@greensecurity/javascript-sdk 0.45.0 → 0.46.0-beta.10

package/dist/commonjs/sdk/vendors.js

@@ -72,45 +72,49 @@ class Vendors extends sdks_js_1.ClientSDK {
      * @remarks
      * Returns a paginated list of vendors.
      *
-     * External vendors are 3rd parties who have consented to have their profile managed by companies in our system.
+     * External vendors are third parties who have consented to have their profile managed by companies on the platform.
      * Common use cases for this are 1099 contractors who represent multiple companies or any vendor that has their
      * credentials or payments handled by a company other than the one they use to do business with a facility.
      *
-     * Available `expand` scopes are:
-     *
-     * vendor.user
-     * vendor.vendor_type
-     * vendor.vendor_job
-     * vendor.image_urls
-     * vendor.payment_profile
-     * vendor.primary_facility
-     * vendor.primary_department
-     * vendor.company
-     * vendor.credentialing_subscription
-     * vendor.scrubs_subscription
-     * vendor.payment_responsibility
-     * vendor.background_check_date_expires
-     * vendor.credit_balance
-     * vendor.registration_data
-     * vendor.registration_finished
-     * vendor.target_facilities
-     * vendor.approved_calendaring_facilities
-     * vendor.pending_invoice
-     * vendor.vendor_groups
-     * vendor.has_credentialed_facilities
-     * vendor.has_emerald_status
-     * vendor.custom_fields
-     * vendor.last_scanned
-     *
-     * Subscription expand scopes (require vendor.credentialing_subscription):
-     *
-     * subscription.date_ends
-     * subscription.variant_title
-     * subscription.current_line_item
-     * subscription.next_line_item
-     * subscription.current_financial_status
-     * subscription.next_financial_status
-     * subscription.expedited_offers
+     * **Permissions.** Requires the `vendors.view` permission.
+     *
+     * The `expand` parameter accepts the following scopes:
+     *
+     * - `vendor.user`
+     * - `vendor.vendor_type`
+     * - `vendor.vendor_job`
+     * - `vendor.badge_details`
+     * - `vendor.required_badge_type`
+     * - `vendor.image_urls`
+     * - `vendor.payment_profile`
+     * - `vendor.primary_facility`
+     * - `vendor.primary_department`
+     * - `vendor.company`
+     * - `vendor.credentialing_subscription`
+     * - `vendor.scrubs_subscription`
+     * - `vendor.payment_responsibility`
+     * - `vendor.background_check_date_expires`
+     * - `vendor.credit_balance`
+     * - `vendor.registration_data`
+     * - `vendor.registration_finished`
+     * - `vendor.target_facilities`
+     * - `vendor.approved_calendaring_facilities`
+     * - `vendor.pending_invoice`
+     * - `vendor.vendor_groups`
+     * - `vendor.has_credentialed_facilities`
+     * - `vendor.has_emerald_status`
+     * - `vendor.has_target_facility_questions`
+     * - `vendor.custom_fields`
+     * - `vendor.last_scanned`
+     * - `subscription.current_line_item`
+     * - `subscription.date_ends`
+     * - `subscription.variant_title`
+     * - `subscription.next_line_item`
+     * - `subscription.current_financial_status`
+     * - `subscription.next_financial_status`
+     * - `subscription.expedited_offers`
+     *
+     * The API rejects any other value with `422 Unprocessable Entity`.
      */
     async listVendors(request, options) {
         return (0, operations_js_1.unwrapResultIterator)((0, vendorsListVendors_js_1.vendorsListVendors)(this, request, options));
@@ -121,13 +125,15 @@ class Vendors extends sdks_js_1.ClientSDK {
      * @remarks
      * Creates a new vendor account linked to the specified company.
      *
-     * `company_id` is optional for company managers — it defaults to their own company.
+     * `company_id` is optional for company managers—it defaults to their own company.
      * All other callers must provide `company_id`. The caller must have access to the
-     * specified company (verified via scoped access policy) and the `vendors:add` permission.
+     * specified company (verified through scoped access policy) and the `vendors:add` permission.
      *
-     * `zip` is cross-checked against `state`: a code that is not shaped like a real postal
-     * code, or that provably belongs to a different state, is rejected with `422` naming
+     * The API cross-checks `zip` against `state`. It rejects a code that is not shaped like a real postal
+     * code, or that provably belongs to a different state, with `422` naming
      * the correct state.
+     *
+     * **Permissions.** Requires the `vendors.add` permission.
      */
     async createVendor(request, options) {
         return (0, fp_js_1.unwrapAsync)((0, vendorsCreateVendor_js_1.vendorsCreateVendor)(this, request, options));
@@ -136,7 +142,9 @@ class Vendors extends sdks_js_1.ClientSDK {
      * Create vendor registration
      *
      * @remarks
-     * Create an initial vendor registration. Once successful, the vendor will be able to continue to filling out the rest of their onboarding profile.
+     * Creates an initial vendor registration. After the registration succeeds, the vendor can continue filling out the rest of their onboarding profile.
+     *
+     * **Permissions.** No authentication required. The API accepts a token if supplied, but also allows anonymous callers.
      */
     async createVendorRegistration(request, options) {
         return (0, fp_js_1.unwrapAsync)((0, vendorsCreateVendorRegistration_js_1.vendorsCreateVendorRegistration)(this, request, options));
@@ -145,7 +153,9 @@ class Vendors extends sdks_js_1.ClientSDK {
      * List vendor job titles
      *
      * @remarks
-     * List valid job titles for Vendors. This can be used during sign up or in a filter.
+     * Lists valid job titles for vendors. Use the list during sign-up or in a filter.
+     *
+     * **Permissions.** No authentication required. The endpoint accepts a token if you supply one, but anonymous callers are allowed.
      */
     async listVendorJobTitles(request, options) {
         return (0, operations_js_1.unwrapResultIterator)((0, vendorsListVendorJobTitles_js_1.vendorsListVendorJobTitles)(this, request, options));
@@ -154,7 +164,9 @@ class Vendors extends sdks_js_1.ClientSDK {
      * List vendor types
      *
      * @remarks
-     * List vendor types.
+     * Lists vendor types.
+     *
+     * **Permissions.** No authentication required. The endpoint accepts a token if you supply one, but anonymous callers are allowed.
      */
     async listVendorTypes(request, options) {
         return (0, operations_js_1.unwrapResultIterator)((0, vendorsListVendorTypes_js_1.vendorsListVendorTypes)(this, request, options));
@@ -167,6 +179,8 @@ class Vendors extends sdks_js_1.ClientSDK {
      * company manager's company, or by the vendor themselves. Each `_user_id` field
      * indicates which party is responsible for that payment category; `null` means
      * responsibility defaults to the vendor.
