@greensecurity/javascript-sdk 0.45.0-beta.22 → 0.45.0-beta.24

package/src/sdk/vendors.ts

@@ -77,41 +77,45 @@ export class Vendors extends ClientSDK {
    * Common use cases for this are 1099 contractors who represent multiple companies or any vendor that has their
    * credentials or payments handled by a company other than the one they use to do business with a facility.
    *
+   * **Permissions.** Requires the `vendors.view` permission.
+   *
    * Available `expand` scopes are:
    *
-   * vendor.user
-   * vendor.vendor_type
-   * vendor.vendor_job
-   * vendor.image_urls
-   * vendor.payment_profile
-   * vendor.primary_facility
-   * vendor.primary_department
-   * vendor.company
-   * vendor.credentialing_subscription
-   * vendor.scrubs_subscription
-   * vendor.payment_responsibility
-   * vendor.background_check_date_expires
-   * vendor.credit_balance
-   * vendor.registration_data
-   * vendor.registration_finished
-   * vendor.target_facilities
-   * vendor.approved_calendaring_facilities
-   * vendor.pending_invoice
-   * vendor.vendor_groups
-   * vendor.has_credentialed_facilities
-   * vendor.has_emerald_status
-   * vendor.custom_fields
-   * vendor.last_scanned
-   *
-   * Subscription expand scopes (require vendor.credentialing_subscription):
-   *
-   * subscription.date_ends
-   * subscription.variant_title
-   * subscription.current_line_item
-   * subscription.next_line_item
-   * subscription.current_financial_status
-   * subscription.next_financial_status
-   * subscription.expedited_offers
+   * - `vendor.user`
+   * - `vendor.vendor_type`
+   * - `vendor.vendor_job`
+   * - `vendor.badge_details`
+   * - `vendor.required_badge_type`
+   * - `vendor.image_urls`
+   * - `vendor.payment_profile`
+   * - `vendor.primary_facility`
+   * - `vendor.primary_department`
+   * - `vendor.company`
+   * - `vendor.credentialing_subscription`
+   * - `vendor.scrubs_subscription`
+   * - `vendor.payment_responsibility`
+   * - `vendor.background_check_date_expires`
+   * - `vendor.credit_balance`
+   * - `vendor.registration_data`
+   * - `vendor.registration_finished`
+   * - `vendor.target_facilities`
+   * - `vendor.approved_calendaring_facilities`
+   * - `vendor.pending_invoice`
+   * - `vendor.vendor_groups`
+   * - `vendor.has_credentialed_facilities`
+   * - `vendor.has_emerald_status`
+   * - `vendor.has_target_facility_questions`
+   * - `vendor.custom_fields`
+   * - `vendor.last_scanned`
+   * - `subscription.current_line_item`
+   * - `subscription.date_ends`
+   * - `subscription.variant_title`
+   * - `subscription.next_line_item`
+   * - `subscription.current_financial_status`
+   * - `subscription.next_financial_status`
+   * - `subscription.expedited_offers`
+   *
+   * Any other value is rejected with `422 Unprocessable Entity`.
    */
   async listVendors(
     request: operations.ListVendorsRequest,
@@ -137,6 +141,8 @@ export class Vendors extends ClientSDK {
    * `zip` is cross-checked against `state`: a code that is not shaped like a real postal
    * code, or that provably belongs to a different state, is rejected with `422` naming
    * the correct state.
+   *
+   * **Permissions.** Requires the `vendors.add` permission.
    */
   async createVendor(
     request: operations.CreateVendorRequestBody,
@@ -154,6 +160,8 @@ export class Vendors extends ClientSDK {
    *
    * @remarks
    * Create an initial vendor registration. Once successful, the vendor will be able to continue to filling out the rest of their onboarding profile.
+   *
+   * **Permissions.** No authentication required. A token is accepted if supplied, but anonymous callers are allowed.
    */
   async createVendorRegistration(
     request: operations.CreateVendorRegistrationRequestBody,
@@ -171,6 +179,8 @@ export class Vendors extends ClientSDK {
    *
    * @remarks
    * List valid job titles for Vendors. This can be used during sign up or in a filter.
+   *
+   * **Permissions.** No authentication required. A token is accepted if supplied, but anonymous callers are allowed.
