and children must satisfy realm, access, and hierarchy constraints.
+     * HTTP PUT /asset/{parentAssetId}/child
+     * Java method: org.openremote.model.asset.AssetResource.updateParent
+     */
+    updateParent(parentAssetId: string, queryParams?: {
+        assetIds?: string[];
+    }, options?: O): RestResponse<void>;
 }
-export declare class RealmResourceClient<O> {
+export declare class StatusResourceClient<O> {
     protected httpClient: HttpClient<O>;
     constructor(httpClient: HttpClient<O>);
     /**
-     * Creates and configures a realm in the identity provider. This operation is restricted to a super user.
-     * HTTP POST /realm
-     * Java method: org.openremote.model.security.RealmResource.create
-     */
-    create(realm: Model.Realm, options?: O): RestResponse<void>;
-    /**
-     * Returns complete realm records from the identity provider. This operation is restricted to a super user.
-     * HTTP GET /realm
-     * Java method: org.openremote.model.security.RealmResource.getAll
+     * Returns health data keyed by registered health-provider name. A null provider result is represented as JSON null.
+     * HTTP GET /health
+     * Java method: org.openremote.model.system.StatusResource.getHealthStatus
      */
-    getAll(options?: O): RestResponse<Model.Realm[]>;
+    getHealthStatus(options?: O): RestResponse<{
+        [index: string]: any;
+    }>;
     /**
-     * Returns only realm name and display name. Super users receive all realms; authenticated users receive their realm; anonymous callers receive the request realm.
-     * HTTP GET /realm/accessible
-     * Java method: org.openremote.model.security.RealmResource.getAccessible
+     * Returns public bootstrap information, including the Manager version and identity-provider URL.
+     * HTTP GET /info
+     * Java method: org.openremote.model.system.StatusResource.getInfo
      */
-    getAccessible(options?: O): RestResponse<Model.Realm[]>;
+    getInfo(options?: O): RestResponse<{
+        [index: string]: any;
+    }>;
+}
+export declare class AgentResourceClient<O> {
+    protected httpClient: HttpClient<O>;
+    constructor(httpClient: HttpClient<O>);
     /**
-     * Permanently deletes a realm from the identity provider. The master realm cannot be deleted; related Manager data is not automatically removed.
-     * Response code 405 - The master realm cannot be deleted
-     * Response code 409 - Realm cannot be deleted while it still contains assets
-     * HTTP DELETE /realm/{name}
-     * Java method: org.openremote.model.security.RealmResource.delete
+     * Runs the agent protocol's asset discovery, waits up to ten seconds for results, returns the discovered tree, and asynchronously persists discovered assets below the agent.
+     * HTTP GET /agent/assetDiscovery/{agentId}
+     * Java method: org.openremote.model.asset.agent.AgentResource.doProtocolAssetDiscovery
      */
-    delete(name: string, options?: O): RestResponse<void>;
+    doProtocolAssetDiscovery(agentId: string, queryParams?: {
+        realm?: string;
+    }, options?: O): RestResponse<Model.AssetTreeNode[]>;
     /**
-     * Returns complete details for a named active realm when it is accessible to the caller. Regular users cannot use this endpoint to inspect other realms.
-     * HTTP GET /realm/{name}
-     * Java method: org.openremote.model.security.RealmResource.get
+     * Decodes the supplied FileInfo, asks the agent protocol to import it, persists the returned asset tree below the agent, and returns that tree.
+     * Response code 405 - The selected agent protocol does not support asset import
+     * HTTP POST /agent/assetImport/{agentId}
+     * Java method: org.openremote.model.asset.agent.AgentResource.doProtocolAssetImport
      */
-    get(name: string, options?: O): RestResponse<Model.Realm>;
+    doProtocolAssetImport(agentId: string, fileInfo: Model.FileInfo, queryParams?: {
+        realm?: string;
+    }, options?: O): RestResponse<Model.AssetTreeNode[]>;
     /**
-     * Updates a realm through the identity provider. Super-user access is required; the master realm cannot be renamed or disabled.
-     * Response code 405 - The requested mutation is not allowed for the master realm
-     * HTTP PUT /realm/{name}
-     * Java method: org.openremote.model.security.RealmResource.update
+     * Runs instance discovery for an agent type and returns candidate Agent assets. parentId selects local versus edge-gateway discovery; non-super users are always constrained to their authenticated realm.
+     * Response code 415 - The selected agent protocol does not support instance discovery
+     * HTTP GET /agent/instanceDiscovery/{agentType}
+     * Java method: org.openremote.model.asset.agent.AgentResource.doProtocolInstanceDiscovery
      */
-    update(name: string, realm: Model.Realm, options?: O): RestResponse<void>;
+    doProtocolInstanceDiscovery(agentType: string, queryParams?: {
+        parentId?: string;
+        realm?: string;
+    }, options?: O): RestResponse<Model.Agent[]>;
 }
 export declare class AssetPredictedDatapointResourceClient<O> {
     protected httpClient: HttpClient<O>;
@@ -713,160 +675,161 @@ export declare class AssetPredictedDatapointResourceClient<O> {
      */
     writePredictedDatapoints(assetId: string, attributeName: string, predictedDatapoints: Model.ValueDatapoint<any>[], options?: O): RestResponse<void>;
 }
-export declare class UserResourceClient<O> {
+export declare class GatewayClientResourceClient<O> {
     protected httpClient: HttpClient<O>;
     constructor(httpClient: HttpClient<O>);
     /**
-     * Stores the supplied non-empty locale string as the caller's identity-provider locale attribute. The target realm must be active unless the caller is a superuser.
-     * HTTP PUT /user/locale
-     * Java method: org.openremote.model.security.UserResource.updateCurrentUserLocale
-     */
-    updateCurrentUserLocale(locale: string, options?: O): RestResponse<void>;
-    /**
-     * Executes a UserQuery. Non-super users are forced into their authenticated realm and cannot see system accounts; callers with read-users but not read-admin receive basic fields only. The target realm must be active unless the caller is a superuser.
-     * HTTP POST /user/query
-     * Java method: org.openremote.model.security.UserResource.query
-     */
-    query(query: Model.UserQuery, options?: O): RestResponse<Model.User[]>;
-    /**
-     * Initiates the identity provider's configured password-reset action for the caller's own account. The target realm must be active unless the caller is a superuser.
-     * HTTP PUT /user/request-password-reset
-     * Java method: org.openremote.model.security.UserResource.requestPasswordResetCurrent
-     */
-    requestPasswordResetCurrent(options?: O): RestResponse<void>;
-    /**
-     * Replaces the caller's own identity-provider credential using the supplied credential representation. The target realm must be active unless the caller is a superuser.
-     * HTTP PUT /user/reset-password
-     * Java method: org.openremote.model.security.UserResource.updatePasswordCurrent
-     */
-    updatePasswordCurrent(credential: Model.Credential, options?: O): RestResponse<void>;
-    /**
-     * Updates the caller's own profile. A supplied user ID must match the access token; role and realm administration are not provided by this endpoint. The target realm must be active unless the caller is a superuser.