+     *
+     * **Permissions.** Requires the `vendors.view` permission.
      */
     async getVendorPaymentResponsibility(request, options) {
         return (0, fp_js_1.unwrapAsync)((0, vendorsGetVendorPaymentResponsibility_js_1.vendorsGetVendorPaymentResponsibility)(this, request, options));
@@ -178,55 +192,71 @@ class Vendors extends sdks_js_1.ClientSDK {
      * Partially updates the payment responsibility record for a vendor. Only company
      * managers may call this endpoint. Each supplied `_user_id` must be either the
      * vendor's user ID (to assign responsibility back to the vendor) or the
-     * authenticated manager's own user ID (to claim responsibility). Omitted fields
-     * are left unchanged.
+     * authenticated manager's own user ID (to claim responsibility). The server leaves omitted fields
+     * unchanged.
+     *
+     * **Permissions.** Requires the `vendors.edit` permission.
      */
     async updateVendorPaymentResponsibility(request, options) {
         return (0, fp_js_1.unwrapAsync)((0, vendorsUpdateVendorPaymentResponsibility_js_1.vendorsUpdateVendorPaymentResponsibility)(this, request, options));
     }
     /**
-     * List Vendor Credentials
+     * List vendor credentials
      *
      * @remarks
-     * Lists vendor credentials, required credentials, and company credentials. Utilized in Vendor Dashboard.
+     * Lists vendor credentials, required credentials, and company credentials.
+     *
+     * **Permissions.** Requires the `vendor_credentials.view` permission.
      */
     async listVendorCredentials(request, options) {
         return (0, operations_js_1.unwrapResultIterator)((0, vendorsListVendorCredentials_js_1.vendorsListVendorCredentials)(this, request, options));
     }
     /**
-     * Get Vendor Credential details
-     *
-     * @remarks
-     * Get Vendor Credential details
-     *
-     * Available `expand` scopes are:
-     *   - vendor_credential.credential
-     *   - vendor_credential.vendor
-     *   - vendor_credential.invoice
-     *   - vendor_credential.quote
-     *   - vendor_credential.vendor_credential_files
-     *   - vendor_credential.latest_vendor_credential_id
-     *   - vendor_credential.previously_approved
-     *   - vendor_credential.unsatisfied_dependencies
-     *   - vendor_credential.allow_expediting
-     *   - vendor_credential.unpaid_expedited_invoice_id
-     *   - vendor_credential.expedited_offers
-     *   - vendor_credential.background_check_results
-     *   - vendor_credential.vendor_credential_default_status
-     *   - vendor_credential.vendor_credential_data_requests
-     *   - vendor_credential.credential_variants
-     *   - vendor_credential.targets_chop
-     *   - vendor_credential.total_pending_credentials
-     *   - vendor_credential.background_check_provider_id
-     *   - vendor_credential.requires_invoice
-     *   - vendor_credential.credential_pricing_options
-     *   - subscription.date_ends
-     *   - subscription.variant_title
-     *   - subscription.current_line_item
-     *   - subscription.next_line_item
-     *   - subscription.current_financial_status
-     *   - subscription.next_financial_status
-     *   - subscription.expedited_offers
+     * Get vendor credential details
+     *
+     * @remarks
+     * Gets Vendor Credential details
+     *
+     * **Permissions.** Requires the `vendor_credentials.view` permission. When `vendor_credential.vendor_credential_files`
+     * is expanded, a company manager viewing a vendor-owned credential (not a company-owned one) only
+     * receives the files they personally uploaded on the vendor's behalf.
+     *
+     * For that same restricted company manager, `json_data` is returned as `null` unless they are the
+     * one who first submitted this version of the credential - everything else in the response
+     * (status, dates, notes, credential/invoice/etc.) is unaffected.
+     *
+     * The following `expand` scopes are available:
+     *
+     * - `vendor_credential.credential`
+     * - `vendor_credential.vendor`
+     * - `vendor_credential.invoice`
+     * - `vendor_credential.quote`
+     * - `vendor_credential.vendor_credential_files`
+     * - `vendor_credential.latest_vendor_credential_id`
+     * - `vendor_credential.previously_approved`
+     * - `vendor_credential.unsatisfied_dependencies`
+     * - `vendor_credential.allow_expediting`
+     * - `vendor_credential.unpaid_expedited_invoice_id`
+     * - `vendor_credential.expedited_offers`
+     * - `vendor_credential.background_check_results`
+     * - `vendor_credential.vendor_credential_default_status`
+     * - `vendor_credential.vendor_credential_data_requests`
+     * - `vendor_credential.credential_variants`
+     * - `vendor_credential.targets_chop`
+     * - `vendor_credential.total_pending_credentials`
+     * - `vendor_credential.background_check_provider_id`
+     * - `vendor_credential.requires_invoice`
+     * - `vendor_credential.credential_pricing_options`
+     * - `subscription.date_ends`
+     * - `subscription.variant_title`
+     * - `subscription.current_line_item`
+     * - `subscription.next_line_item`
+     * - `subscription.current_financial_status`
+     * - `subscription.next_financial_status`
+     * - `subscription.expedited_offers`
+     * - `background_check_results.pdf_uris`
+     *
+     * The endpoint rejects any other value with `422 Unprocessable Entity`.
      */
     async getVendorCredentialDetails(request, options) {
         return (0, fp_js_1.unwrapAsync)((0, vendorsGetVendorCredentialDetails_js_1.vendorsGetVendorCredentialDetails)(this, request, options));
@@ -235,7 +265,9 @@ class Vendors extends sdks_js_1.ClientSDK {
      * Update vendor credential data
      *
      * @remarks
-     * Update vendor credential data
+     * Updates vendor credential data
+     *
+     * **Permissions.** Requires the `vendor_credentials.edit` permission.
      */
     async updateVendorCredentialData(request, options) {
         return (0, fp_js_1.unwrapAsync)((0, vendorsUpdateVendorCredentialData_js_1.vendorsUpdateVendorCredentialData)(this, request, options));
@@ -244,12 +276,20 @@ class Vendors extends sdks_js_1.ClientSDK {
      * Get vendor credential file
      *
      * @remarks
-     * Retrieve an individual vendor credential file.
+     * Retrieves an individual vendor credential file.
+     *
+     * **Permissions.** Requires the `vendor_credentials.view` permission. Returns `400` for any file
+     * the caller cannot see, with the same response whether the file does not exist, is outside the
+     * caller's access, or belongs to a different credential. For a company manager on a vendor-owned
+     * credential (not a company-owned one) that includes every file not uploaded by that requesting
+     * manager.
+     *
+     * The `expand` parameter accepts these scopes:
      *
-     * Available `expand` scopes are:
+     * - `vendor_credential_file.vendor_credential`
+     * - `vendor_credential_file.credential_document`
      *
-     * - vendor_credential_file.vendor_credential
-     * - vendor_credential_file.credential_document
+     * The API ignores unrecognized values.