    */
   async listVendorJobTitles(
     request: operations.ListVendorJobTitlesRequest,
@@ -190,6 +200,8 @@ export class Vendors extends ClientSDK {
    *
    * @remarks
    * List vendor types.
+   *
+   * **Permissions.** No authentication required. A token is accepted if supplied, but anonymous callers are allowed.
    */
   async listVendorTypes(
     request: operations.ListVendorTypesRequest,
@@ -212,6 +224,8 @@ export class Vendors extends ClientSDK {
    * company manager's company, or by the vendor themselves. Each `_user_id` field
    * indicates which party is responsible for that payment category; `null` means
    * responsibility defaults to the vendor.
+   *
+   * **Permissions.** Requires the `vendors.view` permission.
    */
   async getVendorPaymentResponsibility(
     request: operations.GetVendorPaymentResponsibilityRequest,
@@ -235,6 +249,8 @@ export class Vendors extends ClientSDK {
    * vendor's user ID (to assign responsibility back to the vendor) or the
    * authenticated manager's own user ID (to claim responsibility). Omitted fields
    * are left unchanged.
+   *
+   * **Permissions.** Requires the `vendors.edit` permission.
    */
   async updateVendorPaymentResponsibility(
     request: operations.UpdateVendorPaymentResponsibilityRequest,
@@ -254,6 +270,8 @@ export class Vendors extends ClientSDK {
    *
    * @remarks
    * Lists vendor credentials, required credentials, and company credentials. Utilized in Vendor Dashboard.
+   *
+   * **Permissions.** Requires the `vendor_credentials.view` permission.
    */
   async listVendorCredentials(
     request: operations.ListVendorCredentialsRequest,
@@ -274,34 +292,40 @@ export class Vendors extends ClientSDK {
    * @remarks
    * Get Vendor Credential details
    *
+   * **Permissions.** Requires the `vendor_credentials.view` permission.
+   *
    * Available `expand` scopes are:
-   *   - vendor_credential.credential
-   *   - vendor_credential.vendor
-   *   - vendor_credential.invoice
-   *   - vendor_credential.quote
-   *   - vendor_credential.vendor_credential_files
-   *   - vendor_credential.latest_vendor_credential_id
-   *   - vendor_credential.previously_approved
-   *   - vendor_credential.unsatisfied_dependencies
-   *   - vendor_credential.allow_expediting
-   *   - vendor_credential.unpaid_expedited_invoice_id
-   *   - vendor_credential.expedited_offers
-   *   - vendor_credential.background_check_results
-   *   - vendor_credential.vendor_credential_default_status
-   *   - vendor_credential.vendor_credential_data_requests
-   *   - vendor_credential.credential_variants
-   *   - vendor_credential.targets_chop
-   *   - vendor_credential.total_pending_credentials
-   *   - vendor_credential.background_check_provider_id
-   *   - vendor_credential.requires_invoice
-   *   - vendor_credential.credential_pricing_options
-   *   - subscription.date_ends
-   *   - subscription.variant_title
-   *   - subscription.current_line_item
-   *   - subscription.next_line_item
-   *   - subscription.current_financial_status
-   *   - subscription.next_financial_status
-   *   - subscription.expedited_offers
+   *
+   * - `vendor_credential.credential`
+   * - `vendor_credential.vendor`
+   * - `vendor_credential.invoice`
+   * - `vendor_credential.quote`
+   * - `vendor_credential.vendor_credential_files`
+   * - `vendor_credential.latest_vendor_credential_id`
+   * - `vendor_credential.previously_approved`
+   * - `vendor_credential.unsatisfied_dependencies`
+   * - `vendor_credential.allow_expediting`
+   * - `vendor_credential.unpaid_expedited_invoice_id`
+   * - `vendor_credential.expedited_offers`
+   * - `vendor_credential.background_check_results`
+   * - `vendor_credential.vendor_credential_default_status`
+   * - `vendor_credential.vendor_credential_data_requests`
+   * - `vendor_credential.credential_variants`
+   * - `vendor_credential.targets_chop`
+   * - `vendor_credential.total_pending_credentials`
+   * - `vendor_credential.background_check_provider_id`
+   * - `vendor_credential.requires_invoice`
+   * - `vendor_credential.credential_pricing_options`
+   * - `subscription.date_ends`
+   * - `subscription.variant_title`
+   * - `subscription.current_line_item`
+   * - `subscription.next_line_item`
+   * - `subscription.current_financial_status`
+   * - `subscription.next_financial_status`
+   * - `subscription.expedited_offers`
+   * - `background_check_results.pdf_uris`
+   *
+   * Any other value is rejected with `422 Unprocessable Entity`.