-     * HTTP PUT /user/update
-     * Java method: org.openremote.model.security.UserResource.updateCurrent
-     */
-    updateCurrent(user: Model.User, options?: O): RestResponse<Model.User>;
-    /**
-     * Returns the identity-provider record corresponding to the current access token. The target realm must be active unless the caller is a superuser.
-     * HTTP GET /user/user
-     * Java method: org.openremote.model.security.UserResource.getCurrent
+     * Removes connections for all repeated realm query parameters. Deleting multiple realms is restricted to super users.
+     * HTTP DELETE /gateway/connection
+     * Java method: org.openremote.model.gateway.GatewayClientResource.deleteConnections
      */
-    getCurrent(options?: O): RestResponse<Model.User>;
+    deleteConnections(queryParams?: {
+        realm?: string[];
+    }, options?: O): RestResponse<void>;
     /**
-     * Returns realm-level role names assigned to the caller. The target realm must be active unless the caller is a superuser.
-     * HTTP GET /user/userRealmRoles
-     * Java method: org.openremote.model.security.UserResource.getCurrentUserRealmRoles
+     * Returns every configured central-manager connection. Unlike the single-realm endpoint, this operation is restricted to super users.
+     * HTTP GET /gateway/connection
+     * Java method: org.openremote.model.gateway.GatewayClientResource.getConnections
      */
-    getCurrentUserRealmRoles(options?: O): RestResponse<string[]>;
+    getConnections(options?: O): RestResponse<Model.GatewayConnection[]>;
     /**
-     * Returns role names assigned to the caller for the named identity-provider client. The target realm must be active unless the caller is a superuser.
-     * HTTP GET /user/userRoles/{clientId}
-     * Java method: org.openremote.model.security.UserResource.getCurrentUserClientRoles
+     * Removes the central-manager connection for one realm. Realm administrators can remove their own connection; super users can remove any connection.
+     * HTTP DELETE /gateway/connection/{realm}
+     * Java method: org.openremote.model.gateway.GatewayClientResource.deleteConnection
      */
-    getCurrentUserClientRoles(clientId: string, options?: O): RestResponse<string[]>;
+    deleteConnection(realm: string, options?: O): RestResponse<void>;
     /**
-     * Terminates the active MQTT connection identified by sessionID. The realm must match the session owner's realm. Authenticated users may disconnect their own sessions without an additional client role. Disconnecting another user's session requires the openremote client role write:admin or superuser status. Non-superusers are limited to their own active realm; superusers may disconnect sessions across realms, including inactive realms.
-     * Response code 403 - The realm is inactive for a non-superuser, or the caller is neither the session owner, a user with write:admin, nor a superuser
-     * Response code 404 - The session or its owning user does not exist, or the session does not belong to the specified realm
-     * Response code 405 - A non-superuser cannot access the session owner's realm
-     * HTTP DELETE /user/{realm}/disconnect/{sessionID}
-     * Java method: org.openremote.model.security.UserResource.disconnectUserSession
+     * Returns the central-manager connection configured for a realm, or null when none exists. Realm administrators can read their own realm; super users can read any realm.
+     * Response code 204 - No gateway connection is configured for the realm
+     * HTTP GET /gateway/connection/{realm}
+     * Java method: org.openremote.model.gateway.GatewayClientResource.getConnection
      */
-    disconnectUserSession(realm: string, sessionID: string, options?: O): RestResponse<void>;
+    getConnection(realm: string, options?: O): RestResponse<Model.GatewayConnection>;
     /**
-     * Asks the identity provider to send or initiate its configured password-reset action for the specified user. The target realm must be active unless the caller is a superuser.
-     * Response code 405 - The caller cannot mutate a user in the requested realm
-     * HTTP PUT /user/{realm}/request-password-reset/{userId}
-     * Java method: org.openremote.model.security.UserResource.requestPasswordReset
+     * Creates or replaces the connection for the path realm. The server forces the local realm, including realm predicates in attribute filters, to match the path.
+     * HTTP PUT /gateway/connection/{realm}
+     * Java method: org.openremote.model.gateway.GatewayClientResource.setConnection
      */
-    requestPasswordReset(realm: string, userId: string, options?: O): RestResponse<void>;
+    setConnection(realm: string, connection: Model.GatewayConnection, options?: O): RestResponse<void>;
     /**
-     * Replaces a user's credential in an administered realm using the supplied credential representation. The target realm must be active unless the caller is a superuser.
-     * Response code 405 - The caller cannot mutate a user in the requested realm
-     * HTTP PUT /user/{realm}/reset-password/{userId}
-     * Java method: org.openremote.model.security.UserResource.updatePassword
+     * Returns the live connection state for the requested local realm.
+     * HTTP GET /gateway/status/{realm}
+     * Java method: org.openremote.model.gateway.GatewayClientResource.getConnectionStatus
      */
-    updatePassword(realm: string, userId: string, credential: Model.Credential, options?: O): RestResponse<void>;
+    getConnectionStatus(realm: string, options?: O): RestResponse<Model.ConnectionStatus>;
+}
+export declare class AppResourceClient<O> {
+    protected httpClient: HttpClient<O>;
+    constructor(httpClient: HttpClient<O>);
     /**
-     * Generates and returns a new client secret for a service user in an administered realm. The target realm must be active unless the caller is a superuser.
-     * HTTP GET /user/{realm}/reset-secret/{userId}
-     * Java method: org.openremote.model.security.UserResource.resetSecret
+     * Returns the identifiers of applications installed in the Manager web root.
+     * HTTP GET /apps
+     * Java method: org.openremote.model.apps.AppResource.getApps
      */
-    resetSecret(realm: string, userId: string, options?: O): RestResponse<string>;
+    getApps(options?: O): RestResponse<string[]>;
     /**
-     * Creates, updates, or removes role definitions for the default OpenRemote client in the requested realm. The target realm must be active unless the caller is a superuser.
-     * HTTP PUT /user/{realm}/roles
-     * Java method: org.openremote.model.security.UserResource.updateRoles
+     * Loads the public console_config.json document used to configure console clients before sign-in.
+     * HTTP GET /apps/consoleConfig
+     * Java method: org.openremote.model.apps.AppResource.getConsoleConfig
      */
-    updateRoles(realm: string, roles: Model.Role[], options?: O): RestResponse<void>;
+    getConsoleConfig(options?: O): RestResponse<any>;
     /**
-     * Returns realm-level role names assigned to one user. Without read-admin permission, callers may retrieve only their own roles. The target realm must be active unless the caller is a superuser.
-     * HTTP GET /user/{realm}/userRealmRoles/{userId}
-     * Java method: org.openremote.model.security.UserResource.getUserRealmRoles
+     * Loads each installed application's info.json file and returns the documents keyed by application identifier.
+     * HTTP GET /apps/info
+     * Java method: org.openremote.model.apps.AppResource.getAppInfos
      */
-    getUserRealmRoles(realm: string, userId: string, options?: O): RestResponse<string[]>;
+    getAppInfos(options?: O): RestResponse<{
+        [index: string]: any;
+    }>;
+}
+export declare class AssetModelResourceClient<O> {
+    protected httpClient: HttpClient<O>;
+    constructor(httpClient: HttpClient<O>);
     /**
-     * Replaces the user's assigned realm-level role names in an administered realm. The target realm must be active unless the caller is a superuser.