      */
     async getVendorCredentialFile(request, options) {
         return (0, fp_js_1.unwrapAsync)((0, vendorsGetVendorCredentialFile_js_1.vendorsGetVendorCredentialFile)(this, request, options));
@@ -258,7 +298,9 @@ class Vendors extends sdks_js_1.ClientSDK {
      * Update vendor credential file
      *
      * @remarks
-     * It will update the vendor credential file properties
+     * Updates the vendor credential file properties.
+     *
+     * **Permissions.** Requires the `vendor_credentials.view` permission.
      */
     async updateVendorCredentialFile(request, options) {
         return (0, fp_js_1.unwrapAsync)((0, vendorsUpdateVendorCredentialFile_js_1.vendorsUpdateVendorCredentialFile)(this, request, options));
@@ -267,16 +309,20 @@ class Vendors extends sdks_js_1.ClientSDK {
      * Delete vendor credential file
      *
      * @remarks
-     * It will delete the vendor credential file
+     * Deletes the vendor credential file.
+     *
+     * **Permissions.** Requires the `vendor_credentials.view` permission.
      */
     async deleteVendorCredentialFile(request, options) {
         return (0, fp_js_1.unwrapAsync)((0, vendorsDeleteVendorCredentialFile_js_1.vendorsDeleteVendorCredentialFile)(this, request, options));
     }
     /**
-     * Get Vendor legal name
+     * Get vendor legal name
      *
      * @remarks
-     * Get vendor legal name
+     * Gets vendor legal name
+     *
+     * **Permissions.** Requires a valid token. This endpoint is not gated on a named permission. The caller's role and their relationship to the record determine what the response contains.
      */
     async getVendorLegalName(request, options) {
         return (0, fp_js_1.unwrapAsync)((0, vendorsGetVendorLegalName_js_1.vendorsGetVendorLegalName)(this, request, options));
@@ -285,7 +331,9 @@ class Vendors extends sdks_js_1.ClientSDK {
      * Decline vendor credential
      *
      * @remarks
-     * It will decline vendor credential
+     * Declines the vendor credential.
+     *
+     * **Permissions.** Requires the `vendor_credentials.view` permission.
      */
     async declineVendorCredential(request, options) {
         return (0, fp_js_1.unwrapAsync)((0, vendorsDeclineVendorCredential_js_1.vendorsDeclineVendorCredential)(this, request, options));
@@ -294,7 +342,9 @@ class Vendors extends sdks_js_1.ClientSDK {
      * Accept vendor credential
      *
      * @remarks
-     * It will accept vendor credential
+     * Accepts the vendor credential.
+     *
+     * **Permissions.** Requires the `vendor_credentials.view` permission.
      */
     async acceptVendorCredential(request, options) {
         return (0, fp_js_1.unwrapAsync)((0, vendorsAcceptVendorCredential_js_1.vendorsAcceptVendorCredential)(this, request, options));
@@ -303,7 +353,9 @@ class Vendors extends sdks_js_1.ClientSDK {
      * Check download code for vendor credential
      *
      * @remarks
-     * It will check download code for vendor credential
+     * Checks the download code for the vendor credential.
+     *
+     * **Permissions.** Requires a valid token. This endpoint is not gated on a named permission. The caller's role and their relationship to the record decide what the response includes. A company manager checking a code for a vendor-owned credential (not a company-owned one) receives only the `urls` of files they personally uploaded on the vendor's behalf. The legacy single-attachment fallback is never returned to them, because it predates per-file uploader tracking.
      */
     async checkDownloadCode(request, options) {
         return (0, fp_js_1.unwrapAsync)((0, vendorsCheckDownloadCode_js_1.vendorsCheckDownloadCode)(this, request, options));
@@ -312,21 +364,29 @@ class Vendors extends sdks_js_1.ClientSDK {
      * Send download code for vendor credential
      *
      * @remarks
-     * It will send download code for vendor credential
+     * Sends a download code for the vendor credential.
+     *
+     * **Permissions.** Requires a valid token. This endpoint is not gated on a named permission. The caller's role and their relationship to the record decide what the response includes.
      */
     async sendDownloadCode(request, options) {
         return (0, fp_js_1.unwrapAsync)((0, vendorsSendDownloadCode_js_1.vendorsSendDownloadCode)(this, request, options));
     }
     /**
-     * List Vendor Credential files
+     * List vendor credential files
      *
      * @remarks
-     * Retrieve an vendor credential files.
+     * Retrieves the files for a vendor credential.
+     *
+     * **Permissions.** Requires the `vendor_credentials.view` permission. A company manager
+     * viewing a vendor-owned credential (not a company-owned one) only sees files they personally
+     * uploaded on the vendor's behalf, even though they may otherwise manage the vendor.
      *
-     * Available `expand` scopes are:
+     * The following `expand` scopes are available:
      *
-     * - vendor_credential_file.vendor_credential
-     * - vendor_credential_file.credential_document
+     * - `vendor_credential_file.vendor_credential`
+     * - `vendor_credential_file.credential_document`
+     *
+     * The endpoint ignores unrecognized values.
      */
     async listVendorCredentialFiles(request, options) {
         return (0, fp_js_1.unwrapAsync)((0, vendorsListVendorCredentialFiles_js_1.vendorsListVendorCredentialFiles)(this, request, options));
@@ -335,7 +395,9 @@ class Vendors extends sdks_js_1.ClientSDK {
      * Add vendor credential file
      *
      * @remarks
-     * It will add a new vendor credential file
+     * Adds a vendor credential file
+     *
+     * **Permissions.** Requires the `vendor_credentials.view` permission.
      */
     async addVendorCredentialFile(request, options) {
         return (0, fp_js_1.unwrapAsync)((0, vendorsAddVendorCredentialFile_js_1.vendorsAddVendorCredentialFile)(this, request, options));
@@ -344,7 +406,9 @@ class Vendors extends sdks_js_1.ClientSDK {
      * Submit vendor credential
      *
      * @remarks
-     * It will submit vendor credential
+     * Submits the vendor credential.
+     *
+     * **Permissions.** Requires the `vendor_credentials.view` permission.
      */
     async submitVendorCredential(request, options) {
         return (0, fp_js_1.unwrapAsync)((0, vendorsSubmitVendorCredential_js_1.vendorsSubmitVendorCredential)(this, request, options));
@@ -353,7 +417,9 @@ class Vendors extends sdks_js_1.ClientSDK {
      * Create or update BackgroundCheckResults
      *
      * @remarks
-     * It will create or update BackgroundCheckResults
+     * Creates or updates BackgroundCheckResults
+     *
+     * **Permissions.** Requires a valid token. This endpoint is not gated on a named permission: the caller's role and their relationship to the record determine what the response contains.
