@greensecurity/javascript-sdk 0.45.0-beta.9 → 0.46.0-beta.1

package/dist/esm/sdk/vendors.d.ts

@@ -13,41 +13,45 @@ export declare class Vendors extends ClientSDK {
      * Common use cases for this are 1099 contractors who represent multiple companies or any vendor that has their
      * credentials or payments handled by a company other than the one they use to do business with a facility.
      *
+     * **Permissions.** Requires the `vendors.view` permission.
+     *
      * Available `expand` scopes are:
      *
-     * vendor.user
-     * vendor.vendor_type
-     * vendor.vendor_job
-     * vendor.image_urls
-     * vendor.payment_profile
-     * vendor.primary_facility
-     * vendor.primary_department
-     * vendor.company
-     * vendor.credentialing_subscription
-     * vendor.scrubs_subscription
-     * vendor.payment_responsibility
-     * vendor.background_check_date_expires
-     * vendor.credit_balance
-     * vendor.registration_data
-     * vendor.registration_finished
-     * vendor.target_facilities
-     * vendor.approved_calendaring_facilities
-     * vendor.pending_invoice
-     * vendor.vendor_groups
-     * vendor.has_credentialed_facilities
-     * vendor.has_emerald_status
-     * vendor.custom_fields
-     * vendor.last_scanned
-     *
-     * Subscription expand scopes (require vendor.credentialing_subscription):
-     *
-     * subscription.date_ends
-     * subscription.variant_title
-     * subscription.current_line_item
-     * subscription.next_line_item
-     * subscription.current_financial_status
-     * subscription.next_financial_status
-     * subscription.expedited_offers
+     * - `vendor.user`
+     * - `vendor.vendor_type`
+     * - `vendor.vendor_job`
+     * - `vendor.badge_details`
+     * - `vendor.required_badge_type`
+     * - `vendor.image_urls`
+     * - `vendor.payment_profile`
+     * - `vendor.primary_facility`
+     * - `vendor.primary_department`
+     * - `vendor.company`
+     * - `vendor.credentialing_subscription`
+     * - `vendor.scrubs_subscription`
+     * - `vendor.payment_responsibility`
+     * - `vendor.background_check_date_expires`
+     * - `vendor.credit_balance`
+     * - `vendor.registration_data`
+     * - `vendor.registration_finished`
+     * - `vendor.target_facilities`
+     * - `vendor.approved_calendaring_facilities`
+     * - `vendor.pending_invoice`
+     * - `vendor.vendor_groups`
+     * - `vendor.has_credentialed_facilities`
+     * - `vendor.has_emerald_status`
+     * - `vendor.has_target_facility_questions`
+     * - `vendor.custom_fields`
+     * - `vendor.last_scanned`
+     * - `subscription.current_line_item`
+     * - `subscription.date_ends`
+     * - `subscription.variant_title`
+     * - `subscription.next_line_item`
+     * - `subscription.current_financial_status`
+     * - `subscription.next_financial_status`
+     * - `subscription.expedited_offers`
+     *
+     * Any other value is rejected with `422 Unprocessable Entity`.
      */
     listVendors(request: operations.ListVendorsRequest, options?: RequestOptions): Promise<PageIterator<operations.ListVendorsResponse, {
         page: number;
@@ -61,6 +65,12 @@ export declare class Vendors extends ClientSDK {
      * `company_id` is optional for company managers — it defaults to their own company.
      * All other callers must provide `company_id`. The caller must have access to the
      * specified company (verified via scoped access policy) and the `vendors:add` permission.
+     *
+     * `zip` is cross-checked against `state`: a code that is not shaped like a real postal
+     * code, or that provably belongs to a different state, is rejected with `422` naming
+     * the correct state.
+     *
+     * **Permissions.** Requires the `vendors.add` permission.
      */
     createVendor(request: operations.CreateVendorRequestBody, options?: RequestOptions): Promise<operations.CreateVendorResponseBody>;
     /**
@@ -68,6 +78,8 @@ export declare class Vendors extends ClientSDK {
      *
      * @remarks
      * Create an initial vendor registration. Once successful, the vendor will be able to continue to filling out the rest of their onboarding profile.
+     *
+     * **Permissions.** No authentication required. A token is accepted if supplied, but anonymous callers are allowed.
      */
     createVendorRegistration(request: operations.CreateVendorRegistrationRequestBody, options?: RequestOptions): Promise<components.User>;
     /**
@@ -75,6 +87,8 @@ export declare class Vendors extends ClientSDK {
      *
      * @remarks
      * List valid job titles for Vendors. This can be used during sign up or in a filter.
+     *
+     * **Permissions.** No authentication required. A token is accepted if supplied, but anonymous callers are allowed.
      */
     listVendorJobTitles(request: operations.ListVendorJobTitlesRequest, options?: RequestOptions): Promise<PageIterator<operations.ListVendorJobTitlesResponse, {
         page: number;
@@ -84,6 +98,8 @@ export declare class Vendors extends ClientSDK {
      *
      * @remarks
      * List vendor types.