-     * HTTP PUT /user/{realm}/userRealmRoles/{userId}
-     * Java method: org.openremote.model.security.UserResource.updateUserRealmRoles
+     * Returns the descriptors used to construct supported asset types, using a gateway model when the optional parent context resolves below a gateway.
+     * HTTP GET /model/assetDescriptors
+     * Java method: org.openremote.model.asset.AssetModelResource.getAssetDescriptors
      */
-    updateUserRealmRoles(realm: string, userId: string, roles: string[], options?: O): RestResponse<void>;
+    getAssetDescriptors(queryParams?: {
+        parentId?: string;
+        parentType?: string;
+    }, options?: O): RestResponse<Model.AssetDescriptor[]>;
     /**
-     * Returns role names assigned to one user for the named client. Without read-admin permission, callers may retrieve only their own roles. The target realm must be active unless the caller is a superuser.
-     * HTTP GET /user/{realm}/userRoles/{userId}/{clientId}
-     * Java method: org.openremote.model.security.UserResource.getUserClientRoles
+     * Returns metadata for one asset type from this Manager or, when parentId is below a gateway, from that gateway's model. An unknown or gateway-provided type that is not locally available returns no content.
+     * Response code 204 - No model information is available for the requested asset type
+     * HTTP GET /model/assetInfo/{assetType}
+     * Java method: org.openremote.model.asset.AssetModelResource.getAssetInfo
      */
-    getUserClientRoles(realm: string, userId: string, clientId: string, options?: O): RestResponse<string[]>;
+    getAssetInfo(assetType: string, queryParams?: {
+        parentId?: string;
+    }, options?: O): RestResponse<Model.AssetTypeInfo>;
     /**
-     * Replaces the user's assigned role names for the named client in an administered realm. The target realm must be active unless the caller is a superuser.
-     * HTTP PUT /user/{realm}/userRoles/{userId}/{clientId}
-     * Java method: org.openremote.model.security.UserResource.updateUserClientRoles
+     * Returns type metadata from this Manager by default. When parentId identifies an asset below a gateway, the gateway's model is used instead; parentType can provide type context for a new parent that does not yet exist.
+     * HTTP GET /model/assetInfos
+     * Java method: org.openremote.model.asset.AssetModelResource.getAssetInfos
      */
-    updateUserClientRoles(realm: string, userId: string, clientId: string, roles: string[], options?: O): RestResponse<void>;
+    getAssetInfos(queryParams?: {
+        parentId?: string;
+        parentType?: string;
+    }, options?: O): RestResponse<Model.AssetTypeInfo[]>;
     /**
-     * Returns active MQTT sessions for one user, including connection ID, creation time, and remote address. Without read-admin permission, callers may inspect only themselves. The target realm must be active unless the caller is a superuser.
-     * HTTP GET /user/{realm}/userSessions/{userId}
-     * Java method: org.openremote.model.security.UserResource.getUserSessions
+     * Returns the JSON Schema and a weak ETag for the named value descriptor. Send If-None-Match on later requests to receive 304 when the schema has not changed.
+     * Response code 200 - The current JSON Schema
+     * Response code 304 - The supplied ETag still identifies the current schema
+     * HTTP GET /model/getValueDescriptorSchema
+     * Java method: org.openremote.model.asset.AssetModelResource.getValueDescriptorSchema
      */
-    getUserSessions(realm: string, userId: string, options?: O): RestResponse<Model.UserSession[]>;
+    getValueDescriptorSchema(queryParams?: {
+        name?: string;
+    }, options?: O): RestResponse<any>;
     /**
-     * Creates an identity-provider user in a realm administered by the caller and returns the resulting user record. The target realm must be active unless the caller is a superuser.
-     * HTTP POST /user/{realm}/users
-     * Java method: org.openremote.model.security.UserResource.create
+     * Returns attribute metadata descriptors keyed by descriptor name, using a gateway model when parentId resolves below a gateway.
+     * HTTP GET /model/metaItemDescriptors
+     * Java method: org.openremote.model.asset.AssetModelResource.getMetaItemDescriptors
      */
-    create(realm: string, user: Model.User, options?: O): RestResponse<Model.User>;
+    getMetaItemDescriptors(queryParams?: {
+        parentId?: string;
+    }, options?: O): RestResponse<{
+        [index: string]: Model.MetaItemDescriptor;
+    }>;
     /**
-     * Updates an existing identity-provider user in an administered realm. The master administrator cannot be disabled. The target realm must be active unless the caller is a superuser.
-     * Response code 405 - The requested cross-realm or protected master-administrator mutation is not allowed
-     * HTTP PUT /user/{realm}/users
-     * Java method: org.openremote.model.security.UserResource.update
+     * Returns attribute value descriptors keyed by descriptor name, using a gateway model when parentId resolves below a gateway.
+     * HTTP GET /model/valueDescriptors
+     * Java method: org.openremote.model.asset.AssetModelResource.getValueDescriptors
      */
-    update(realm: string, user: Model.User, options?: O): RestResponse<Model.User>;
+    getValueDescriptors(queryParams?: {
+        parentId?: string;
+    }, options?: O): RestResponse<{
+        [index: string]: Model.ValueDescriptor;
+    }>;
+}
+export declare class ProvisioningResourceClient<O> {
+    protected httpClient: HttpClient<O>;
+    constructor(httpClient: HttpClient<O>);
     /**
-     * Permanently deletes a user from an administered realm. The master-realm administrator cannot be deleted. The target realm must be active unless the caller is a superuser.
-     * Response code 405 - The master-realm administrator cannot be deleted
-     * HTTP DELETE /user/{realm}/users/{userId}
-     * Java method: org.openremote.model.security.UserResource.delete
+     * Persists a new provisioning configuration and returns its generated numeric identifier. This operation is restricted to a super administrator.
+     * HTTP POST /provisioning
+     * Java method: org.openremote.model.provisioning.ProvisioningResource.createProvisioningConfig
      */
-    delete(realm: string, userId: string, options?: O): RestResponse<void>;
+    createProvisioningConfig(provisioningConfig: Model.ProvisioningConfigUnion<any, any>, options?: O): RestResponse<number>;
     /**
-     * Returns all role definitions exposed by the named identity-provider client. Realm-administrator access is required. The target realm must be active unless the caller is a superuser.
-     * HTTP GET /user/{realm}/{clientId}/roles
-     * Java method: org.openremote.model.security.UserResource.getClientRoles
+     * Returns every provisioning configuration. This operation is restricted to a super administrator.
+     * HTTP GET /provisioning
+     * Java method: org.openremote.model.provisioning.ProvisioningResource.getProvisioningConfigs
      */
-    getClientRoles(realm: string, clientId: string, options?: O): RestResponse<Model.Role[]>;
+    getProvisioningConfigs(options?: O): RestResponse<Model.ProvisioningConfigUnion<any, any>[]>;
     /**
-     * Creates, updates, or removes role definitions for a named identity-provider client. The target realm must be active unless the caller is a superuser.