      */
     async createOrUpdateBcr(request, options) {
         return (0, fp_js_1.unwrapAsync)((0, vendorsCreateOrUpdateBcr_js_1.vendorsCreateOrUpdateBcr)(this, request, options));
@@ -362,16 +428,24 @@ class Vendors extends sdks_js_1.ClientSDK {
      * Create new vendor credential version
      *
      * @remarks
-     * It will submit vendor credential
+     * Creates a new version of the vendor credential.
+     *
+     * **Permissions.** Requires the `vendor_credentials.add` permission.
      */
     async createNewVendorCredentialVersion(request, options) {
         return (0, fp_js_1.unwrapAsync)((0, vendorsCreateNewVendorCredentialVersion_js_1.vendorsCreateNewVendorCredentialVersion)(this, request, options));
     }
     /**
-     * List Vendor Credential History
+     * List vendor credential history
      *
      * @remarks
      * Lists vendor credentials history
+     *
+     * **Permissions.** Requires the `vendor_credentials.view` permission.
+     *
+     * Each item's `submitted_by_current_user` says whether the calling user is the one who first
+     * submitted that version, so a vendor or company manager can tell their own submissions apart
+     * from ones made by someone else with access to the same credential.
      */
     async listVendorCredentialHistory(request, options) {
         return (0, operations_js_1.unwrapResultIterator)((0, vendorsListVendorCredentialHistory_js_1.vendorsListVendorCredentialHistory)(this, request, options));
@@ -380,12 +454,16 @@ class Vendors extends sdks_js_1.ClientSDK {
      * List vendor credential data requests
      *
      * @remarks
-     * Retrieve an vendor credential data requests.
+     * Retrieves the data requests for a vendor credential.
      *
-     * Available `expand` scopes are:
+     * **Permissions.** Requires the `vendor_credentials.view` permission.
      *
-     * - vendor_credential_data_request.vendor_credential
-     * - vendor_credential_data_request.data_request
+     * The `expand` parameter accepts the following scopes:
+     *
+     * - `vendor_credential_data_request.vendor_credential`
+     * - `vendor_credential_data_request.data_request`
+     *
+     * The server ignores unrecognized values.
      */
     async listVendorCredentialDataRequests(request, options) {
         return (0, fp_js_1.unwrapAsync)((0, vendorsListVendorCredentialDataRequests_js_1.vendorsListVendorCredentialDataRequests)(this, request, options));
@@ -394,7 +472,9 @@ class Vendors extends sdks_js_1.ClientSDK {
      * Expedite time remaining
      *
      * @remarks
-     * For vendors who have a paid 24-hour expedite credentials invoice, get the remaining time (in seconds) for which submitted credentials will be expedited.
+     * Gets the remaining time, in seconds, that the server expedites submitted credentials for vendors who have a paid 24-hour expedite credentials invoice.
+     *
+     * **Permissions.** Requires the `vendors.view` permission.
      */
     async expediteTimeRemaining(request, options) {
         return (0, fp_js_1.unwrapAsync)((0, vendorsExpediteTimeRemaining_js_1.vendorsExpediteTimeRemaining)(this, request, options));
@@ -403,11 +483,21 @@ class Vendors extends sdks_js_1.ClientSDK {
      * Vendor subscription
      *
      * @remarks
-     * Get vendor subscription
+     * Gets vendor subscription
+     *
+     * **Permissions.** Requires the `vendors.view` permission.
+     *
+     * The `expand` parameter accepts the following scopes:
      *
-     * Available `expand` scopes are:
+     * - `subscription.date_ends`
+     * - `subscription.variant_title`
+     * - `subscription.current_line_item`
+     * - `subscription.next_line_item`
+     * - `subscription.current_financial_status`
+     * - `subscription.next_financial_status`
+     * - `subscription.expedited_offers`
      *
-     * subscription.expedited_offer
+     * The server ignores unrecognized values. It applies every scope except `subscription.expedited_offers` automatically, so passing them changes nothing.
      */
     async getSubscription(request, options) {
         return (0, fp_js_1.unwrapAsync)((0, vendorsGetSubscription_js_1.vendorsGetSubscription)(this, request, options));
@@ -416,10 +506,12 @@ class Vendors extends sdks_js_1.ClientSDK {
      * Change subscription
      *
      * @remarks
-     * Change a vendor's credentialing subscription by updating the vendor type
-     * and/or target facilities. If the new selection increases the subscription
-     * price, an invoice is created and the payment profile is charged; the
+     * Changes a vendor's credentialing subscription by updating the vendor type,
+     * the target facilities, or both. If the selection increases the subscription
+     * price, the server creates an invoice and charges the payment profile; the
      * response includes the invoice id.
+     *
+     * **Permissions.** Requires the `vendor_transactions.add` permission.
      */
     async changeSubscription(request, options) {
         return (0, fp_js_1.unwrapAsync)((0, vendorsChangeSubscription_js_1.vendorsChangeSubscription)(this, request, options));
@@ -428,14 +520,29 @@ class Vendors extends sdks_js_1.ClientSDK {
      * List vendor invoices
      *
      * @remarks
-     * List invoices for Vendors.
+     * Deprecated. Use `GET /invoices` instead. Lists invoices for vendors.
      *
      * Deprecated: use `GET /invoices` instead, which supports both vendors and other roles through role-based scoping and the `id` query parameter for vendors.
      *
-     * Available `expand` scopes are:
+     * **Permissions.** Requires the `invoices.view` permission.
+     *
+     * The `expand` parameter accepts the following scopes:
      *
-     * invoice.line_items
-     * invoice.may_pay_invoice
+     * - `invoice.invoice_type`
+     * - `invoice.custom_fields`
+     * - `invoice.line_items`
+     * - `invoice.invoice_transactions`
+     * - `invoice.representative`
+     * - `invoice.payment_profile`
+     * - `invoice.may_pay_invoice`
+     * - `invoice.shareback_system`
+     * - `line_items.details`
+     * - `line_items.product`
+     * - `line_items.variant`
+     * - `invoice_transactions.payee`
+     * - `invoice_transactions.payment_profile`
+     *
+     * The server ignores unrecognized values.
      *
      * @deprecated method: This will be removed in a future release, please migrate away from it as soon as possible.
      */
@@ -446,7 +553,9 @@ class Vendors extends sdks_js_1.ClientSDK {
      * Get invoice receipt for vendor
      *
      * @remarks
-     * Get invoice receipt for vendor
+     * Gets invoice receipt for vendor
+     *
+     * **Permissions.** Requires a valid token. This endpoint is not gated on a named permission. The caller's role and their relationship to the record determine what the response contains.