+     *
+     * **Permissions.** No authentication required. A token is accepted if supplied, but anonymous callers are allowed.
      */
     listVendorTypes(request: operations.ListVendorTypesRequest, options?: RequestOptions): Promise<PageIterator<operations.ListVendorTypesResponse, {
         page: number;
@@ -96,6 +112,8 @@ export declare class Vendors extends ClientSDK {
      * company manager's company, or by the vendor themselves. Each `_user_id` field
      * indicates which party is responsible for that payment category; `null` means
      * responsibility defaults to the vendor.
+     *
+     * **Permissions.** Requires the `vendors.view` permission.
      */
     getVendorPaymentResponsibility(request: operations.GetVendorPaymentResponsibilityRequest, options?: RequestOptions): Promise<operations.GetVendorPaymentResponsibilityGetVendorPaymentResponsibilityOk>;
     /**
@@ -107,6 +125,8 @@ export declare class Vendors extends ClientSDK {
      * vendor's user ID (to assign responsibility back to the vendor) or the
      * authenticated manager's own user ID (to claim responsibility). Omitted fields
      * are left unchanged.
+     *
+     * **Permissions.** Requires the `vendors.edit` permission.
      */
     updateVendorPaymentResponsibility(request: operations.UpdateVendorPaymentResponsibilityRequest, options?: RequestOptions): Promise<operations.UpdateVendorPaymentResponsibilityUpdateVendorPaymentResponsibilityOk>;
     /**
@@ -114,6 +134,8 @@ export declare class Vendors extends ClientSDK {
      *
      * @remarks
      * Lists vendor credentials, required credentials, and company credentials. Utilized in Vendor Dashboard.
+     *
+     * **Permissions.** Requires the `vendor_credentials.view` permission.
      */
     listVendorCredentials(request: operations.ListVendorCredentialsRequest, options?: RequestOptions): Promise<PageIterator<operations.ListVendorCredentialsResponse, {
         page: number;
@@ -124,34 +146,40 @@ export declare class Vendors extends ClientSDK {
      * @remarks
      * Get Vendor Credential details
      *
+     * **Permissions.** Requires the `vendor_credentials.view` permission.
+     *
      * Available `expand` scopes are:
-     *   - vendor_credential.credential
-     *   - vendor_credential.vendor
-     *   - vendor_credential.invoice
-     *   - vendor_credential.quote
-     *   - vendor_credential.vendor_credential_files
-     *   - vendor_credential.latest_vendor_credential_id
-     *   - vendor_credential.previously_approved
-     *   - vendor_credential.unsatisfied_dependencies
-     *   - vendor_credential.allow_expediting
-     *   - vendor_credential.unpaid_expedited_invoice_id
-     *   - vendor_credential.expedited_offers
-     *   - vendor_credential.background_check_results
-     *   - vendor_credential.vendor_credential_default_status
-     *   - vendor_credential.vendor_credential_data_requests
-     *   - vendor_credential.credential_variants
-     *   - vendor_credential.targets_chop
-     *   - vendor_credential.total_pending_credentials
-     *   - vendor_credential.background_check_provider_id
-     *   - vendor_credential.requires_invoice
-     *   - vendor_credential.credential_pricing_options
-     *   - subscription.date_ends
-     *   - subscription.variant_title
-     *   - subscription.current_line_item
-     *   - subscription.next_line_item
-     *   - subscription.current_financial_status
-     *   - subscription.next_financial_status
-     *   - subscription.expedited_offers
+     *
+     * - `vendor_credential.credential`
+     * - `vendor_credential.vendor`
+     * - `vendor_credential.invoice`
+     * - `vendor_credential.quote`
+     * - `vendor_credential.vendor_credential_files`
+     * - `vendor_credential.latest_vendor_credential_id`
+     * - `vendor_credential.previously_approved`
+     * - `vendor_credential.unsatisfied_dependencies`
+     * - `vendor_credential.allow_expediting`
+     * - `vendor_credential.unpaid_expedited_invoice_id`
+     * - `vendor_credential.expedited_offers`
+     * - `vendor_credential.background_check_results`
+     * - `vendor_credential.vendor_credential_default_status`
+     * - `vendor_credential.vendor_credential_data_requests`
+     * - `vendor_credential.credential_variants`
+     * - `vendor_credential.targets_chop`
+     * - `vendor_credential.total_pending_credentials`
+     * - `vendor_credential.background_check_provider_id`
+     * - `vendor_credential.requires_invoice`
+     * - `vendor_credential.credential_pricing_options`
+     * - `subscription.date_ends`
+     * - `subscription.variant_title`
+     * - `subscription.current_line_item`
+     * - `subscription.next_line_item`
+     * - `subscription.current_financial_status`
+     * - `subscription.next_financial_status`
+     * - `subscription.expedited_offers`
+     * - `background_check_results.pdf_uris`
+     *
+     * Any other value is rejected with `422 Unprocessable Entity`.