-     * HTTP PUT /user/{realm}/{clientId}/roles
-     * Java method: org.openremote.model.security.UserResource.updateClientRoles
+     * Permanently removes the provisioning configuration identified by the path. This operation is restricted to a super administrator.
+     * HTTP DELETE /provisioning/{id}
+     * Java method: org.openremote.model.provisioning.ProvisioningResource.deleteProvisioningConfig
      */
-    updateClientRoles(realm: string, clientId: string, roles: Model.Role[], options?: O): RestResponse<void>;
+    deleteProvisioningConfig(id: number, options?: O): RestResponse<void>;
     /**
-     * Returns one user when it belongs to the requested accessible realm. Without read-admin permission, callers may retrieve only their own user. The target realm must be active unless the caller is a superuser.
-     * HTTP GET /user/{realm}/{userId}
-     * Java method: org.openremote.model.security.UserResource.get
+     * Replaces the provisioning configuration identified by the path. This operation is restricted to a super administrator.
+     * HTTP PUT /provisioning/{id}
+     * Java method: org.openremote.model.provisioning.ProvisioningResource.updateProvisioningConfig
      */
-    get(realm: string, userId: string, options?: O): RestResponse<Model.User>;
+    updateProvisioningConfig(id: number, provisioningConfig: Model.ProvisioningConfigUnion<any, any>, options?: O): RestResponse<void>;
 }
 export declare class NotificationResourceClient<O> {
     protected httpClient: HttpClient<O>;
@@ -947,278 +910,315 @@ export declare class NotificationResourceClient<O> {
         targetId?: string;
     }, options?: O): RestResponse<void>;
 }
-export declare class MapResourceClient<O> {
+export declare class AssetDatapointResourceClient<O> {
     protected httpClient: HttpClient<O>;
     constructor(httpClient: HttpClient<O>);
     /**
-     * Returns realm-aware public MapLibre settings with externally reachable URLs derived from proxy headers.
-     * HTTP GET /map
-     * Java method: org.openremote.model.map.MapResource.getSettings
+     * Streams a ZIP archive containing exported datapoints for one or more attribute references over the requested inclusive time range. attributeRefs is a JSON-encoded array of objects with id and name fields.
+     * Response code 200 - A ZIP archive containing the exported data
+     * HTTP GET /asset/datapoint/export
+     * Java method: org.openremote.model.datapoint.AssetDatapointResource.getDatapointExport
      */
-    getSettings(options?: O): RestResponse<{
-        [id: string]: unknown;
-    }>;
+    getDatapointExport(queryParams?: {
+        attributeRefs?: string;
+        fromTimestamp?: number;
+        toTimestamp?: number;
+        format?: Model.DatapointExportFormat;
+    }, options?: O): RestResponse<any>;
     /**
-     * Stores the map configuration and returns the resulting public MapLibre settings. This operation is restricted to a super administrator.
-     * HTTP PUT /map
-     * Java method: org.openremote.model.map.MapResource.saveSettings
+     * Returns the oldest and newest stored timestamps for one attribute. The asset and attribute must be readable by the authenticated user and configured for datapoint storage.
+     * HTTP GET /asset/datapoint/periods
+     * Java method: org.openremote.model.datapoint.AssetDatapointResource.getDatapointPeriod
      */
-    saveSettings(mapConfig: Model.MapConfig, options?: O): RestResponse<{
-        [id: string]: unknown;
-    }>;
+    getDatapointPeriod(queryParams?: {
+        assetId?: string;
+        attributeName?: string;
+    }, options?: O): RestResponse<Model.DatapointPeriod>;
     /**
-     * Deletes the installed custom MBTiles database and returns the fallback public map settings. This operation is restricted to a super administrator.
-     * HTTP DELETE /map/deleteMap
-     * Java method: org.openremote.model.map.MapResource.deleteMap
+     * Returns stored historical values for one attribute. A null body returns the available series; a polymorphic query body controls the time range and retrieval or aggregation strategy. Anonymous access requires public-read access on both asset and attribute.
+     * HTTP POST /asset/datapoint/{assetId}/{attributeName}
+     * Java method: org.openremote.model.datapoint.AssetDatapointResource.getDatapoints
      */
-    deleteMap(options?: O): RestResponse<{
-        [id: string]: unknown;
-    }>;
+    getDatapoints(assetId: string, attributeName: string, query: Model.AssetDatapointQueryUnion, options?: O): RestResponse<Model.ValueDatapoint<any>[]>;
+}
+export declare class RulesResourceClient<O> {
+    protected httpClient: HttpClient<O>;
+    constructor(httpClient: HttpClient<O>);
     /**
-     * Reports whether custom MBTiles data is installed and the maximum accepted upload size.
-     * HTTP GET /map/getCustomMapInfo
-     * Java method: org.openremote.model.map.MapResource.getCustomMapInfo
+     * Creates and deploys a global ruleset and returns its numeric ID. Super-user access is required; legacy JavaScript rulesets cannot be created.
+     * HTTP POST /rules
+     * Java method: org.openremote.model.rules.RulesResource.createGlobalRuleset
      */
-    getCustomMapInfo(options?: O): RestResponse<{
-        [id: string]: unknown;
-    }>;
+    createGlobalRuleset(ruleset: Model.GlobalRuleset, options?: O): RestResponse<number>;
     /**
-     * Returns a pre-compressed Mapbox vector tile for the requested zoom, column, and row coordinates.
-     * Response code 200 - Gzip-compressed vector tile
-     * Response code 204 - No tile exists at the requested coordinates
-     * HTTP GET /map/tile/{zoom}/{column}/{row}
-     * Java method: org.openremote.model.map.MapResource.getTile
+     * Returns global rulesets filtered by repeated language parameters. fullyPopulate controls whether rule source and other large fields are loaded; super-user access is required.
+     * HTTP GET /rules
+     * Java method: org.openremote.model.rules.RulesResource.getGlobalRulesets
      */
-    getTile(zoom: number, column: number, row: number, options?: O): RestResponse<any>;
+    getGlobalRulesets(queryParams?: {
+        language?: Model.RulesetLang[];
+        fullyPopulate?: boolean;
+    }, options?: O): RestResponse<Model.GlobalRuleset[]>;
     /**
-     * Stores the raw request body as the realm's custom MBTiles database and returns the resulting public map settings. This operation is restricted to a super administrator.
-     * HTTP POST /map/upload
-     * Java method: org.openremote.model.map.MapResource.uploadMap
+     * Creates and deploys a ruleset for an accessible asset and returns its numeric ID. The assetId is taken from the request body.
+     * HTTP POST /rules/asset
+     * Java method: org.openremote.model.rules.RulesResource.createAssetRuleset
      */
-    uploadMap(queryParams?: {
-        filename?: string;
-    }, options?: O): RestResponse<{
-        [id: string]: unknown;
-    }>;
-}
-export declare class ConfigurationResourceClient<O> {
-    protected httpClient: HttpClient<O>;
-    constructor(httpClient: HttpClient<O>);
+    createAssetRuleset(ruleset: Model.AssetRuleset, options?: O): RestResponse<number>;
     /**
-     * Returns the public Manager application configuration used by clients before and after authentication.