    */
   async getVendorCredentialDetails(
     request: operations.GetVendorCredentialDetailsRequest,
@@ -321,6 +345,8 @@ export class Vendors extends ClientSDK {
    *
    * @remarks
    * Update vendor credential data
+   *
+   * **Permissions.** Requires the `vendor_credentials.edit` permission.
    */
   async updateVendorCredentialData(
     request: operations.UpdateVendorCredentialDataRequest,
@@ -339,10 +365,14 @@ export class Vendors extends ClientSDK {
    * @remarks
    * Retrieve an individual vendor credential file.
    *
+   * **Permissions.** Requires the `vendor_credentials.view` permission.
+   *
    * Available `expand` scopes are:
    *
-   * - vendor_credential_file.vendor_credential
-   * - vendor_credential_file.credential_document
+   * - `vendor_credential_file.vendor_credential`
+   * - `vendor_credential_file.credential_document`
+   *
+   * Unrecognised values are ignored.
    */
   async getVendorCredentialFile(
     request: operations.GetVendorCredentialFileRequest,
@@ -360,6 +390,8 @@ export class Vendors extends ClientSDK {
    *
    * @remarks
    * It will update the vendor credential file properties
+   *
+   * **Permissions.** Requires the `vendor_credentials.view` permission.
    */
   async updateVendorCredentialFile(
     request: operations.UpdateVendorCredentialFileRequest,
@@ -377,6 +409,8 @@ export class Vendors extends ClientSDK {
    *
    * @remarks
    * It will delete the vendor credential file
+   *
+   * **Permissions.** Requires the `vendor_credentials.view` permission.
    */
   async deleteVendorCredentialFile(
     request: operations.DeleteVendorCredentialFileRequest,
@@ -394,6 +428,8 @@ export class Vendors extends ClientSDK {
    *
    * @remarks
    * Get vendor legal name
+   *
+   * **Permissions.** Requires a valid token. This endpoint is not gated on a named permission - the caller's role and their relationship to the record decide what is returned.
    */
   async getVendorLegalName(
     request: operations.GetVendorLegalNameRequest,
@@ -411,6 +447,8 @@ export class Vendors extends ClientSDK {
    *
    * @remarks
    * It will decline vendor credential
+   *
+   * **Permissions.** Requires the `vendor_credentials.view` permission.
    */
   async declineVendorCredential(
     request: operations.DeclineVendorCredentialRequest,
@@ -428,6 +466,8 @@ export class Vendors extends ClientSDK {
    *
    * @remarks
    * It will accept vendor credential
+   *
+   * **Permissions.** Requires the `vendor_credentials.view` permission.
    */
   async acceptVendorCredential(
     request: operations.AcceptVendorCredentialRequest,
@@ -445,6 +485,8 @@ export class Vendors extends ClientSDK {
    *
    * @remarks
    * It will check download code for vendor credential
+   *
+   * **Permissions.** Requires a valid token. This endpoint is not gated on a named permission - the caller's role and their relationship to the record decide what is returned.
    */
   async checkDownloadCode(
     request: operations.CheckDownloadCodeRequest,
@@ -462,6 +504,8 @@ export class Vendors extends ClientSDK {
    *
    * @remarks
    * It will send download code for vendor credential
+   *
+   * **Permissions.** Requires a valid token. This endpoint is not gated on a named permission - the caller's role and their relationship to the record decide what is returned.
    */
   async sendDownloadCode(
     request: operations.SendDownloadCodeRequest,
@@ -480,10 +524,14 @@ export class Vendors extends ClientSDK {
    * @remarks
    * Retrieve an vendor credential files.
    *
+   * **Permissions.** Requires the `vendor_credentials.view` permission.