      */
     getVendorCredentialDetails(request: operations.GetVendorCredentialDetailsRequest, options?: RequestOptions): Promise<operations.GetVendorCredentialDetailsGetVendorCredentialDetailsOk>;
     /**
@@ -159,6 +187,8 @@ export declare class Vendors extends ClientSDK {
      *
      * @remarks
      * Update vendor credential data
+     *
+     * **Permissions.** Requires the `vendor_credentials.edit` permission.
      */
     updateVendorCredentialData(request: operations.UpdateVendorCredentialDataRequest, options?: RequestOptions): Promise<boolean>;
     /**
@@ -167,10 +197,14 @@ export declare class Vendors extends ClientSDK {
      * @remarks
      * Retrieve an individual vendor credential file.
      *
+     * **Permissions.** Requires the `vendor_credentials.view` permission.
+     *
      * Available `expand` scopes are:
      *
-     * - vendor_credential_file.vendor_credential
-     * - vendor_credential_file.credential_document
+     * - `vendor_credential_file.vendor_credential`
+     * - `vendor_credential_file.credential_document`
+     *
+     * Unrecognised values are ignored.
      */
     getVendorCredentialFile(request: operations.GetVendorCredentialFileRequest, options?: RequestOptions): Promise<components.VendorCredentialFile>;
     /**
@@ -178,6 +212,8 @@ export declare class Vendors extends ClientSDK {
      *
      * @remarks
      * It will update the vendor credential file properties
+     *
+     * **Permissions.** Requires the `vendor_credentials.view` permission.
      */
     updateVendorCredentialFile(request: operations.UpdateVendorCredentialFileRequest, options?: RequestOptions): Promise<boolean>;
     /**
@@ -185,6 +221,8 @@ export declare class Vendors extends ClientSDK {
      *
      * @remarks
      * It will delete the vendor credential file
+     *
+     * **Permissions.** Requires the `vendor_credentials.view` permission.
      */
     deleteVendorCredentialFile(request: operations.DeleteVendorCredentialFileRequest, options?: RequestOptions): Promise<boolean>;
     /**
@@ -192,6 +230,8 @@ export declare class Vendors extends ClientSDK {
      *
      * @remarks
      * Get vendor legal name
+     *
+     * **Permissions.** Requires a valid token. This endpoint is not gated on a named permission - the caller's role and their relationship to the record decide what is returned.
      */
     getVendorLegalName(request: operations.GetVendorLegalNameRequest, options?: RequestOptions): Promise<operations.GetVendorLegalNameGetVendorLegalNameOk>;
     /**
@@ -199,6 +239,8 @@ export declare class Vendors extends ClientSDK {
      *
      * @remarks
      * It will decline vendor credential
+     *
+     * **Permissions.** Requires the `vendor_credentials.view` permission.
      */
     declineVendorCredential(request: operations.DeclineVendorCredentialRequest, options?: RequestOptions): Promise<boolean>;
     /**
@@ -206,6 +248,8 @@ export declare class Vendors extends ClientSDK {
      *
      * @remarks
      * It will accept vendor credential
+     *
+     * **Permissions.** Requires the `vendor_credentials.view` permission.
      */
     acceptVendorCredential(request: operations.AcceptVendorCredentialRequest, options?: RequestOptions): Promise<boolean>;
     /**
@@ -213,6 +257,8 @@ export declare class Vendors extends ClientSDK {
      *
      * @remarks
      * It will check download code for vendor credential
+     *
+     * **Permissions.** Requires a valid token. This endpoint is not gated on a named permission - the caller's role and their relationship to the record decide what is returned.
      */
     checkDownloadCode(request: operations.CheckDownloadCodeRequest, options?: RequestOptions): Promise<operations.CheckDownloadCodeCheckDownloadCodeOk>;
     /**
@@ -220,6 +266,8 @@ export declare class Vendors extends ClientSDK {
      *
      * @remarks
      * It will send download code for vendor credential
+     *
+     * **Permissions.** Requires a valid token. This endpoint is not gated on a named permission - the caller's role and their relationship to the record decide what is returned.
      */
     sendDownloadCode(request: operations.SendDownloadCodeRequest, options?: RequestOptions): Promise<boolean>;
     /**
@@ -228,10 +276,14 @@ export declare class Vendors extends ClientSDK {
      * @remarks
      * Retrieve an vendor credential files.
      *
+     * **Permissions.** Requires the `vendor_credentials.view` permission.
+     *
      * Available `expand` scopes are:
      *
-     * - vendor_credential_file.vendor_credential
-     * - vendor_credential_file.credential_document
+     * - `vendor_credential_file.vendor_credential`
+     * - `vendor_credential_file.credential_document`
+     *
+     * Unrecognised values are ignored.
      */
     listVendorCredentialFiles(request: operations.ListVendorCredentialFilesRequest, options?: RequestOptions): Promise<Array<components.VendorCredentialFile | null>>;
     /**
@@ -239,6 +291,8 @@ export declare class Vendors extends ClientSDK {
      *
      * @remarks
      * It will add a new vendor credential file
+     *
+     * **Permissions.** Requires the `vendor_credentials.view` permission.