      */
     async getVendorInvoiceReceipt(request, options) {
         return (0, fp_js_1.unwrapAsync)((0, vendorsGetVendorInvoiceReceipt_js_1.vendorsGetVendorInvoiceReceipt)(this, request, options));
@@ -455,15 +564,30 @@ class Vendors extends sdks_js_1.ClientSDK {
      * Get vendor invoice details
      *
      * @remarks
-     * Retrieve an individual vendor invoice detais.
-     *
-     * Available `expand` scopes are:
-     *
-     * invoice.line_items
-     * invoice.invoice_transactions
-     * invoice.may_pay_invoice
-     * invoice.associated_credentials
-     * invoice_transactions.payee
+     * Retrieves an individual vendor invoice's details.
+     *
+     * **Permissions.** Requires the `invoices.view` permission.
+     *
+     * **Permissions.** Requires the `invoices.view` permission.
+     *
+     * The `expand` parameter accepts the following scopes:
+     *
+     * - `invoice.invoice_type`
+     * - `invoice.custom_fields`
+     * - `invoice.line_items`
+     * - `invoice.invoice_transactions`
+     * - `invoice.representative`
+     * - `invoice.payment_profile`
+     * - `invoice.may_pay_invoice`
+     * - `invoice.shareback_system`
+     * - `line_items.details`
+     * - `line_items.product`
+     * - `line_items.variant`
+     * - `invoice_transactions.payee`
+     * - `invoice_transactions.payment_profile`
+     * - `invoice.associated_credentials`
+     *
+     * The server ignores unrecognized values.
      */
     async getVendorInvoiceDetails(request, options) {
         return (0, fp_js_1.unwrapAsync)((0, vendorsGetVendorInvoiceDetails_js_1.vendorsGetVendorInvoiceDetails)(this, request, options));
@@ -472,7 +596,9 @@ class Vendors extends sdks_js_1.ClientSDK {
      * List vendor facility statuses
      *
      * @remarks
-     * List the facilities for the vendor
+     * Lists the facilities for the vendor
+     *
+     * **Permissions.** Requires the `facilities.view` permission.
      */
     async listVendorFacilityStatuses(request, options) {
         return (0, operations_js_1.unwrapResultIterator)((0, vendorsListVendorFacilityStatuses_js_1.vendorsListVendorFacilityStatuses)(this, request, options));
@@ -481,7 +607,9 @@ class Vendors extends sdks_js_1.ClientSDK {
      * List vendor scrub purchases
      *
      * @remarks
-     * List vendor scrub purchases
+     * Lists vendor scrub purchases
+     *
+     * **Permissions.** Requires a valid token. This endpoint is not gated on a named permission. The caller's role and their relationship to the record determine what the response contains.
      */
     async listVendorScrubPurchases(request, options) {
         return (0, operations_js_1.unwrapResultIterator)((0, vendorsListVendorScrubPurchases_js_1.vendorsListVendorScrubPurchases)(this, request, options));
@@ -490,7 +618,9 @@ class Vendors extends sdks_js_1.ClientSDK {
      * List vendor scrub details
      *
      * @remarks
-     * List vendor scrub details
+     * Lists vendor scrub details
+     *
+     * **Permissions.** Requires a valid token. This endpoint is not gated on a named permission: the caller's role and their relationship to the record decide what the endpoint returns.
      */
     async listVendorScrubDetails(request, options) {
         return (0, fp_js_1.unwrapAsync)((0, vendorsListVendorScrubDetails_js_1.vendorsListVendorScrubDetails)(this, request, options));
@@ -499,7 +629,9 @@ class Vendors extends sdks_js_1.ClientSDK {
      * Update vendor scrub details
      *
      * @remarks
-     * Update vendor scrub details
+     * Updates vendor scrub details
+     *
+     * **Permissions.** Requires a valid token. This endpoint is not gated on a named permission: the caller's role and their relationship to the record decide what the endpoint returns.
      */
     async updateVendorScrubDetails(request, options) {
         return (0, fp_js_1.unwrapAsync)((0, vendorsUpdateVendorScrubDetails_js_1.vendorsUpdateVendorScrubDetails)(this, request, options));
@@ -508,7 +640,9 @@ class Vendors extends sdks_js_1.ClientSDK {
      * List vendor scrub packages
      *
      * @remarks
-     * List vendor scrub packages
+     * Lists vendor scrub packages
+     *
+     * **Permissions.** Requires a valid token. This endpoint is not gated on a named permission. The caller's role and their relationship to the record determine what the response contains.
      */
     async listVendorScrubPackages(request, options) {
         return (0, operations_js_1.unwrapResultIterator)((0, vendorsListVendorScrubPackages_js_1.vendorsListVendorScrubPackages)(this, request, options));
@@ -517,33 +651,41 @@ class Vendors extends sdks_js_1.ClientSDK {
      * Get vendors details
      *
      * @remarks
-     * Retrieve an individual vendor details.
-     *
-     * Available `expand` scopes are:
-     *
-     * vendor.user
-     * vendor.vendor_type
-     * vendor.vendor_job
-     * vendor.image_urls
-     * vendor.payment_profile
-     * vendor.primary_facility
-     * vendor.primary_department
-     * vendor.company
-     * vendor.credentialing_subscription
-     * vendor.scrubs_subscription
-     * vendor.payment_responsibility
-     * vendor.background_check_date_expires
-     * vendor.credit_balance
-     * vendor.registration_data
-     * vendor.registration_finished
-     * vendor.target_facilities
-     * vendor.approved_calendaring_facilities
-     * vendor.pending_invoice
-     * vendor.vendor_groups
-     * vendor.has_credentialed_facilities
-     * vendor.has_emerald_status
-     * vendor.has_target_facility_questions
-     * vendor.custom_fields
+     * Retrieves an individual vendor details.
+     *
+     * **Permissions.** Requires the `vendors.view` permission.
+     *
+     * The following `expand` scopes are available:
+     *
+     * - `vendor.user`
+     * - `vendor.vendor_type`
+     * - `vendor.vendor_job`
+     * - `vendor.badge_details`
+     * - `vendor.required_badge_type`
+     * - `vendor.image_urls`
+     * - `vendor.payment_profile`
+     * - `vendor.primary_facility`
+     * - `vendor.primary_department`
+     * - `vendor.company`
+     * - `vendor.credentialing_subscription`
+     * - `vendor.scrubs_subscription`
+     * - `vendor.payment_responsibility`
+     * - `vendor.background_check_date_expires`
+     * - `vendor.credit_balance`
+     * - `vendor.registration_data`
+     * - `vendor.registration_finished`
+     * - `vendor.target_facilities`
+     * - `vendor.approved_calendaring_facilities`
+     * - `vendor.pending_invoice`
+     * - `vendor.vendor_groups`
+     * - `vendor.has_credentialed_facilities`
+     * - `vendor.has_emerald_status`
+     * - `vendor.has_target_facility_questions`
+     * - `vendor.custom_fields`
+     * - `vendor.last_scanned`
+     * - `subscription.current_line_item`
+     *
+     * The server rejects any other value with `422 Unprocessable Entity`.