+   *
    * Available `expand` scopes are:
    *
-   * - vendor_credential_file.vendor_credential
-   * - vendor_credential_file.credential_document
+   * - `vendor_credential_file.vendor_credential`
+   * - `vendor_credential_file.credential_document`
+   *
+   * Unrecognised values are ignored.
    */
   async listVendorCredentialFiles(
     request: operations.ListVendorCredentialFilesRequest,
@@ -501,6 +549,8 @@ export class Vendors extends ClientSDK {
    *
    * @remarks
    * It will add a new vendor credential file
+   *
+   * **Permissions.** Requires the `vendor_credentials.view` permission.
    */
   async addVendorCredentialFile(
     request: operations.AddVendorCredentialFileRequest,
@@ -518,6 +568,8 @@ export class Vendors extends ClientSDK {
    *
    * @remarks
    * It will submit vendor credential
+   *
+   * **Permissions.** Requires the `vendor_credentials.view` permission.
    */
   async submitVendorCredential(
     request: operations.SubmitVendorCredentialRequest,
@@ -535,6 +587,8 @@ export class Vendors extends ClientSDK {
    *
    * @remarks
    * It will create or update BackgroundCheckResults
+   *
+   * **Permissions.** Requires a valid token. This endpoint is not gated on a named permission - the caller's role and their relationship to the record decide what is returned.
    */
   async createOrUpdateBcr(
     request: operations.CreateOrUpdateBcrRequest,
@@ -552,6 +606,8 @@ export class Vendors extends ClientSDK {
    *
    * @remarks
    * It will submit vendor credential
+   *
+   * **Permissions.** Requires the `vendor_credentials.add` permission.
    */
   async createNewVendorCredentialVersion(
     request: operations.CreateNewVendorCredentialVersionRequestBody,
@@ -571,6 +627,8 @@ export class Vendors extends ClientSDK {
    *
    * @remarks
    * Lists vendor credentials history
+   *
+   * **Permissions.** Requires the `vendor_credentials.view` permission.
    */
   async listVendorCredentialHistory(
     request: operations.ListVendorCredentialHistoryRequest,
@@ -594,10 +652,14 @@ export class Vendors extends ClientSDK {
    * @remarks
    * Retrieve an vendor credential data requests.
    *
+   * **Permissions.** Requires the `vendor_credentials.view` permission.
+   *
    * Available `expand` scopes are:
    *
-   * - vendor_credential_data_request.vendor_credential
-   * - vendor_credential_data_request.data_request
+   * - `vendor_credential_data_request.vendor_credential`
+   * - `vendor_credential_data_request.data_request`
+   *
+   * Unrecognised values are ignored.
    */
   async listVendorCredentialDataRequests(
     request: operations.ListVendorCredentialDataRequestsRequest,
@@ -615,6 +677,8 @@ export class Vendors extends ClientSDK {
    *
    * @remarks
    * For vendors who have a paid 24-hour expedite credentials invoice, get the remaining time (in seconds) for which submitted credentials will be expedited.
+   *
+   * **Permissions.** Requires the `vendors.view` permission.
    */
   async expediteTimeRemaining(
     request: operations.ExpediteTimeRemainingRequest,
@@ -633,9 +697,19 @@ export class Vendors extends ClientSDK {
    * @remarks
    * Get vendor subscription
    *
+   * **Permissions.** Requires the `vendors.view` permission.
+   *
    * Available `expand` scopes are:
    *
-   * subscription.expedited_offer
+   * - `subscription.date_ends`
+   * - `subscription.variant_title`
+   * - `subscription.current_line_item`
+   * - `subscription.next_line_item`
+   * - `subscription.current_financial_status`
+   * - `subscription.next_financial_status`
+   * - `subscription.expedited_offers`
+   *
+   * Unrecognised values are ignored. Every scope except `subscription.expedited_offers` is applied automatically, so passing them has no additional effect.
    */
   async getSubscription(
     request: operations.GetSubscriptionRequest,
@@ -656,6 +730,8 @@ export class Vendors extends ClientSDK {
    * and/or target facilities. If the new selection increases the subscription
    * price, an invoice is created and the payment profile is charged; the
    * response includes the invoice id.
+   *
+   * **Permissions.** Requires the `vendor_transactions.add` permission.