      */
     addVendorCredentialFile(request: operations.AddVendorCredentialFileRequest, options?: RequestOptions): Promise<operations.AddVendorCredentialFileAddVendorCredentialFileOk>;
     /**
@@ -246,6 +300,8 @@ export declare class Vendors extends ClientSDK {
      *
      * @remarks
      * It will submit vendor credential
+     *
+     * **Permissions.** Requires the `vendor_credentials.view` permission.
      */
     submitVendorCredential(request: operations.SubmitVendorCredentialRequest, options?: RequestOptions): Promise<boolean>;
     /**
@@ -253,6 +309,8 @@ export declare class Vendors extends ClientSDK {
      *
      * @remarks
      * It will create or update BackgroundCheckResults
+     *
+     * **Permissions.** Requires a valid token. This endpoint is not gated on a named permission - the caller's role and their relationship to the record decide what is returned.
      */
     createOrUpdateBcr(request: operations.CreateOrUpdateBcrRequest, options?: RequestOptions): Promise<boolean>;
     /**
@@ -260,6 +318,8 @@ export declare class Vendors extends ClientSDK {
      *
      * @remarks
      * It will submit vendor credential
+     *
+     * **Permissions.** Requires the `vendor_credentials.add` permission.
      */
     createNewVendorCredentialVersion(request: operations.CreateNewVendorCredentialVersionRequestBody, options?: RequestOptions): Promise<operations.CreateNewVendorCredentialVersionCreateNewVendorCredentialVersionOk>;
     /**
@@ -267,6 +327,8 @@ export declare class Vendors extends ClientSDK {
      *
      * @remarks
      * Lists vendor credentials history
+     *
+     * **Permissions.** Requires the `vendor_credentials.view` permission.
      */
     listVendorCredentialHistory(request: operations.ListVendorCredentialHistoryRequest, options?: RequestOptions): Promise<PageIterator<operations.ListVendorCredentialHistoryResponse, {
         page: number;
@@ -277,10 +339,14 @@ export declare class Vendors extends ClientSDK {
      * @remarks
      * Retrieve an vendor credential data requests.
      *
+     * **Permissions.** Requires the `vendor_credentials.view` permission.
+     *
      * Available `expand` scopes are:
      *
-     * - vendor_credential_data_request.vendor_credential
-     * - vendor_credential_data_request.data_request
+     * - `vendor_credential_data_request.vendor_credential`
+     * - `vendor_credential_data_request.data_request`
+     *
+     * Unrecognised values are ignored.
      */
     listVendorCredentialDataRequests(request: operations.ListVendorCredentialDataRequestsRequest, options?: RequestOptions): Promise<Array<components.VendorCredentialDataRequest | null>>;
     /**
@@ -288,6 +354,8 @@ export declare class Vendors extends ClientSDK {
      *
      * @remarks
      * For vendors who have a paid 24-hour expedite credentials invoice, get the remaining time (in seconds) for which submitted credentials will be expedited.
+     *
+     * **Permissions.** Requires the `vendors.view` permission.
      */
     expediteTimeRemaining(request: operations.ExpediteTimeRemainingRequest, options?: RequestOptions): Promise<operations.ExpediteTimeRemainingGetExpediteTimeRemainingOk>;
     /**
@@ -296,9 +364,19 @@ export declare class Vendors extends ClientSDK {
      * @remarks
      * Get vendor subscription
      *
+     * **Permissions.** Requires the `vendors.view` permission.
+     *
      * Available `expand` scopes are:
      *
-     * subscription.expedited_offer
+     * - `subscription.date_ends`
+     * - `subscription.variant_title`
+     * - `subscription.current_line_item`
+     * - `subscription.next_line_item`
+     * - `subscription.current_financial_status`
+     * - `subscription.next_financial_status`
+     * - `subscription.expedited_offers`
+     *
+     * Unrecognised values are ignored. Every scope except `subscription.expedited_offers` is applied automatically, so passing them has no additional effect.
      */
     getSubscription(request: operations.GetSubscriptionRequest, options?: RequestOptions): Promise<operations.GetSubscriptionGetSubscriptionOk>;
     /**
@@ -309,6 +387,8 @@ export declare class Vendors extends ClientSDK {
      * and/or target facilities. If the new selection increases the subscription
      * price, an invoice is created and the payment profile is charged; the
      * response includes the invoice id.
+     *
+     * **Permissions.** Requires the `vendor_transactions.add` permission.
      */
     changeSubscription(request: operations.ChangeSubscriptionRequest, options?: RequestOptions): Promise<operations.ChangeSubscriptionChangeSubscriptionOk>;
     /**
@@ -319,10 +399,25 @@ export declare class Vendors extends ClientSDK {
      *
      * Deprecated: use `GET /invoices` instead, which supports both vendors and other roles through role-based scoping and the `id` query parameter for vendors.
      *
+     * **Permissions.** Requires the `invoices.view` permission.