      */
     async getVendorsDetails(request, options) {
         return (0, fp_js_1.unwrapAsync)((0, vendorsGetVendorsDetails_js_1.vendorsGetVendorsDetails)(this, request, options));
@@ -552,28 +694,30 @@ class Vendors extends sdks_js_1.ClientSDK {
      * Update vendor details
      *
      * @remarks
-     * Update an individual vendor's profile — title, location, supervisor, email
+     * Updates an individual vendor's profile—title, location, supervisor, email
      * preferences, primary department, and primary sales state. A company manager
      * can also remove the vendor from their company by sending `company_id: null`.
      *
      * From `location` this endpoint reads only `timezone`, `address1`, `address2`,
      * `city`, `state`, `zip`, `phone`, `mobile_phone` and `fax`. The `address` and
-     * `country` properties of the shared `UserLocation` schema are ignored here and
+     * `country` properties of the shared `UserLocation` schema have no effect here, and
      * updating them is not supported. `state` accepts a US state or a Canadian
-     * province — the vendor's country, set only at registration, is not editable
+     * province—the vendor's country, set only at registration, is not editable
      * through this endpoint.
      *
      * Submitting `location.zip` or `location.state` cross-checks the postal code
      * against the resulting state (using the vendor's existing value for whichever
-     * of the two is left out of the request). A code that is not shaped like a real
-     * postal code, or that provably belongs to a different state, is rejected with
+     * of the two you omit from the request). The server rejects a code that is not shaped like a real
+     * postal code, or that provably belongs to a different state, with
      * `422` naming the correct state.
      *
      * For `title`, the `supervisor` fields, and every `location` field except
-     * `timezone`, the value sent is the value stored: omit a field to leave it
+     * `timezone`, the value sent is the value stored. Omit a field to leave it
      * unchanged, or send an empty string to clear it. `timezone` is the one
-     * exception — it accepts only the values in its enum, so send one of those to
+     * exception. It accepts only the values in its enum, so send one of those to
      * change it and omit it to leave it unchanged.
+     *
+     * **Permissions.** Requires the `vendors.edit` permission.
      */
     async updateVendorDetails(request, options) {
         return (0, fp_js_1.unwrapAsync)((0, vendorsUpdateVendorDetails_js_1.vendorsUpdateVendorDetails)(this, request, options));
@@ -582,7 +726,9 @@ class Vendors extends sdks_js_1.ClientSDK {
      * List vendor credits
      *
      * @remarks
-     * List the credits for the vendor. Defaults to chronological order (oldest first).
+     * Lists the credits for the vendor. Defaults to chronological order (oldest first).
+     *
+     * **Permissions.** Requires the `vendors.view` permission.
      */
     async listVendorCredits(request, options) {
         return (0, operations_js_1.unwrapResultIterator)((0, vendorsListVendorCredits_js_1.vendorsListVendorCredits)(this, request, options));
@@ -595,11 +741,13 @@ class Vendors extends sdks_js_1.ClientSDK {
      *
      * Backward-compatible shape preserved: this endpoint continues to return
      * the legacy paginated envelope (`items` + `pager`) with the original
-     * `system` / `facility` / `field` / `value` keys per item. New consumers
+     * `system` / `facility` / `field` / `value` keys per item. Consumers
      * should migrate to `/custom-fields`, which returns an unpaginated array
      * with the `field_for` discriminator. Scheduled for removal after SDK
      * consumers migrate.
      *
+     * **Permissions.** Requires the `vendors.view` permission.
+     *
      * @deprecated method: This will be removed in a future release, please migrate away from it as soon as possible.
      */
     async listVendorAdditionalFacilityFields(request, options) {
@@ -613,12 +761,14 @@ class Vendors extends sdks_js_1.ClientSDK {
      * merged into a single array. Each item includes a `field_for` discriminator
      * indicating whether the field belongs to a company or facility.
      *
-     * Fields that the vendor has not yet set a value for are returned with
+     * The response returns fields that the vendor has not yet set a value for with
      * `value: null`, including fields where other vendors in the same company
      * have set values.
      *
      * Accepts a numeric vendor ID, `me` for the authenticated vendor,
      * or an active QR code (format: contains hyphens).
+     *
+     * **Permissions.** Requires the `vendors.view` permission.
      */
     async listVendorCustomFields(request, options) {
         return (0, fp_js_1.unwrapAsync)((0, vendorsListVendorCustomFields_js_1.vendorsListVendorCustomFields)(this, request, options));
@@ -628,13 +778,17 @@ class Vendors extends sdks_js_1.ClientSDK {
      *
      * @remarks
      * Sets or updates a custom field value for the specified vendor. If the value
-     * does not exist it is created; if it already exists it is updated (upsert).
+     * does not exist, the API creates it; if it already exists, the API updates it (upsert).
      *
      * The vendor field must belong to the vendor's company or to one of the
      * vendor's targeted facilities, and must have `show_to_vendor` set to `true`.
      *
      * Accepts a numeric vendor ID, `me` for the authenticated vendor,
      * or an active QR code (format: contains hyphens).
+     *
+     * **Permissions.** Requires the `vendors.edit` permission. A company manager whose company
+     * manages the vendor through a managed-by-company link, rather than owning it, also needs that
+     * link's `may_edit_profile` access right, or the API returns `403`.
      */
     async updateVendorCustomField(request, options) {
         return (0, fp_js_1.unwrapAsync)((0, vendorsUpdateVendorCustomField_js_1.vendorsUpdateVendorCustomField)(this, request, options));
@@ -643,7 +797,9 @@ class Vendors extends sdks_js_1.ClientSDK {
      * List of companies managing the vendor
      *
      * @remarks
-     * List of companies managing the vendor
+     * Lists the companies that manage the vendor
+     *
+     * **Permissions.** Requires the `vendors.view` permission.
      */
     async listVendorManagedByCompanies(request, options) {
         return (0, operations_js_1.unwrapResultIterator)((0, vendorsListVendorManagedByCompanies_js_1.vendorsListVendorManagedByCompanies)(this, request, options));
@@ -652,7 +808,19 @@ class Vendors extends sdks_js_1.ClientSDK {
      * Add vendor managed by company
      *
      * @remarks
-     * It will add a vendor managed by company
+     * Adds a company as a manager of the vendor. The new company starts with every access right
+     * turned off. The company must be on the same site as the vendor. Otherwise, the API returns
+     * `404`.
+     *
+     * The company the vendor belongs to can't be added, because it already has full rights over the
+     * vendor. The API returns `400`, as it does for a company that already manages the vendor.