    */
   async changeSubscription(
     request: operations.ChangeSubscriptionRequest,
@@ -676,10 +752,25 @@ export class Vendors extends ClientSDK {
    *
    * Deprecated: use `GET /invoices` instead, which supports both vendors and other roles through role-based scoping and the `id` query parameter for vendors.
    *
+   * **Permissions.** Requires the `invoices.view` permission.
+   *
    * Available `expand` scopes are:
    *
-   * invoice.line_items
-   * invoice.may_pay_invoice
+   * - `invoice.invoice_type`
+   * - `invoice.custom_fields`
+   * - `invoice.line_items`
+   * - `invoice.invoice_transactions`
+   * - `invoice.representative`
+   * - `invoice.payment_profile`
+   * - `invoice.may_pay_invoice`
+   * - `invoice.shareback_system`
+   * - `line_items.details`
+   * - `line_items.product`
+   * - `line_items.variant`
+   * - `invoice_transactions.payee`
+   * - `invoice_transactions.payment_profile`
+   *
+   * Unrecognised values are ignored.
    *
    * @deprecated method: This will be removed in a future release, please migrate away from it as soon as possible.
    */
@@ -701,6 +792,8 @@ export class Vendors extends ClientSDK {
    *
    * @remarks
    * Get invoice receipt for vendor
+   *
+   * **Permissions.** Requires a valid token. This endpoint is not gated on a named permission - the caller's role and their relationship to the record decide what is returned.
    */
   async getVendorInvoiceReceipt(
     request: operations.GetVendorInvoiceReceiptRequest,
@@ -717,15 +810,28 @@ export class Vendors extends ClientSDK {
    * Get vendor invoice details
    *
    * @remarks
-   * Retrieve an individual vendor invoice detais.
+   * Retrieve an individual vendor invoice's details.
+   *
+   * **Permissions.** Requires the `invoices.view` permission.
    *
    * Available `expand` scopes are:
    *
-   * invoice.line_items
-   * invoice.invoice_transactions
-   * invoice.may_pay_invoice
-   * invoice.associated_credentials
-   * invoice_transactions.payee
+   * - `invoice.invoice_type`
+   * - `invoice.custom_fields`
+   * - `invoice.line_items`
+   * - `invoice.invoice_transactions`
+   * - `invoice.representative`
+   * - `invoice.payment_profile`
+   * - `invoice.may_pay_invoice`
+   * - `invoice.shareback_system`
+   * - `line_items.details`
+   * - `line_items.product`
+   * - `line_items.variant`
+   * - `invoice_transactions.payee`
+   * - `invoice_transactions.payment_profile`
+   * - `invoice.associated_credentials`
+   *
+   * Unrecognised values are ignored.
    */
   async getVendorInvoiceDetails(
     request: operations.GetVendorInvoiceDetailsRequest,
@@ -743,6 +849,8 @@ export class Vendors extends ClientSDK {
    *
    * @remarks
    * List the facilities for the vendor
+   *
+   * **Permissions.** Requires the `facilities.view` permission.
    */
   async listVendorFacilityStatuses(
     request: operations.ListVendorFacilityStatusesRequest,
@@ -765,6 +873,8 @@ export class Vendors extends ClientSDK {
    *
    * @remarks
    * List vendor scrub purchases
+   *
+   * **Permissions.** Requires a valid token. This endpoint is not gated on a named permission - the caller's role and their relationship to the record decide what is returned.
    */
   async listVendorScrubPurchases(
     request: operations.ListVendorScrubPurchasesRequest,
@@ -784,6 +894,8 @@ export class Vendors extends ClientSDK {
    *
    * @remarks
    * List vendor scrub details
+   *
+   * **Permissions.** Requires a valid token. This endpoint is not gated on a named permission - the caller's role and their relationship to the record decide what is returned.
    */
   async listVendorScrubDetails(
     request: operations.ListVendorScrubDetailsRequest,
@@ -801,6 +913,8 @@ export class Vendors extends ClientSDK {
    *
    * @remarks
    * Update vendor scrub details
+   *
+   * **Permissions.** Requires a valid token. This endpoint is not gated on a named permission - the caller's role and their relationship to the record decide what is returned.