+     *
      * Available `expand` scopes are:
      *
-     * invoice.line_items
-     * invoice.may_pay_invoice
+     * - `invoice.invoice_type`
+     * - `invoice.custom_fields`
+     * - `invoice.line_items`
+     * - `invoice.invoice_transactions`
+     * - `invoice.representative`
+     * - `invoice.payment_profile`
+     * - `invoice.may_pay_invoice`
+     * - `invoice.shareback_system`
+     * - `line_items.details`
+     * - `line_items.product`
+     * - `line_items.variant`
+     * - `invoice_transactions.payee`
+     * - `invoice_transactions.payment_profile`
+     *
+     * Unrecognised values are ignored.
      *
      * @deprecated method: This will be removed in a future release, please migrate away from it as soon as possible.
      */
@@ -334,20 +429,38 @@ export declare class Vendors extends ClientSDK {
      *
      * @remarks
      * Get invoice receipt for vendor
+     *
+     * **Permissions.** Requires a valid token. This endpoint is not gated on a named permission - the caller's role and their relationship to the record decide what is returned.
      */
     getVendorInvoiceReceipt(request: operations.GetVendorInvoiceReceiptRequest, options?: RequestOptions): Promise<operations.GetVendorInvoiceReceiptGetVendorInvoiceReceiptOk>;
     /**
      * Get vendor invoice details
      *
      * @remarks
-     * Retrieve an individual vendor invoice detais.
+     * Retrieve an individual vendor invoice's details.
+     *
+     * **Permissions.** Requires the `invoices.view` permission.
+     *
+     * **Permissions.** Requires the `invoices.view` permission.
      *
      * Available `expand` scopes are:
      *
-     * invoice.line_items
-     * invoice.invoice_transactions
-     * invoice.may_pay_invoice
-     * invoice_transactions.payee
+     * - `invoice.invoice_type`
+     * - `invoice.custom_fields`
+     * - `invoice.line_items`
+     * - `invoice.invoice_transactions`
+     * - `invoice.representative`
+     * - `invoice.payment_profile`
+     * - `invoice.may_pay_invoice`
+     * - `invoice.shareback_system`
+     * - `line_items.details`
+     * - `line_items.product`
+     * - `line_items.variant`
+     * - `invoice_transactions.payee`
+     * - `invoice_transactions.payment_profile`
+     * - `invoice.associated_credentials`
+     *
+     * Unrecognised values are ignored.
      */
     getVendorInvoiceDetails(request: operations.GetVendorInvoiceDetailsRequest, options?: RequestOptions): Promise<components.Invoice>;
     /**
@@ -355,6 +468,8 @@ export declare class Vendors extends ClientSDK {
      *
      * @remarks
      * List the facilities for the vendor
+     *
+     * **Permissions.** Requires the `facilities.view` permission.
      */
     listVendorFacilityStatuses(request: operations.ListVendorFacilityStatusesRequest, options?: RequestOptions): Promise<PageIterator<operations.ListVendorFacilityStatusesResponse, {
         page: number;
@@ -364,6 +479,8 @@ export declare class Vendors extends ClientSDK {
      *
      * @remarks
      * List vendor scrub purchases
+     *
+     * **Permissions.** Requires a valid token. This endpoint is not gated on a named permission - the caller's role and their relationship to the record decide what is returned.
      */
     listVendorScrubPurchases(request: operations.ListVendorScrubPurchasesRequest, options?: RequestOptions): Promise<PageIterator<operations.ListVendorScrubPurchasesResponse, {
         page: number;
@@ -373,6 +490,8 @@ export declare class Vendors extends ClientSDK {
      *
      * @remarks
      * List vendor scrub details
+     *
+     * **Permissions.** Requires a valid token. This endpoint is not gated on a named permission - the caller's role and their relationship to the record decide what is returned.
      */
     listVendorScrubDetails(request: operations.ListVendorScrubDetailsRequest, options?: RequestOptions): Promise<components.VendorScrubDetails>;
     /**
@@ -380,6 +499,8 @@ export declare class Vendors extends ClientSDK {
      *
      * @remarks
      * Update vendor scrub details
+     *
+     * **Permissions.** Requires a valid token. This endpoint is not gated on a named permission - the caller's role and their relationship to the record decide what is returned.
      */
     updateVendorScrubDetails(request: operations.UpdateVendorScrubDetailsRequest, options?: RequestOptions): Promise<boolean>;
     /**
@@ -387,6 +508,8 @@ export declare class Vendors extends ClientSDK {
      *
      * @remarks
      * List vendor scrub packages
+     *
+     * **Permissions.** Requires a valid token. This endpoint is not gated on a named permission - the caller's role and their relationship to the record decide what is returned.
      */
     listVendorScrubPackages(request: operations.ListVendorScrubPackagesRequest, options?: RequestOptions): Promise<PageIterator<operations.ListVendorScrubPackagesResponse, {
         page: number;
@@ -397,31 +520,39 @@ export declare class Vendors extends ClientSDK {
      * @remarks
      * Retrieve an individual vendor details.
      *
+     * **Permissions.** Requires the `vendors.view` permission.
