/**
 * This file was auto-generated by openapi-typescript.
 * Do not make direct changes to the file.
 */
interface paths {
    "/hr/rules/resolve": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        get?: never;
        put?: never;
        /**
         * Resolve every rule class for a subject, returning §2
         * @description Resolve every rule class for a subject, returning §2.6's resolution result verbatim INCLUDING the full trace of every candidate considered. Writes no snapshot.
         */
        post: operations["hr_rules_resolve"];
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/hr/validate/config": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        get?: never;
        put?: never;
        /**
         * Validate an org's parameters for one rule class
         * @description Validate an org's parameters for one rule class. On invalid the caller gets 200 WITH violations, not a 4xx — the admin UI calls this on every keystroke. The same predicate returns 422 hr_unlawful_config on submit.
         */
        post: operations["hr_validate_config"];
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/hr/calc/overtime": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        get?: never;
        put?: never;
        /**
         * Overtime for one workweek
         * @description Overtime for one workweek. The workweek is the OT unit, never the pay period (AR 1.5). Multi-rate weeks return weighted_average_regular_rate (AR 1.6). subject.type=hr_workweek.
         */
        post: operations["hr_calc_overtime"];
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/hr/calc/break-premium": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        get?: never;
        put?: never;
        /**
         * Meal/rest premiums for one work date
         * @description Meal/rest premiums for one work date. Premiums are interval_kind='premium_only', hours=1.0, MEAL_PREMIUM/REST_PREMIUM. subject.type=hr_workweek, parameters.work_date names the day.
         */
        post: operations["hr_calc_break_premium"];
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/hr/calc/leave-accrual": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        get?: never;
        put?: never;
        /**
         * Accrual for one enrollment through a date
         * @description Accrual for one enrollment through a date. Per-hours-worked accrual reads the TIMESHEET, not the pay period (AR 1.8). subject.type=hr_leave_enrollment.
         */
        post: operations["hr_calc_leave_accrual"];
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/hr/calc/carryover": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        get?: never;
        put?: never;
        /**
         * Plan-year carryover
         * @description Plan-year carryover. Carryover legality clamps org config and the clamp appears in clamps[]. subject.type=hr_leave_enrollment.
         */
        post: operations["hr_calc_carryover"];
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/hr/calc/termination-payout": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        get?: never;
        put?: never;
        /**
         * Final payout at termination
         * @description Final payout at termination. A $0 payout STILL writes a snapshot — the evidence that we checked. subject.type=hr_employment.
         */
        post: operations["hr_calc_termination_payout"];
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/hr/calc/predictability-pay": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        get?: never;
        put?: never;
        /**
         * Fair-workweek predictability pay
         * @description Fair-workweek predictability pay. subject.type=hr_schedule_change. Where the ordinance rule is advisory the money field is OMITTED and flags[] explains — never a zero.
         */
        post: operations["hr_calc_predictability_pay"];
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/hr/calc/training-mandates": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        get?: never;
        put?: never;
        /**
         * Training mandates for a trigger
         * @description Training mandates for a trigger. Additive: every applicable mandate produces its own assignment. subject.type=hr_employment.
         */
        post: operations["hr_calc_training_mandates"];
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/hr/calc/retention-due": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        get?: never;
        put?: never;
        /**
         * Retention disposition date for a record
         * @description Retention disposition date for a record. Legal hold overrides everything; absence of a rule NEVER authorizes destruction. subject.type=hr_record_class.
         */
        post: operations["hr_calc_retention_due"];
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/hr/calc/i9-deadlines": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        get?: never;
        put?: never;
        /**
         * I-9 Section 1/2/reverification deadlines
         * @description I-9 Section 1/2/reverification deadlines. Rules-as-data replaces SPEC-ONBOARDING's in-code Section-2 arithmetic: business-day counting against the FEDERAL calendar, never the org's holiday calendar. subject.type=hr_i9.
         */
        post: operations["hr_calc_i9_deadlines"];
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/hr/time/recompute": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        get?: never;
        put?: never;
        /**
         * Pair punches, apply the neutral rounding bound, write work intervals, roll up workweeks, evaluate rules
         * @description Pair punches, apply the neutral rounding bound, write work intervals, roll up workweeks, evaluate rules. Recomputation NEVER deletes — superseded rows get is_current=false. Refuses 423 hr_period_locked against a locked/closed period.