    */
   async updateVendorScrubDetails(
     request: operations.UpdateVendorScrubDetailsRequest,
@@ -818,6 +932,8 @@ export class Vendors extends ClientSDK {
    *
    * @remarks
    * List vendor scrub packages
+   *
+   * **Permissions.** Requires a valid token. This endpoint is not gated on a named permission - the caller's role and their relationship to the record decide what is returned.
    */
   async listVendorScrubPackages(
     request: operations.ListVendorScrubPackagesRequest,
@@ -838,31 +954,39 @@ export class Vendors extends ClientSDK {
    * @remarks
    * Retrieve an individual vendor details.
    *
+   * **Permissions.** Requires the `vendors.view` permission.
+   *
    * Available `expand` scopes are:
    *
-   * vendor.user
-   * vendor.vendor_type
-   * vendor.vendor_job
-   * vendor.image_urls
-   * vendor.payment_profile
-   * vendor.primary_facility
-   * vendor.primary_department
-   * vendor.company
-   * vendor.credentialing_subscription
-   * vendor.scrubs_subscription
-   * vendor.payment_responsibility
-   * vendor.background_check_date_expires
-   * vendor.credit_balance
-   * vendor.registration_data
-   * vendor.registration_finished
-   * vendor.target_facilities
-   * vendor.approved_calendaring_facilities
-   * vendor.pending_invoice
-   * vendor.vendor_groups
-   * vendor.has_credentialed_facilities
-   * vendor.has_emerald_status
-   * vendor.has_target_facility_questions
-   * vendor.custom_fields
+   * - `vendor.user`
+   * - `vendor.vendor_type`
+   * - `vendor.vendor_job`
+   * - `vendor.badge_details`
+   * - `vendor.required_badge_type`
+   * - `vendor.image_urls`
+   * - `vendor.payment_profile`
+   * - `vendor.primary_facility`
+   * - `vendor.primary_department`
+   * - `vendor.company`
+   * - `vendor.credentialing_subscription`
+   * - `vendor.scrubs_subscription`
+   * - `vendor.payment_responsibility`
+   * - `vendor.background_check_date_expires`
+   * - `vendor.credit_balance`
+   * - `vendor.registration_data`
+   * - `vendor.registration_finished`
+   * - `vendor.target_facilities`
+   * - `vendor.approved_calendaring_facilities`
+   * - `vendor.pending_invoice`
+   * - `vendor.vendor_groups`
+   * - `vendor.has_credentialed_facilities`
+   * - `vendor.has_emerald_status`
+   * - `vendor.has_target_facility_questions`
+   * - `vendor.custom_fields`
+   * - `vendor.last_scanned`
+   * - `subscription.current_line_item`
+   *
+   * Any other value is rejected with `422 Unprocessable Entity`.
    */
   async getVendorsDetails(
     request: operations.GetVendorsDetailsRequest,
@@ -901,6 +1025,8 @@ export class Vendors extends ClientSDK {
    * unchanged, or send an empty string to clear it. `timezone` is the one
    * exception — it accepts only the values in its enum, so send one of those to
    * change it and omit it to leave it unchanged.
+   *
+   * **Permissions.** Requires the `vendors.edit` permission.
    */
   async updateVendorDetails(
     request: operations.UpdateVendorDetailsRequest,
@@ -918,6 +1044,8 @@ export class Vendors extends ClientSDK {
    *
    * @remarks
    * List the credits for the vendor. Defaults to chronological order (oldest first).
+   *
+   * **Permissions.** Requires the `vendors.view` permission.
    */
   async listVendorCredits(
     request: operations.ListVendorCreditsRequest,
@@ -945,6 +1073,8 @@ export class Vendors extends ClientSDK {
    * with the `field_for` discriminator. Scheduled for removal after SDK
    * consumers migrate.
    *
+   * **Permissions.** Requires the `vendors.view` permission.
+   *
    * @deprecated method: This will be removed in a future release, please migrate away from it as soon as possible.
    */
   async listVendorAdditionalFacilityFields(
@@ -977,6 +1107,8 @@ export class Vendors extends ClientSDK {
    *
    * Accepts a numeric vendor ID, `me` for the authenticated vendor,
    * or an active QR code (format: contains hyphens).
+   *
+   * **Permissions.** Requires the `vendors.view` permission.