+     *
      * Available `expand` scopes are:
      *
-     * vendor.user
-     * vendor.vendor_type
-     * vendor.vendor_job
-     * vendor.image_urls
-     * vendor.payment_profile
-     * vendor.primary_facility
-     * vendor.primary_department
-     * vendor.company
-     * vendor.credentialing_subscription
-     * vendor.scrubs_subscription
-     * vendor.payment_responsibility
-     * vendor.background_check_date_expires
-     * vendor.credit_balance
-     * vendor.registration_data
-     * vendor.registration_finished
-     * vendor.target_facilities
-     * vendor.approved_calendaring_facilities
-     * vendor.pending_invoice
-     * vendor.vendor_groups
-     * vendor.has_credentialed_facilities
-     * vendor.has_emerald_status
-     * vendor.has_target_facility_questions
-     * vendor.custom_fields
+     * - `vendor.user`
+     * - `vendor.vendor_type`
+     * - `vendor.vendor_job`
+     * - `vendor.badge_details`
+     * - `vendor.required_badge_type`
+     * - `vendor.image_urls`
+     * - `vendor.payment_profile`
+     * - `vendor.primary_facility`
+     * - `vendor.primary_department`
+     * - `vendor.company`
+     * - `vendor.credentialing_subscription`
+     * - `vendor.scrubs_subscription`
+     * - `vendor.payment_responsibility`
+     * - `vendor.background_check_date_expires`
+     * - `vendor.credit_balance`
+     * - `vendor.registration_data`
+     * - `vendor.registration_finished`
+     * - `vendor.target_facilities`
+     * - `vendor.approved_calendaring_facilities`
+     * - `vendor.pending_invoice`
+     * - `vendor.vendor_groups`
+     * - `vendor.has_credentialed_facilities`
+     * - `vendor.has_emerald_status`
+     * - `vendor.has_target_facility_questions`
+     * - `vendor.custom_fields`
+     * - `vendor.last_scanned`
+     * - `subscription.current_line_item`
+     *
+     * Any other value is rejected with `422 Unprocessable Entity`.
      */
     getVendorsDetails(request: operations.GetVendorsDetailsRequest, options?: RequestOptions): Promise<components.Vendor>;
     /**
@@ -435,13 +566,23 @@ export declare class Vendors extends ClientSDK {
      * From `location` this endpoint reads only `timezone`, `address1`, `address2`,
      * `city`, `state`, `zip`, `phone`, `mobile_phone` and `fax`. The `address` and
      * `country` properties of the shared `UserLocation` schema are ignored here and
-     * updating them is not supported.
+     * updating them is not supported. `state` accepts a US state or a Canadian
+     * province — the vendor's country, set only at registration, is not editable
+     * through this endpoint.
+     *
+     * Submitting `location.zip` or `location.state` cross-checks the postal code
+     * against the resulting state (using the vendor's existing value for whichever
+     * of the two is left out of the request). A code that is not shaped like a real
+     * postal code, or that provably belongs to a different state, is rejected with
+     * `422` naming the correct state.
      *
      * For `title`, the `supervisor` fields, and every `location` field except
      * `timezone`, the value sent is the value stored: omit a field to leave it
      * unchanged, or send an empty string to clear it. `timezone` is the one
      * exception — it accepts only the values in its enum, so send one of those to
      * change it and omit it to leave it unchanged.
+     *
+     * **Permissions.** Requires the `vendors.edit` permission.
      */
     updateVendorDetails(request: operations.UpdateVendorDetailsRequest, options?: RequestOptions): Promise<boolean>;
     /**
@@ -449,6 +590,8 @@ export declare class Vendors extends ClientSDK {
      *
      * @remarks
      * List the credits for the vendor. Defaults to chronological order (oldest first).
+     *
+     * **Permissions.** Requires the `vendors.view` permission.
      */
     listVendorCredits(request: operations.ListVendorCreditsRequest, options?: RequestOptions): Promise<PageIterator<operations.ListVendorCreditsResponse, {
         page: number;
@@ -466,6 +609,8 @@ export declare class Vendors extends ClientSDK {
      * with the `field_for` discriminator. Scheduled for removal after SDK
      * consumers migrate.
      *
+     * **Permissions.** Requires the `vendors.view` permission.
+     *
      * @deprecated method: This will be removed in a future release, please migrate away from it as soon as possible.
      */
     listVendorAdditionalFacilityFields(request: operations.ListVendorAdditionalFacilityFieldsRequest, options?: RequestOptions): Promise<PageIterator<operations.ListVendorAdditionalFacilityFieldsResponse, {
@@ -485,6 +630,8 @@ export declare class Vendors extends ClientSDK {
      *
      * Accepts a numeric vendor ID, `me` for the authenticated vendor,
      * or an active QR code (format: contains hyphens).
+     *
+     * **Permissions.** Requires the `vendors.view` permission.
      */
     listVendorCustomFields(request: operations.ListVendorCustomFieldsRequest, options?: RequestOptions): Promise<operations.ListVendorCustomFieldsListVendorCustomFieldsOk>;
     /**
@@ -499,6 +646,8 @@ export declare class Vendors extends ClientSDK {
      *
      * Accepts a numeric vendor ID, `me` for the authenticated vendor,
      * or an active QR code (format: contains hyphens).