         */
        post: operations["hr_time_recompute"];
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/hr/time/exceptions/scan": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        get?: never;
        put?: never;
        /**
         * Attendance-exception detector over a window: variance, no-show, late/early against the grace knobs, unscheduled work, wo
         * @description Attendance-exception detector over a window: variance, no-show, late/early against the grace knobs, unscheduled work, worked-through-break, orphan-punch auto-close. dry_run:true writes nothing.
         */
        post: operations["hr_time_exceptions_scan"];
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/hr/time/overtime/evaluate": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        get?: never;
        put?: never;
        /**
         * Approaching-OT evaluator for one employment — cheap enough for a clock screen on every punch
         * @description Approaching-OT evaluator for one employment — cheap enough for a clock screen on every punch. ALWAYS prospective: it projects, it never writes hours. Daily thresholds are not optional (an 8-hour CA day triggers OT regardless of the weekly total).
         */
        post: operations["hr_time_overtime_evaluate"];
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/hr/time/overtime/scan": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        get?: never;
        put?: never;
        /**
         * The async sweep behind the real-time alerts
         * @description The async sweep behind the real-time alerts. Idempotent per (employment_id, workweek_id, threshold_key) so a 15-minute cadence does not alert four times an hour. Runs on the dedicated worker lane (§1.5b). Which roles receive which tier is D24g routing resolved from configuration, never a list in code.
         */
        post: operations["hr_time_overtime_scan"];
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/hr/accruals/run": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        get?: never;
        put?: never;
        /**
         * Accrual run
         * @description Accrual run. The ledger is append-only and immutable — an error is a reversal entry, never an edit — so a re-run over an already-accrued window writes nothing and the endpoint is idempotent by construction as well as by header.
         */
        post: operations["hr_accruals_run"];
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/hr/accruals/carryover/run": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        get?: never;
        put?: never;
        /**
         * Plan-year carryover run
         * @description Plan-year carryover run. A statutory floor that overrides org policy is counted in clamped_by_statute and recorded in each snapshot's clamps[].
         */
        post: operations["hr_accruals_carryover_run"];
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/hr/schedule/draft": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        get?: never;
        put?: never;
        /**
         * Create shifts from nothing — a template or rotating pattern plus staffing requirements and labor targets — into a draft
         * @description Create shifts from nothing — a template or rotating pattern plus staffing requirements and labor targets — into a draft schedule. DIFFERENT JOB from autofill, which assigns people to shifts that already exist.
         */
        post: operations["hr_schedule_draft"];
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/hr/schedule/autofill": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        get?: never;
        put?: never;
        /**
         * Assign people to open shifts
         * @description Assign people to open shifts. Every null constraint means 'resolve the knob' (D13) — a caller may override for a one-off run, never embed a default. recommend and review_and_comment postures write NOTHING; only apply_final writes.
         */
        post: operations["hr_schedule_autofill"];
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/hr/schedule/{schedule_id}/validate": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        get?: never;
        put?: never;
        /**
         * Pre-publish gate: double-booking, OT projection, rest periods, credential expiry, approved-leave exclusion, minors, fair
         * @description Pre-publish gate: double-booking, OT projection, rest periods, credential expiry, approved-leave exclusion, minors, fair-workweek notice window. THE SAME CODE PATH the swap checker uses — one conflict engine, never a second that drifts.
         */
        post: operations["hr_schedule_validate"];
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/hr/exports/formats": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        /**
         * The format registry, so the client never hard-codes a list
         * @description The format registry, so the client never hard-codes a list. export_format is a closed set of six; a seventh is a schema change plus a §7 amendment.
         */
        get: operations["hr_exports_formats_list"];
        put?: never;
        post?: never;
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/hr/exports/payroll/preview": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        get?: never;
        put?: never;
        /**
         * Synchronous dry run
         * @description Synchronous dry run. Creates NO hr.payroll_export row — a separate endpoint precisely so that looking is not an act with a record.