+     *
+     * **Permissions.** Requires the `vendors.edit` permission. Only these callers can change which
+     * companies manage the vendor: the vendor, a company manager at the company the vendor belongs to,
+     * a Green Security administrator, or an app whose API token can update the vendor (an app
+     * installed for the vendor's whole site, for the company the vendor belongs to, or by the vendor).
+     * A company manager whose company manages the vendor through a managed-by-company link, rather
+     * than owning the vendor, gets a `403`, and so do facility and system users.
      */
     async addVendorManagedByCompany(request, options) {
         return (0, fp_js_1.unwrapAsync)((0, vendorsAddVendorManagedByCompany_js_1.vendorsAddVendorManagedByCompany)(this, request, options));
@@ -661,7 +829,17 @@ class Vendors extends sdks_js_1.ClientSDK {
      * Delete vendor managed by company
      *
      * @remarks
-     * It will delete the vendor managed by company
+     * Removes a company as a manager of the vendor.
+     *
+     * **Permissions.** Requires the `vendors.edit` permission. Only these callers can change which
+     * companies manage the vendor: the vendor, a company manager at the company the vendor belongs to,
+     * a Green Security administrator, or an app whose API token can update the vendor (an app
+     * installed for the vendor's whole site, for the company the vendor belongs to, or by the vendor).
+     * A company manager whose company manages the vendor through a managed-by-company link, rather
+     * than owning the vendor, gets a `403`, and so do facility and system users.
+     *
+     * If `managed_vendor_id` doesn't belong to this vendor, the API returns `404`, the same response
+     * as for an ID that doesn't exist.
      */
     async deleteVendorManagedByCompany(request, options) {
         return (0, fp_js_1.unwrapAsync)((0, vendorsDeleteVendorManagedByCompany_js_1.vendorsDeleteVendorManagedByCompany)(this, request, options));
@@ -670,7 +848,18 @@ class Vendors extends sdks_js_1.ClientSDK {
      * Update vendor managed by company access rights
      *
      * @remarks
-     * It will update the vendor managed by company access rights
+     * Updates the access rights that a company has for the vendor it manages.
+     *
+     * **Permissions.** Requires the `vendors.edit` permission. Only these callers can change access
+     * rights: the vendor, a company manager at the company the vendor belongs to, a Green Security
+     * administrator, or an app whose API token can update the vendor (an app installed for the
+     * vendor's whole site, for the company the vendor belongs to, or by the vendor). A company manager
+     * whose company manages the vendor through a managed-by-company link, rather than owning the
+     * vendor, gets a `403`: that company can't change its own access rights or another company's.
+     * Facility and system users get a `403` too.
+     *
+     * If `managed_vendor_id` doesn't belong to this vendor, the API returns `404`, the same response
+     * as for an ID that doesn't exist.
      */
     async updateVendorManagedByCompany(request, options) {
         return (0, fp_js_1.unwrapAsync)((0, vendorsUpdateVendorManagedByCompany_js_1.vendorsUpdateVendorManagedByCompany)(this, request, options));
@@ -680,12 +869,52 @@ class Vendors extends sdks_js_1.ClientSDK {
      *
      * @remarks
      * Enqueues an asynchronous job to generate a CSV export of vendors based on the
-     * provided filters (the same filters supported by the vendors list endpoint), in the same
-     * credential-inclusive format as the portal's "Download Full Report" button - one column per
+     * provided filters (the same filters supported by the vendors list endpoint). The file uses the same
+     * credential-inclusive format: one column per
      * applicable credential (status, due date, expiration), plus counts and percentage approved,
      * alongside the vendor's identity, contact, and company details.
      * Returns a `status_url` to poll until the export is ready, plus a
      * `download_url` and `status_id`.
+     *
+     * **Permissions.** Requires the `vendors.view` permission.
+     *
+     * Use any of the following `expand` scopes:
+     *
+     * - `vendor.user`
+     * - `vendor.vendor_type`
+     * - `vendor.vendor_job`
+     * - `vendor.badge_details`
+     * - `vendor.required_badge_type`
+     * - `vendor.image_urls`
+     * - `vendor.payment_profile`
+     * - `vendor.primary_facility`
+     * - `vendor.primary_department`
+     * - `vendor.company`
+     * - `vendor.credentialing_subscription`
+     * - `vendor.scrubs_subscription`
+     * - `vendor.payment_responsibility`
+     * - `vendor.background_check_date_expires`
+     * - `vendor.credit_balance`
+     * - `vendor.registration_data`
+     * - `vendor.registration_finished`
+     * - `vendor.target_facilities`
+     * - `vendor.approved_calendaring_facilities`
+     * - `vendor.pending_invoice`
+     * - `vendor.vendor_groups`
+     * - `vendor.has_credentialed_facilities`
+     * - `vendor.has_emerald_status`
+     * - `vendor.has_target_facility_questions`
+     * - `vendor.custom_fields`
+     * - `vendor.last_scanned`
+     * - `subscription.current_line_item`
+     * - `subscription.date_ends`
+     * - `subscription.variant_title`
+     * - `subscription.next_line_item`
+     * - `subscription.current_financial_status`
+     * - `subscription.next_financial_status`
+     * - `subscription.expedited_offers`
+     *
+     * For any other value, the server responds with `422 Unprocessable Entity`. The export job builds its own columns and ignores `expand`. The server still validates the parameter for backward compatibility, but it does not change the generated CSV.
      */
     async vendorsExport(request, options) {
         return (0, fp_js_1.unwrapAsync)((0, vendorsVendorsExport_js_1.vendorsVendorsExport)(this, request, options));
@@ -694,8 +923,10 @@ class Vendors extends sdks_js_1.ClientSDK {
      * Get vendor export status
      *
      * @remarks
-     * Poll the status of an asynchronous vendor export job. When `ready` is true,
-     * the export is complete and can be downloaded via the download endpoint.
+     * Polls the status of an asynchronous vendor export job. When `ready` is true,
+     * the export is complete, and you can download it from the download endpoint.
+     *
+     * **Permissions.** Requires the `vendors.view` permission.
      */
     async getVendorsExportStatus(request, options) {
         return (0, fp_js_1.unwrapAsync)((0, vendorsGetVendorsExportStatus_js_1.vendorsGetVendorsExportStatus)(this, request, options));
@@ -705,8 +936,10 @@ class Vendors extends sdks_js_1.ClientSDK {
      *
      * @remarks
      * Downloads the exported vendors CSV. When the export is ready the server
-     * responds with a 302 redirect to a short-lived presigned S3 URL. If the
+     * responds with a 302 redirect to a short-lived presigned Amazon Simple Storage Service (S3) URL. If the
      * export job is still running, responds with 202.