+     *
+     * **Permissions.** Requires the `vendors.edit` permission.
      */
     updateVendorCustomField(request: operations.UpdateVendorCustomFieldRequest, options?: RequestOptions): Promise<components.VendorCustomFields>;
     /**
@@ -506,6 +655,8 @@ export declare class Vendors extends ClientSDK {
      *
      * @remarks
      * List of companies managing the vendor
+     *
+     * **Permissions.** Requires the `vendors.view` permission.
      */
     listVendorManagedByCompanies(request: operations.ListVendorManagedByCompaniesRequest, options?: RequestOptions): Promise<PageIterator<operations.ListVendorManagedByCompaniesResponse, {
         page: number;
@@ -515,6 +666,8 @@ export declare class Vendors extends ClientSDK {
      *
      * @remarks
      * It will add a vendor managed by company
+     *
+     * **Permissions.** Requires the `vendors.edit` permission.
      */
     addVendorManagedByCompany(request: operations.AddVendorManagedByCompanyRequest, options?: RequestOptions): Promise<operations.AddVendorManagedByCompanyAddVendorManagedByCompanyOk>;
     /**
@@ -522,6 +675,8 @@ export declare class Vendors extends ClientSDK {
      *
      * @remarks
      * It will delete the vendor managed by company
+     *
+     * **Permissions.** Requires the `vendors.edit` permission.
      */
     deleteVendorManagedByCompany(request: operations.DeleteVendorManagedByCompanyRequest, options?: RequestOptions): Promise<components.DeleteApiResponse>;
     /**
@@ -529,6 +684,8 @@ export declare class Vendors extends ClientSDK {
      *
      * @remarks
      * It will update the vendor managed by company access rights
+     *
+     * **Permissions.** Requires the `vendors.edit` permission.
      */
     updateVendorManagedByCompany(request: operations.UpdateVendorManagedByCompanyRequest, options?: RequestOptions): Promise<operations.UpdateVendorManagedByCompanyUpdateVendorManagedByCompanyOk>;
     /**
@@ -542,6 +699,46 @@ export declare class Vendors extends ClientSDK {
      * alongside the vendor's identity, contact, and company details.
      * Returns a `status_url` to poll until the export is ready, plus a
      * `download_url` and `status_id`.
+     *
+     * **Permissions.** Requires the `vendors.view` permission.
+     *
+     * Available `expand` scopes are:
+     *
+     * - `vendor.user`
+     * - `vendor.vendor_type`
+     * - `vendor.vendor_job`
+     * - `vendor.badge_details`
+     * - `vendor.required_badge_type`
+     * - `vendor.image_urls`
+     * - `vendor.payment_profile`
+     * - `vendor.primary_facility`
+     * - `vendor.primary_department`
+     * - `vendor.company`
+     * - `vendor.credentialing_subscription`
+     * - `vendor.scrubs_subscription`
+     * - `vendor.payment_responsibility`
+     * - `vendor.background_check_date_expires`
+     * - `vendor.credit_balance`
+     * - `vendor.registration_data`
+     * - `vendor.registration_finished`
+     * - `vendor.target_facilities`
+     * - `vendor.approved_calendaring_facilities`
+     * - `vendor.pending_invoice`
+     * - `vendor.vendor_groups`
+     * - `vendor.has_credentialed_facilities`
+     * - `vendor.has_emerald_status`
+     * - `vendor.has_target_facility_questions`
+     * - `vendor.custom_fields`
+     * - `vendor.last_scanned`
+     * - `subscription.current_line_item`
+     * - `subscription.date_ends`
+     * - `subscription.variant_title`
+     * - `subscription.next_line_item`
+     * - `subscription.current_financial_status`
+     * - `subscription.next_financial_status`
+     * - `subscription.expedited_offers`
+     *
+     * Any other value is rejected with `422 Unprocessable Entity`. The export job builds its own columns and does not consult `expand`, so the parameter is validated but has no effect on the generated CSV; it is accepted for backwards compatibility.
      */
     vendorsExport(request: operations.VendorsExportRequest, options?: RequestOptions): Promise<components.CsvExportEnqueuedResponse>;
     /**
@@ -550,6 +747,8 @@ export declare class Vendors extends ClientSDK {
      * @remarks
      * Poll the status of an asynchronous vendor export job. When `ready` is true,
      * the export is complete and can be downloaded via the download endpoint.
+     *
+     * **Permissions.** Requires the `vendors.view` permission.
      */
     getVendorsExportStatus(request: operations.GetVendorsExportStatusRequest, options?: RequestOptions): Promise<operations.GetVendorsExportStatusResponseBody>;
     /**
@@ -559,6 +758,8 @@ export declare class Vendors extends ClientSDK {
      * Downloads the exported vendors CSV. When the export is ready the server
      * responds with a 302 redirect to a short-lived presigned S3 URL. If the
      * export job is still running, responds with 202.