    */
   async listVendorCustomFields(
     request: operations.ListVendorCustomFieldsRequest,
@@ -1001,6 +1133,8 @@ export class Vendors extends ClientSDK {
    *
    * Accepts a numeric vendor ID, `me` for the authenticated vendor,
    * or an active QR code (format: contains hyphens).
+   *
+   * **Permissions.** Requires the `vendors.edit` permission.
    */
   async updateVendorCustomField(
     request: operations.UpdateVendorCustomFieldRequest,
@@ -1018,6 +1152,8 @@ export class Vendors extends ClientSDK {
    *
    * @remarks
    * List of companies managing the vendor
+   *
+   * **Permissions.** Requires the `vendors.view` permission.
    */
   async listVendorManagedByCompanies(
     request: operations.ListVendorManagedByCompaniesRequest,
@@ -1040,6 +1176,8 @@ export class Vendors extends ClientSDK {
    *
    * @remarks
    * It will add a vendor managed by company
+   *
+   * **Permissions.** Requires the `vendors.edit` permission.
    */
   async addVendorManagedByCompany(
     request: operations.AddVendorManagedByCompanyRequest,
@@ -1057,6 +1195,8 @@ export class Vendors extends ClientSDK {
    *
    * @remarks
    * It will delete the vendor managed by company
+   *
+   * **Permissions.** Requires the `vendors.edit` permission.
    */
   async deleteVendorManagedByCompany(
     request: operations.DeleteVendorManagedByCompanyRequest,
@@ -1074,6 +1214,8 @@ export class Vendors extends ClientSDK {
    *
    * @remarks
    * It will update the vendor managed by company access rights
+   *
+   * **Permissions.** Requires the `vendors.edit` permission.
    */
   async updateVendorManagedByCompany(
     request: operations.UpdateVendorManagedByCompanyRequest,
@@ -1099,6 +1241,46 @@ export class Vendors extends ClientSDK {
    * alongside the vendor's identity, contact, and company details.
    * Returns a `status_url` to poll until the export is ready, plus a
    * `download_url` and `status_id`.
+   *
+   * **Permissions.** Requires the `vendors.view` permission.
+   *
+   * Available `expand` scopes are:
+   *
+   * - `vendor.user`
+   * - `vendor.vendor_type`
+   * - `vendor.vendor_job`
+   * - `vendor.badge_details`
+   * - `vendor.required_badge_type`
+   * - `vendor.image_urls`
+   * - `vendor.payment_profile`
+   * - `vendor.primary_facility`
+   * - `vendor.primary_department`
+   * - `vendor.company`
+   * - `vendor.credentialing_subscription`
+   * - `vendor.scrubs_subscription`
+   * - `vendor.payment_responsibility`
+   * - `vendor.background_check_date_expires`
+   * - `vendor.credit_balance`
+   * - `vendor.registration_data`
+   * - `vendor.registration_finished`
+   * - `vendor.target_facilities`
+   * - `vendor.approved_calendaring_facilities`
+   * - `vendor.pending_invoice`
+   * - `vendor.vendor_groups`
+   * - `vendor.has_credentialed_facilities`
+   * - `vendor.has_emerald_status`
+   * - `vendor.has_target_facility_questions`
+   * - `vendor.custom_fields`
+   * - `vendor.last_scanned`
+   * - `subscription.current_line_item`
+   * - `subscription.date_ends`
+   * - `subscription.variant_title`
+   * - `subscription.next_line_item`
+   * - `subscription.current_financial_status`
+   * - `subscription.next_financial_status`
+   * - `subscription.expedited_offers`
+   *
+   * Any other value is rejected with `422 Unprocessable Entity`. The export job builds its own columns and does not consult `expand`, so the parameter is validated but has no effect on the generated CSV; it is accepted for backwards compatibility.
    */
   async vendorsExport(
     request: operations.VendorsExportRequest,
@@ -1117,6 +1299,8 @@ export class Vendors extends ClientSDK {
    * @remarks
    * Poll the status of an asynchronous vendor export job. When `ready` is true,
    * the export is complete and can be downloaded via the download endpoint.
+   *
+   * **Permissions.** Requires the `vendors.view` permission.