-     * HTTP GET /configuration/manager
-     * Java method: org.openremote.model.manager.ConfigurationResource.getManagerConfig
+     * Returns asset rulesets filtered by language. Callers without full access receive public rulesets only; a nonexistent asset produces an empty array.
+     * HTTP GET /rules/asset/for/{assetId}
+     * Java method: org.openremote.model.rules.RulesResource.getAssetRulesets
      */
-    getManagerConfig(options?: O): RestResponse<Model.ManagerAppConfig>;
+    getAssetRulesets(assetId: string, queryParams?: {
+        language?: Model.RulesetLang[];
+        fullyPopulate?: boolean;
+    }, options?: O): RestResponse<Model.AssetRuleset[]>;
     /**
-     * Replaces manager_config.json and returns the stored configuration. This administrative change affects Manager UI branding and behavior. This operation is restricted to a super administrator.
-     * HTTP PUT /configuration/manager
-     * Java method: org.openremote.model.manager.ConfigurationResource.update
+     * Permanently removes and undeploys one ruleset from an accessible asset.
+     * HTTP DELETE /rules/asset/{id}
+     * Java method: org.openremote.model.rules.RulesResource.deleteAssetRuleset
      */
-    update(managerConfiguration: Model.ManagerAppConfig, options?: O): RestResponse<Model.ManagerAppConfig>;
+    deleteAssetRuleset(id: number, options?: O): RestResponse<void>;
     /**
-     * Validates and stores the supplied image FileInfo at the requested relative path, replacing an existing image, then returns its Manager API path. This operation is restricted to a super administrator.
-     * HTTP POST /configuration/manager/image
-     * Java method: org.openremote.model.manager.ConfigurationResource.imageUpload
+     * Returns one fully populated asset ruleset when the caller can access its realm and owning asset.
+     * HTTP GET /rules/asset/{id}
+     * Java method: org.openremote.model.rules.RulesResource.getAssetRuleset
      */
-    imageUpload(fileInfo: Model.FileInfo, queryParams?: {
-        path?: string;
-    }, options?: O): RestResponse<string>;
+    getAssetRuleset(id: number, options?: O): RestResponse<Model.AssetRuleset>;
     /**
-     * Streams a configuration image using a fixed media type determined by its filename extension. Only png, jpg, jpeg, ico, and svg extensions are served, ignoring case; unsupported extensions return 404.
-     * Response code 200 - The image file
-     * HTTP GET /configuration/manager/image/{filename: .+}
-     * Java method: org.openremote.model.manager.ConfigurationResource.getManagerConfigImage
+     * Replaces and redeploys one asset ruleset. The ID must match and an existing ruleset cannot be reassigned to another asset.
+     * HTTP PUT /rules/asset/{id}
+     * Java method: org.openremote.model.rules.RulesResource.updateAssetRuleset
      */
-    getManagerConfigImage(filename: string, options?: O): RestResponse<any>;
-}
-export declare class AssetResourceClient<O> {
-    protected httpClient: HttpClient<O>;
-    constructor(httpClient: HttpClient<O>);
+    updateAssetRuleset(id: number, ruleset: Model.AssetRuleset, options?: O): RestResponse<void>;
     /**
-     * Creates an asset in an accessible realm and returns the persisted representation. The server generates an ID when absent; supplied IDs must be globally unique and 22 characters long.
-     * HTTP POST /asset
-     * Java method: org.openremote.model.asset.AssetResource.create
+     * Extracts geofence definitions relevant to the asset. Anonymous access requires a public-readable asset; authenticated restricted users require an asset link.
+     * HTTP GET /rules/geofences/{assetId}
+     * Java method: org.openremote.model.rules.RulesResource.getAssetGeofences
      */
-    create(asset: Model.Asset, options?: O): RestResponse<Model.Asset>;
+    getAssetGeofences(assetId: string, options?: O): RestResponse<Model.GeofenceDefinition[]>;
     /**
-     * Permanently deletes every asset identified by repeated assetId query parameters, subject to realm and restricted-user access rules.
-     * HTTP DELETE /asset
-     * Java method: org.openremote.model.asset.AssetResource.delete
+     * Returns runtime status and error counts for an accessible asset engine. Returns null when the asset or its engine does not exist.
+     * Response code 204 - The asset or its rules engine does not exist
+     * HTTP GET /rules/info/asset/{assetId}
+     * Java method: org.openremote.model.rules.RulesResource.getAssetEngineInfo
      */
-    delete(queryParams?: {
-        assetId?: string[];
-    }, options?: O): RestResponse<void>;
+    getAssetEngineInfo(assetId: string, options?: O): RestResponse<Model.RulesEngineInfo>;
     /**
-     * Submits a batch of attribute states using current server time and returns one result per input item. Authorization and processing failures are encoded in each AttributeWriteResult rather than returned as an HTTP error.
-     * HTTP PUT /asset/attributes
-     * Java method: org.openremote.model.asset.AssetResource.writeAttributeValues
+     * Returns runtime status and compilation/execution error counts for the global engine, or null when that engine is not running. Super-user access is required.
+     * Response code 204 - The global rules engine is not running
+     * HTTP GET /rules/info/global
+     * Java method: org.openremote.model.rules.RulesResource.getGlobalEngineInfo
      */
-    writeAttributeValues(attributeStates: Model.AttributeState[], options?: O): RestResponse<Model.AttributeWriteResult[]>;
+    getGlobalEngineInfo(options?: O): RestResponse<Model.RulesEngineInfo>;
     /**
-     * Submits a batch of complete attribute events and returns one result per input item. Supplied timestamps are preserved; authorization and processing failures are encoded per result rather than returned as an HTTP error.
-     * HTTP PUT /asset/attributes/timestamp
-     * Java method: org.openremote.model.asset.AssetResource.writeAttributeEvents
+     * Returns runtime status and error counts for an accessible realm engine, or null when that engine is not running. Restricted users cannot inspect realm engines.
+     * Response code 204 - The requested realm rules engine is not running
+     * HTTP GET /rules/info/realm/{realm}
+     * Java method: org.openremote.model.rules.RulesResource.getRealmEngineInfo
      */
-    writeAttributeEvents(attributeEvents: Model.AttributeEvent[], options?: O): RestResponse<Model.AttributeWriteResult[]>;
+    getRealmEngineInfo(realm: string, options?: O): RestResponse<Model.RulesEngineInfo>;
     /**
-     * Returns only the number of assets matching an AssetQuery after applying the caller's realm, public, and linked-asset access constraints.
-     * HTTP POST /asset/count
-     * Java method: org.openremote.model.asset.AssetResource.queryCount
+     * Creates and deploys a ruleset in its body realm and returns its numeric ID. Restricted users cannot create realm rulesets; legacy JavaScript is not accepted.