+     *
+     * **Permissions.** Requires the `vendors.view` permission.
      */
     downloadVendorsExport(request: operations.DownloadVendorsExportRequest, options?: RequestOptions): Promise<operations.DownloadVendorsExportResponse | undefined>;
     /**
@@ -566,6 +767,8 @@ export declare class Vendors extends ClientSDK {
      *
      * @remarks
      * Purchase scrub credits
+     *
+     * **Permissions.** Requires a valid token. This endpoint is not gated on a named permission - the caller's role and their relationship to the record decide what is returned.
      */
     purchaseScrubCredits(request: operations.PurchaseScrubCreditsRequest, options?: RequestOptions): Promise<operations.PurchaseScrubCreditsPurchaseScrubCreditsOk>;
     /**
@@ -573,6 +776,8 @@ export declare class Vendors extends ClientSDK {
      *
      * @remarks
      * Create vendor company
+     *
+     * **Permissions.** Requires the `companies.add` permission.
      */
     createVendorCompany(request: operations.CreateVendorCompanyRequest, options?: RequestOptions): Promise<operations.CreateVendorCompanyCreateVendorCompanyOk>;
     /**
@@ -580,13 +785,31 @@ export declare class Vendors extends ClientSDK {
      *
      * @remarks
      * Calculate subscription price
+     *
+     * **Permissions.** Requires the `pricing_models.view` permission.
      */
     calculateSubscriptionPrice(request: operations.CalculateSubscriptionPriceRequest, options?: RequestOptions): Promise<operations.CalculateSubscriptionPriceCalculateSubscriptionPriceOk>;
+    /**
+     * List a vendor's target-facility screening questions and answers
+     *
+     * @remarks
+     * Returns every active target-facility screening question that currently applies to the vendor at the given facility, each paired with the vendor's answer when one has been given. Questions that have not been answered are included with a null answer. Read-only; used to review a rep's screening answers.
+     * **Permissions.** Requires the `vendors.view` permission.
+     */
+    getVendorScreeningQuestions(request: operations.GetVendorScreeningQuestionsRequest, options?: RequestOptions): Promise<operations.GetVendorScreeningQuestionsGetVendorScreeningQuestionsOk>;
     /**
      * Get the next unanswered screening question
      *
      * @remarks
      * Returns the next unanswered screening question for the vendor specified by the vendor_id_or_me path parameter.
+     *
+     * **Permissions.** Requires the `vendors.view` permission.
+     *
+     * Available `expand` scopes are:
+     *
+     * - `screening_question.screening_answers`
+     *
+     * Any other value is rejected with `422 Unprocessable Entity`.
      */
     getNextUnansweredScreeningQuestion(request: operations.GetNextUnansweredScreeningQuestionRequest, options?: RequestOptions): Promise<operations.GetNextUnansweredScreeningQuestionGetNextUnansweredScreeningQuestionOk>;
     /**
@@ -594,6 +817,15 @@ export declare class Vendors extends ClientSDK {
      *
      * @remarks
      * Returns a paginated list of target facility rows for the specified vendor, including per-row screening question status.
+     *
+     * **Permissions.** Requires the `vendors.view` permission.
+     *
+     * Available `expand` scopes are:
+     *
+     * - `vendor_target_facility.facility`
+     * - `vendor_target_facility.has_screening_responses`
+     *
+     * Any other value is rejected with `422 Unprocessable Entity`.
      */
     getVendorTargetFacilities(request: operations.GetVendorTargetFacilitiesRequest, options?: RequestOptions): Promise<PageIterator<operations.GetVendorTargetFacilitiesResponse, {
         page: number;
@@ -603,6 +835,8 @@ export declare class Vendors extends ClientSDK {
      *
      * @remarks
      * Cancels an existing handoff with the given QR code.
+     *
+     * **Permissions.** Requires the `vendor_scans.add` permission.
      */
     cancelHandoff(request: operations.CancelHandoffRequestBody, options?: RequestOptions): Promise<operations.CancelHandoffVendorCancelOk>;
     /**
@@ -610,6 +844,8 @@ export declare class Vendors extends ClientSDK {
      *
      * @remarks
      * Lists files the vendor has uploaded across all their credentials, ordered by upload date descending. Excludes decline-document uploads.
+     *
+     * **Permissions.** Requires the `vendor_credentials.view` permission.
      */
     getVendorUploadHistory(request: operations.GetVendorUploadHistoryRequest, options?: RequestOptions): Promise<PageIterator<operations.GetVendorUploadHistoryResponse, {
         page: number;
@@ -624,6 +860,8 @@ export declare class Vendors extends ClientSDK {
      * must be uploaded. Green Security will process the file asynchronously.
      *
      * Non-Emerald vendors must use `addVendorCredentialFile` instead.
+     *
+     * **Permissions.** Requires the `vendor_credentials.add` permission.
      */
     addVendorCredentialFileForAutoClassification(request: operations.AddVendorCredentialFileForAutoClassificationRequest, options?: RequestOptions): Promise<components.VendorCredentialFileForAutoClassificationOk>;
 }