+     *
+     * **Permissions.** Requires the `vendors.view` permission.
      */
     async downloadVendorsExport(request, options) {
         return (0, fp_js_1.unwrapAsync)((0, vendorsDownloadVendorsExport_js_1.vendorsDownloadVendorsExport)(this, request, options));
@@ -715,7 +948,9 @@ class Vendors extends sdks_js_1.ClientSDK {
      * Purchase scrub credits
      *
      * @remarks
-     * Purchase scrub credits
+     * Purchases scrub credits.
+     *
+     * **Permissions.** Requires a valid token. This endpoint is not gated on a named permission. The caller's role and their relationship to the record determine what the endpoint returns.
      */
     async purchaseScrubCredits(request, options) {
         return (0, fp_js_1.unwrapAsync)((0, vendorsPurchaseScrubCredits_js_1.vendorsPurchaseScrubCredits)(this, request, options));
@@ -724,7 +959,15 @@ class Vendors extends sdks_js_1.ClientSDK {
      * Create vendor company
      *
      * @remarks
-     * Create vendor company
+     * Creates vendor company
+     *
+     * **Permissions.** Requires the `companies.add` permission. Only these callers can move the vendor
+     * into a new company: the vendor, a company manager at the company the vendor belongs to, a Green
+     * Security administrator, or an app installed for the vendor's whole site. An app needs a
+     * site-wide installation because only a site-wide installation can create companies. An app
+     * installed only for a company or by a user gets a `403`, even when its API token can update the
+     * vendor. A company manager whose company manages the vendor through a managed-by-company link,
+     * rather than owning the vendor, gets a `403`, and so do facility and system users.
      */
     async createVendorCompany(request, options) {
         return (0, fp_js_1.unwrapAsync)((0, vendorsCreateVendorCompany_js_1.vendorsCreateVendorCompany)(this, request, options));
@@ -733,7 +976,9 @@ class Vendors extends sdks_js_1.ClientSDK {
      * Calculate subscription price
      *
      * @remarks
-     * Calculate subscription price
+     * Calculates subscription price
+     *
+     * **Permissions.** Requires the `pricing_models.view` permission.
      */
     async calculateSubscriptionPrice(request, options) {
         return (0, fp_js_1.unwrapAsync)((0, vendorsCalculateSubscriptionPrice_js_1.vendorsCalculateSubscriptionPrice)(this, request, options));
@@ -742,7 +987,8 @@ class Vendors extends sdks_js_1.ClientSDK {
      * List a vendor's target-facility screening questions and answers
      *
      * @remarks
-     * Returns every active target-facility screening question that currently applies to the vendor at the given facility, each paired with the vendor's answer when one has been given. Questions that have not been answered are included with a null answer. Read-only; used to review a rep's screening answers.
+     * Returns every active target-facility screening question that applies to the vendor at the given facility, each paired with the vendor's answer when the vendor has answered. Questions that the vendor has not answered appear with a null answer. Read-only; used to review a rep's screening answers.
+     * **Permissions.** Requires the `vendors.view` permission.
      */
     async getVendorScreeningQuestions(request, options) {
         return (0, fp_js_1.unwrapAsync)((0, vendorsGetVendorScreeningQuestions_js_1.vendorsGetVendorScreeningQuestions)(this, request, options));
@@ -752,6 +998,12 @@ class Vendors extends sdks_js_1.ClientSDK {
      *
      * @remarks
      * Returns the next unanswered screening question for the vendor specified by the vendor_id_or_me path parameter.
+     *
+     * **Permissions.** Requires the `vendors.view` permission.
+     *
+     * The only available `expand` scope is `screening_question.screening_answers`.
+     *
+     * The endpoint rejects any other value with `422 Unprocessable Entity`.
      */
     async getNextUnansweredScreeningQuestion(request, options) {
         return (0, fp_js_1.unwrapAsync)((0, vendorsGetNextUnansweredScreeningQuestion_js_1.vendorsGetNextUnansweredScreeningQuestion)(this, request, options));
@@ -761,6 +1013,15 @@ class Vendors extends sdks_js_1.ClientSDK {
      *
      * @remarks
      * Returns a paginated list of target facility rows for the specified vendor, including per-row screening question status.
+     *
+     * **Permissions.** Requires the `vendors.view` permission.
+     *
+     * The following `expand` scopes are available:
+     *
+     * - `vendor_target_facility.facility`
+     * - `vendor_target_facility.has_screening_responses`
+     *
+     * The endpoint rejects any other value with `422 Unprocessable Entity`.
      */
     async getVendorTargetFacilities(request, options) {
         return (0, operations_js_1.unwrapResultIterator)((0, vendorsGetVendorTargetFacilities_js_1.vendorsGetVendorTargetFacilities)(this, request, options));
@@ -770,6 +1031,8 @@ class Vendors extends sdks_js_1.ClientSDK {
      *
      * @remarks
      * Cancels an existing handoff with the given QR code.
+     *
+     * **Permissions.** Requires the `vendor_scans.add` permission.
      */
     async cancelHandoff(request, options) {
         return (0, fp_js_1.unwrapAsync)((0, vendorsCancelHandoff_js_1.vendorsCancelHandoff)(this, request, options));
@@ -779,20 +1042,24 @@ class Vendors extends sdks_js_1.ClientSDK {
      *
      * @remarks
      * Lists files the vendor has uploaded across all their credentials, ordered by upload date descending. Excludes decline-document uploads.
+     *
+     * **Permissions.** Requires the `vendor_credentials.view` permission.
      */
     async getVendorUploadHistory(request, options) {
         return (0, operations_js_1.unwrapResultIterator)((0, vendorsGetVendorUploadHistory_js_1.vendorsGetVendorUploadHistory)(this, request, options));
     }
     /**
-     * Get a one-time URL for uploading a credential file for automatic classification (Emerald vendors only)
+     * Get an upload URL for automatic credential classification
      *
      * @remarks
-     * This endpoint allows vendors on the Emerald plan to upload a series of
+     * Lets vendors on the Emerald plan upload a series of
      * documents and have them automatically ingested and routed to the proper
-     * credential. The endpoint will return a one-time-use URL where the file
-     * must be uploaded. Green Security will process the file asynchronously.
+     * credential. The endpoint returns a presigned URL where you upload the file. The URL expires after five minutes.
+     * Green Security processes the file asynchronously.
      *
      * Non-Emerald vendors must use `addVendorCredentialFile` instead.
+     *
+     * **Permissions.** Requires the `vendor_credentials.add` permission.
      */
     async addVendorCredentialFileForAutoClassification(request, options) {
         return (0, fp_js_1.unwrapAsync)((0, vendorsAddVendorCredentialFileForAutoClassification_js_1.vendorsAddVendorCredentialFileForAutoClassification)(this, request, options));