+     * HTTP POST /rules/realm
+     * Java method: org.openremote.model.rules.RulesResource.createRealmRuleset
      */
-    queryCount(query: Model.AssetQuery, options?: O): RestResponse<number>;
+    createRealmRuleset(ruleset: Model.RealmRuleset, options?: O): RestResponse<number>;
     /**
-     * Clears the parent reference of every asset listed in repeated assetIds query parameters.
-     * HTTP DELETE /asset/parent
-     * Java method: org.openremote.model.asset.AssetResource.updateNoneParent
+     * Returns realm rulesets filtered by language. Anonymous, restricted, or callers without read-rules permission receive public rulesets only; fullyPopulate controls loading of rule source.
+     * HTTP GET /rules/realm/for/{realm}
+     * Java method: org.openremote.model.rules.RulesResource.getRealmRulesets
      */
-    updateNoneParent(queryParams?: {
-        assetIds?: string[];
-    }, options?: O): RestResponse<void>;
+    getRealmRulesets(realm: string, queryParams?: {
+        language?: Model.RulesetLang[];
+        fullyPopulate?: boolean;
+    }, options?: O): RestResponse<Model.RealmRuleset[]>;
     /**
-     * Returns the asset identity and properties without loading attributes or path data. The same access rules as getAsset apply.
-     * HTTP GET /asset/partial/{assetId}
-     * Java method: org.openremote.model.asset.AssetResource.getPartial
+     * Permanently removes and undeploys one ruleset from an accessible realm.
+     * HTTP DELETE /rules/realm/{id}
+     * Java method: org.openremote.model.rules.RulesResource.deleteRealmRuleset
      */
-    getPartial(assetId: string, options?: O): RestResponse<Model.Asset>;
+    deleteRealmRuleset(id: number, options?: O): RestResponse<void>;
     /**
-     * Executes an AssetQuery after constraining realm and linked-asset access. Anonymous callers receive public-readable assets only; the query select clause controls which fields are populated.
-     * HTTP POST /asset/query
-     * Java method: org.openremote.model.asset.AssetResource.queryAssets
+     * Returns one fully populated realm ruleset when its realm is accessible to the caller.
+     * HTTP GET /rules/realm/{id}
+     * Java method: org.openremote.model.rules.RulesResource.getRealmRuleset
+     */
+    getRealmRuleset(id: number, options?: O): RestResponse<Model.RealmRuleset>;
+    /**
+     * Replaces and redeploys one realm ruleset. Path and body IDs and the existing realm must match; legacy JavaScript cannot be updated.
+     * HTTP PUT /rules/realm/{id}
+     * Java method: org.openremote.model.rules.RulesResource.updateRealmRuleset
+     */
+    updateRealmRuleset(id: number, ruleset: Model.RealmRuleset, options?: O): RestResponse<void>;
+    /**
+     * Permanently removes and undeploys one global ruleset. Super-user access is required.
+     * HTTP DELETE /rules/{id}
+     * Java method: org.openremote.model.rules.RulesResource.deleteGlobalRuleset
+     */
+    deleteGlobalRuleset(id: number, options?: O): RestResponse<void>;
+    /**
+     * Returns one fully populated global ruleset including transient deployment status and errors. Super-user access is required.
+     * HTTP GET /rules/{id}
+     * Java method: org.openremote.model.rules.RulesResource.getGlobalRuleset
      */
-    queryAssets(query: Model.AssetQuery, options?: O): RestResponse<Model.Asset[]>;
+    getGlobalRuleset(id: number, options?: O): RestResponse<Model.GlobalRuleset>;
     /**
-     * Applies the same authorization and selection rules as queryAssets, then returns a hierarchy optimized for tree display rather than a flat asset array.
-     * HTTP POST /asset/tree
-     * Java method: org.openremote.model.asset.AssetResource.queryAssetTree
+     * Replaces and redeploys the identified global ruleset. Path and body IDs must match; legacy JavaScript rulesets cannot be updated.
+     * HTTP PUT /rules/{id}
+     * Java method: org.openremote.model.rules.RulesResource.updateGlobalRuleset
      */
-    queryAssetTree(query: Model.AssetQuery, options?: O): RestResponse<Model.AssetTree>;
+    updateGlobalRuleset(id: number, ruleset: Model.GlobalRuleset, options?: O): RestResponse<void>;
+}
+export declare class SyslogResourceClient<O> {
+    protected httpClient: HttpClient<O>;
+    constructor(httpClient: HttpClient<O>);
     /**
-     * Returns partial linked assets for a restricted user, root assets for an unrestricted realm user, and an empty array for a super user. Attributes and paths are omitted; use getAsset for full details.
-     * HTTP GET /asset/user/current
-     * Java method: org.openremote.model.asset.AssetResource.getCurrentUserAssets
+     * Returns the current log-storage and retention configuration. This operation is restricted to a super administrator.
+     * HTTP GET /syslog/config
+     * Java method: org.openremote.model.syslog.SyslogResource.getConfig
      */
-    getCurrentUserAssets(options?: O): RestResponse<Model.Asset[]>;
+    getConfig(options?: O): RestResponse<Model.SyslogConfig>;
     /**
-     * Creates all supplied links as one operation. Every item must identify the same realm and user, and every referenced realm, user, and asset must exist.
-     * HTTP POST /asset/user/link
-     * Java method: org.openremote.model.asset.AssetResource.createUserAssetLinks
+     * Validates and applies log-storage and retention settings. This operation is restricted to a super administrator.
+     * HTTP PUT /syslog/config
+     * Java method: org.openremote.model.syslog.SyslogResource.updateConfig
      */
-    createUserAssetLinks(userAssets: Model.UserAssetLink[], options?: O): RestResponse<void>;
+    updateConfig(config: Model.SyslogConfig, options?: O): RestResponse<void>;
     /**
-     * Returns user-asset links in the required realm, optionally filtered by userId and assetId. Missing users or assets produce an empty result; restricted users cannot call this operation.
-     * HTTP GET /asset/user/link
-     * Java method: org.openremote.model.asset.AssetResource.getUserAssetLinks
+     * Permanently removes all events from the configured syslog storage. This operation is restricted to a super administrator.
+     * HTTP DELETE /syslog/event
+     * Java method: org.openremote.model.syslog.SyslogResource.clearEvents
      */
-    getUserAssetLinks(queryParams?: {
-        realm?: string;
-        userId?: string;
-        assetId?: string;
-    }, options?: O): RestResponse<Model.UserAssetLink[]>;
+    clearEvents(options?: O): RestResponse<void>;
     /**
-     * Removes all supplied links. Every item must identify the same realm and user.
-     * HTTP POST /asset/user/link/delete
-     * Java method: org.openremote.model.asset.AssetResource.deleteUserAssetLinks
+     * Returns a page of log events filtered by severity, Unix-millisecond time range, categories, and subcategories. RFC 8288 Link headers point to the next and last pages.