    */
   async getVendorsExportStatus(
     request: operations.GetVendorsExportStatusRequest,
@@ -1136,6 +1320,8 @@ export class Vendors extends ClientSDK {
    * Downloads the exported vendors CSV. When the export is ready the server
    * responds with a 302 redirect to a short-lived presigned S3 URL. If the
    * export job is still running, responds with 202.
+   *
+   * **Permissions.** Requires the `vendors.view` permission.
    */
   async downloadVendorsExport(
     request: operations.DownloadVendorsExportRequest,
@@ -1153,6 +1339,8 @@ export class Vendors extends ClientSDK {
    *
    * @remarks
    * Purchase scrub credits
+   *
+   * **Permissions.** Requires a valid token. This endpoint is not gated on a named permission - the caller's role and their relationship to the record decide what is returned.
    */
   async purchaseScrubCredits(
     request: operations.PurchaseScrubCreditsRequest,
@@ -1170,6 +1358,8 @@ export class Vendors extends ClientSDK {
    *
    * @remarks
    * Create vendor company
+   *
+   * **Permissions.** Requires the `companies.add` permission.
    */
   async createVendorCompany(
     request: operations.CreateVendorCompanyRequest,
@@ -1187,6 +1377,8 @@ export class Vendors extends ClientSDK {
    *
    * @remarks
    * Calculate subscription price
+   *
+   * **Permissions.** Requires the `pricing_models.view` permission.
    */
   async calculateSubscriptionPrice(
     request: operations.CalculateSubscriptionPriceRequest,
@@ -1206,6 +1398,7 @@ export class Vendors extends ClientSDK {
    *
    * @remarks
    * Returns every active target-facility screening question that currently applies to the vendor at the given facility, each paired with the vendor's answer when one has been given. Questions that have not been answered are included with a null answer. Read-only; used to review a rep's screening answers.
+   * **Permissions.** Requires the `vendors.view` permission.
    */
   async getVendorScreeningQuestions(
     request: operations.GetVendorScreeningQuestionsRequest,
@@ -1225,6 +1418,14 @@ export class Vendors extends ClientSDK {
    *
    * @remarks
    * Returns the next unanswered screening question for the vendor specified by the vendor_id_or_me path parameter.
+   *
+   * **Permissions.** Requires the `vendors.view` permission.
+   *
+   * Available `expand` scopes are:
+   *
+   * - `screening_question.screening_answers`
+   *
+   * Any other value is rejected with `422 Unprocessable Entity`.
    */
   async getNextUnansweredScreeningQuestion(
     request: operations.GetNextUnansweredScreeningQuestionRequest,
@@ -1244,6 +1445,15 @@ export class Vendors extends ClientSDK {
    *
    * @remarks
    * Returns a paginated list of target facility rows for the specified vendor, including per-row screening question status.
+   *
+   * **Permissions.** Requires the `vendors.view` permission.
+   *
+   * Available `expand` scopes are:
+   *
+   * - `vendor_target_facility.facility`
+   * - `vendor_target_facility.has_screening_responses`
+   *
+   * Any other value is rejected with `422 Unprocessable Entity`.
    */
   async getVendorTargetFacilities(
     request: operations.GetVendorTargetFacilitiesRequest,
@@ -1263,6 +1473,8 @@ export class Vendors extends ClientSDK {
    *
    * @remarks
    * Cancels an existing handoff with the given QR code.
+   *
+   * **Permissions.** Requires the `vendor_scans.add` permission.
    */
   async cancelHandoff(
     request: operations.CancelHandoffRequestBody,
@@ -1280,6 +1492,8 @@ export class Vendors extends ClientSDK {
    *
    * @remarks
    * Lists files the vendor has uploaded across all their credentials, ordered by upload date descending. Excludes decline-document uploads.
+   *
+   * **Permissions.** Requires the `vendor_credentials.view` permission.
    */
   async getVendorUploadHistory(
     request: operations.GetVendorUploadHistoryRequest,
@@ -1304,6 +1518,8 @@ export class Vendors extends ClientSDK {
    * must be uploaded. Green Security will process the file asynchronously.
    *
    * Non-Emerald vendors must use `addVendorCredentialFile` instead.
+   *
+   * **Permissions.** Requires the `vendor_credentials.add` permission.
    */
   async addVendorCredentialFileForAutoClassification(
     request: operations.AddVendorCredentialFileForAutoClassificationRequest,