+     * Response code 200 - The requested page of syslog events
+     * HTTP GET /syslog/event
+     * Java method: org.openremote.model.syslog.SyslogResource.getEvents
      */
-    deleteUserAssetLinks(userAssets: Model.UserAssetLink[], options?: O): RestResponse<void>;
+    getEvents(queryParams?: {
+        level?: Model.SyslogLevel;
+        per_page?: number;
+        page?: number;
+        from?: number;
+        to?: number;
+        category?: Model.SyslogCategory[];
+        subCategory?: string[];
+    }, options?: O): RestResponse<any>;
+}
+export declare class ConsoleResourceClient<O> {
+    protected httpClient: HttpClient<O>;
+    constructor(httpClient: HttpClient<O>);
     /**
-     * Removes every asset link belonging to the user in the requested realm.
-     * HTTP DELETE /asset/user/link/{realm}/{userId}
-     * Java method: org.openremote.model.asset.AssetResource.deleteAllUserAssetLinks
+     * Creates an anonymous console registration when id is absent, or updates an existing registration when id is present. Authenticated new registrations are linked to the caller; updates require that link. The returned registration contains the durable asset ID for later calls.
+     * HTTP POST /console/register
+     * Java method: org.openremote.model.console.ConsoleResource.register
      */
-    deleteAllUserAssetLinks(realm: string, userId: string, options?: O): RestResponse<void>;
+    register(consoleRegistration: Model.ConsoleRegistration, options?: O): RestResponse<Model.ConsoleRegistration>;
+}
+export declare class MapResourceClient<O> {
+    protected httpClient: HttpClient<O>;
+    constructor(httpClient: HttpClient<O>);
     /**
-     * Removes the link identified by realm, user, and asset. The caller must be allowed to administer asset links in that realm.
-     * HTTP DELETE /asset/user/link/{realm}/{userId}/{assetId}
-     * Java method: org.openremote.model.asset.AssetResource.deleteUserAssetLink
+     * Returns realm-aware public MapLibre settings with externally reachable URLs derived from proxy headers.
+     * HTTP GET /map
+     * Java method: org.openremote.model.map.MapResource.getSettings
      */
-    deleteUserAssetLink(realm: string, userId: string, assetId: string, options?: O): RestResponse<void>;
+    getSettings(options?: O): RestResponse<{
+        [id: string]: unknown;
+    }>;
     /**
-     * Returns a fully loaded asset including its path and attributes. Access is constrained to the caller's realm and, for restricted users, linked assets.
-     * HTTP GET /asset/{assetId}
-     * Java method: org.openremote.model.asset.AssetResource.get
+     * Stores the map configuration and returns the resulting public MapLibre settings. This operation is restricted to a super administrator.
+     * HTTP PUT /map
+     * Java method: org.openremote.model.map.MapResource.saveSettings
      */
-    get(assetId: string, options?: O): RestResponse<Model.Asset>;
+    saveSettings(mapConfig: Model.MapConfig, options?: O): RestResponse<{
+        [id: string]: unknown;
+    }>;
     /**
-     * Replaces mutable asset data while preserving the path identifier. Realm, parent, restricted-user, and private-metadata rules are validated; disallowed restricted-user fields may be ignored.
-     * HTTP PUT /asset/{assetId}
-     * Java method: org.openremote.model.asset.AssetResource.update
+     * Deletes the installed custom MBTiles database and returns the fallback public map settings. This operation is restricted to a super administrator.
+     * HTTP DELETE /map/deleteMap
+     * Java method: org.openremote.model.map.MapResource.deleteMap
      */
-    update(assetId: string, asset: Model.Asset, options?: O): RestResponse<Model.Asset>;
+    deleteMap(options?: O): RestResponse<{
+        [id: string]: unknown;
+    }>;
     /**
-     * Submits an asynchronous attribute write using the current server time. The result reports whether the event was accepted, not whether downstream processing ultimately succeeded. Anonymous writes require public-write metadata.
-     * Response code 400 - The attribute write failed
-     * Response code 406 - The supplied value is not valid for the attribute
-     * Response code 429 - The attribute event queue is full; retry the write later
-     * HTTP PUT /asset/{assetId}/attribute/{attributeName}
-     * Java method: org.openremote.model.asset.AssetResource.writeAttributeValue
+     * Reports whether custom MBTiles data is installed and the maximum accepted upload size.
+     * HTTP GET /map/getCustomMapInfo
+     * Java method: org.openremote.model.map.MapResource.getCustomMapInfo
      */
-    writeAttributeValue$PUT$asset_assetId_attribute_attributeName(assetId: string, attributeName: string, value: any, options?: O): RestResponse<Model.AttributeWriteResult>;
+    getCustomMapInfo(options?: O): RestResponse<{
+        [id: string]: unknown;
+    }>;
     /**
-     * Submits an asynchronous attribute write using the supplied Unix timestamp in milliseconds. The result reports acceptance only; anonymous writes require public-write metadata.
-     * Response code 400 - The attribute write failed
-     * Response code 406 - The supplied value is not valid for the attribute
-     * Response code 429 - The attribute event queue is full; retry the write later
-     * HTTP PUT /asset/{assetId}/attribute/{attributeName}/{timestamp}
-     * Java method: org.openremote.model.asset.AssetResource.writeAttributeValue
+     * Returns a pre-compressed Mapbox vector tile for the requested zoom, column, and row coordinates.
+     * Response code 200 - Gzip-compressed vector tile
+     * Response code 204 - No tile exists at the requested coordinates
+     * HTTP GET /map/tile/{zoom}/{column}/{row}
+     * Java method: org.openremote.model.map.MapResource.getTile
      */
-    writeAttributeValue$PUT$asset_assetId_attribute_attributeName_timestamp(assetId: string, attributeName: string, timestamp: number, value: any, options?: O): RestResponse<Model.AttributeWriteResult>;
+    getTile(zoom: number, column: number, row: number, options?: O): RestResponse<any>;
     /**
-     * Sets parentAssetId as the parent of every asset listed in repeated assetIds query parameters. Parent and children must satisfy realm, access, and hierarchy constraints.
-     * HTTP PUT /asset/{parentAssetId}/child
-     * Java method: org.openremote.model.asset.AssetResource.updateParent
+     * Stores the raw request body as the realm's custom MBTiles database and returns the resulting public map settings. This operation is restricted to a super administrator.
+     * HTTP POST /map/upload
+     * Java method: org.openremote.model.map.MapResource.uploadMap
      */
-    updateParent(parentAssetId: string, queryParams?: {
-        assetIds?: string[];
-    }, options?: O): RestResponse<void>;
+    uploadMap(queryParams?: {
+        filename?: string;
+    }, options?: O): RestResponse<{
+        [id: string]: unknown;
+    }>;
 }
 export type RestResponse<R> = Promise<Axios.GenericAxiosResponse<R>>;
 export declare class ApiClient {
-    protected _gatewayServiceResource: AxiosGatewayServiceResourceClient;
-    protected _assetModelResource: AxiosAssetModelResourceClient;
-    protected _gatewayClientResource: AxiosGatewayClientResourceClient;
-    protected _rulesResource: AxiosRulesResourceClient;
-    protected _consoleResource: AxiosConsoleResourceClient;
-    protected _appResource: AxiosAppResourceClient;
-    protected _externalServiceResource: AxiosExternalServiceResourceClient;
-    protected _agentResource: AxiosAgentResourceClient;
-    protected _syslogResource: AxiosSyslogResourceClient;
+    protected _configurationResource: AxiosConfigurationResourceClient;
     protected _alarmResource: AxiosAlarmResourceClient;
-    protected _provisioningResource: AxiosProvisioningResourceClient;
-    protected _statusResource: AxiosStatusResourceClient;
-    protected _flowResource: AxiosFlowResourceClient;
-    protected _assetDatapointResource: AxiosAssetDatapointResourceClient;
     protected _dashboardResource: AxiosDashboardResourceClient;
+    protected _userResource: AxiosUserResourceClient;
+    protected _externalServiceResource: AxiosExternalServiceResourceClient;
+    protected _flowResource: AxiosFlowResourceClient;
     protected _realmResource: AxiosRealmResourceClient;
+    protected _gatewayServiceResource: AxiosGatewayServiceResourceClient;
+    protected _assetResource: AxiosAssetResourceClient;
+    protected _statusResource: AxiosStatusResourceClient;
+    protected _agentResource: AxiosAgentResourceClient;
     protected _assetPredictedDatapointResource: AxiosAssetPredictedDatapointResourceClient;
-    protected _userResource: AxiosUserResourceClient;
+    protected _gatewayClientResource: AxiosGatewayClientResourceClient;
+    protected _appResource: AxiosAppResourceClient;
+    protected _assetModelResource: AxiosAssetModelResourceClient;
+    protected _provisioningResource: AxiosProvisioningResourceClient;
     protected _notificationResource: AxiosNotificationResourceClient;
+    protected _assetDatapointResource: AxiosAssetDatapointResourceClient;
+    protected _rulesResource: AxiosRulesResourceClient;
+    protected _syslogResource: AxiosSyslogResourceClient;
+    protected _consoleResource: AxiosConsoleResourceClient;
     protected _mapResource: AxiosMapResourceClient;
-    protected _configurationResource: AxiosConfigurationResourceClient;
-    protected _assetResource: AxiosAssetResourceClient;
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
-    get GatewayServiceResource(): AxiosGatewayServiceResourceClient;
-    get AssetModelResource(): AxiosAssetModelResourceClient;
-    get GatewayClientResource(): AxiosGatewayClientResourceClient;
-    get RulesResource(): AxiosRulesResourceClient;
-    get ConsoleResource(): AxiosConsoleResourceClient;
-    get AppResource(): AxiosAppResourceClient;
-    get ExternalServiceResource(): AxiosExternalServiceResourceClient;
-    get AgentResource(): AxiosAgentResourceClient;
-    get SyslogResource(): AxiosSyslogResourceClient;
+    get ConfigurationResource(): AxiosConfigurationResourceClient;
     get AlarmResource(): AxiosAlarmResourceClient;
-    get ProvisioningResource(): AxiosProvisioningResourceClient;
-    get StatusResource(): AxiosStatusResourceClient;
-    get FlowResource(): AxiosFlowResourceClient;
-    get AssetDatapointResource(): AxiosAssetDatapointResourceClient;
     get DashboardResource(): AxiosDashboardResourceClient;
+    get UserResource(): AxiosUserResourceClient;
+    get ExternalServiceResource(): AxiosExternalServiceResourceClient;
+    get FlowResource(): AxiosFlowResourceClient;
     get RealmResource(): AxiosRealmResourceClient;
+    get GatewayServiceResource(): AxiosGatewayServiceResourceClient;
+    get AssetResource(): AxiosAssetResourceClient;
+    get StatusResource(): AxiosStatusResourceClient;
+    get AgentResource(): AxiosAgentResourceClient;
     get AssetPredictedDatapointResource(): AxiosAssetPredictedDatapointResourceClient;
-    get UserResource(): AxiosUserResourceClient;
+    get GatewayClientResource(): AxiosGatewayClientResourceClient;
+    get AppResource(): AxiosAppResourceClient;
+    get AssetModelResource(): AxiosAssetModelResourceClient;
+    get ProvisioningResource(): AxiosProvisioningResourceClient;
     get NotificationResource(): AxiosNotificationResourceClient;
+    get AssetDatapointResource(): AxiosAssetDatapointResourceClient;
+    get RulesResource(): AxiosRulesResourceClient;
+    get SyslogResource(): AxiosSyslogResourceClient;
+    get ConsoleResource(): AxiosConsoleResourceClient;
     get MapResource(): AxiosMapResourceClient;
-    get ConfigurationResource(): AxiosConfigurationResourceClient;
-    get AssetResource(): AxiosAssetResourceClient;
 }
 import * as Axios from "axios";
 declare module "axios" {
@@ -1226,70 +1226,70 @@ declare module "axios" {
         data: R;
     }
 }
-export declare class AxiosGatewayServiceResourceClient extends GatewayServiceResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosConfigurationResourceClient extends ConfigurationResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosAssetModelResourceClient extends AssetModelResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosAlarmResourceClient extends AlarmResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosGatewayClientResourceClient extends GatewayClientResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosDashboardResourceClient extends DashboardResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosRulesResourceClient extends RulesResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosUserResourceClient extends UserResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosConsoleResourceClient extends ConsoleResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosExternalServiceResourceClient extends ExternalServiceResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosAppResourceClient extends AppResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosFlowResourceClient extends FlowResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosExternalServiceResourceClient extends ExternalServiceResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosRealmResourceClient extends RealmResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosAgentResourceClient extends AgentResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosGatewayServiceResourceClient extends GatewayServiceResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosSyslogResourceClient extends SyslogResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosAssetResourceClient extends AssetResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosAlarmResourceClient extends AlarmResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosStatusResourceClient extends StatusResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosProvisioningResourceClient extends ProvisioningResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosAgentResourceClient extends AgentResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosStatusResourceClient extends StatusResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosAssetPredictedDatapointResourceClient extends AssetPredictedDatapointResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosFlowResourceClient extends FlowResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosGatewayClientResourceClient extends GatewayClientResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosAssetDatapointResourceClient extends AssetDatapointResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosAppResourceClient extends AppResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosDashboardResourceClient extends DashboardResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosAssetModelResourceClient extends AssetModelResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosRealmResourceClient extends RealmResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosProvisioningResourceClient extends ProvisioningResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosAssetPredictedDatapointResourceClient extends AssetPredictedDatapointResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosNotificationResourceClient extends NotificationResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosUserResourceClient extends UserResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosAssetDatapointResourceClient extends AssetDatapointResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosNotificationResourceClient extends NotificationResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosRulesResourceClient extends RulesResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosMapResourceClient extends MapResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosSyslogResourceClient extends SyslogResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosConfigurationResourceClient extends ConfigurationResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosConsoleResourceClient extends ConsoleResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
-export declare class AxiosAssetResourceClient extends AssetResourceClient<Axios.AxiosRequestConfig> {
+export declare class AxiosMapResourceClient extends MapResourceClient<Axios.AxiosRequestConfig> {
     constructor(baseURL: string, axiosInstance?: Axios.AxiosInstance);
 }
 //# sourceMappingURL=restclient.d.ts.map