         */
        post: operations["hr_exports_payroll_preview"];
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/hr/exports/payroll": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        get?: never;
        put?: never;
        /**
         * Generate the payroll artifact
         * @description Generate the payroll artifact. REFUSES 422 hr_advisory_rule_blocks_money rather than omitting an amount — a payroll file with a silently-missing premium is the exact failure that rule exists to prevent. 400 with details.unmapped[] rather than blanks in an identifier column.
         */
        post: operations["hr_exports_payroll_create"];
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/hr/exports/timesheet": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        get?: never;
        put?: never;
        /**
         * The human-readable sibling: the same intervals rendered as a timesheet report
         * @description The human-readable sibling: the same intervals rendered as a timesheet report. Writes an access_audit row and does NOT create a payroll_export row — conflating the two would let a report supersede a payroll file.
         */
        post: operations["hr_exports_timesheet_create"];
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/hr/exports/{export_id}": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        /**
         * Export state and metadata
         * @description Export state and metadata.
         */
        get: operations["hr_exports_get"];
        put?: never;
        post?: never;
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/hr/exports/{export_id}/artifact": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        /**
         * Returns the REFERENCE envelope, never bytes
         * @description Returns the REFERENCE envelope, never bytes. file_id is the identity and download_url is the durable, per-request-authenticated /files/{file_id}/download route — nothing expires and nothing is signed, so the whole envelope is safe to persist.
         */
        get: operations["hr_exports_artifact_get"];
        put?: never;
        post?: never;
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/hr/exports/{export_id}/acknowledge": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        get?: never;
        put?: never;
        /**
         * sent -> acknowledged
         * @description sent -> acknowledged. acknowledgement_ref is the receiving system's, opaque to us. After this the export can NEVER be superseded, regenerated or re-sent.
         */
        post: operations["hr_exports_acknowledge"];
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/hr/exports/{export_id}/fail": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        get?: never;
        put?: never;
        /**
         * generated|sent -> failed
         * @description generated|sent -> failed. Failure is recorded, not swallowed.
         */
        post: operations["hr_exports_fail"];
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/hr/exports/{export_id}/supersede": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        get?: never;
        put?: never;
        /**
         * generated|failed -> superseded, generating a new export at version n+1
         * @description generated|failed -> superseded, generating a new export at version n+1. 🚨 An ACKNOWLEDGED export can never be superseded: 409 hr_export_already_acknowledged. Once payroll has taken the file the only correction path is an adjustment row in the NEXT export, because a re-export double-pays.
         */
        post: operations["hr_exports_supersede"];
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/hr/providers/{seam}/bindings": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        /**
         * The org's bindings for a seam, minus every secret
         * @description The org's bindings for a seam, minus every secret.
         */
        get: operations["hr_providers_bindings_list"];
        put?: never;
        post?: never;
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/hr/providers/{seam}/dispatch": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        get?: never;
        put?: never;
        /**
         * The edge OUT
         * @description The edge OUT. On completion the engine has written outbound_sent_at, outbound_request_ref and an outbound_payload_summary — A SUMMARY, NEVER THE PAYLOAD, because the payload carries PII our own tables should not duplicate.
         */
        post: operations["hr_providers_dispatch"];
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/hr/providers/{seam}/results": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        get?: never;
        put?: never;
        /**
         * The org-recorded path — D12's actual first shipping mode (path='manual')
         * @description The org-recorded path — D12's actual first shipping mode (path='manual'). Same body shape the webhook produces after mapping, so the manual path and the provider path converge on ONE writer.
         */
        post: operations["hr_providers_results_record"];
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/hr/providers/{seam}/sync": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        get?: never;
        put?: never;
        /**
         * Poll the black box for results
         * @description Poll the black box for results. The resolution path for MCP bindings, which have no webhook lane.
         */
        post: operations["hr_providers_sync"];
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/hooks/providers/{seam}/{provider_key}": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        get?: never;
        put?: never;
        /**
         * The edge IN
         * @description The edge IN. Deliberately outside /hr/* because it carries no user bearer token. Verifies an HMAC over the raw body, rejects a timestamp outside the skew knob, and is idempotent on (provider_key, provider_event_id) so a provider retrying five times produces ONE state change. Returns 202 for an event it recognizes but does not map, so a provider never sees a failure for an event we simply do not consume.
         */
        post: operations["hr_hooks_provider_webhook"];
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/hr/background-checks/{check_id}/request": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        get?: never;
        put?: never;
        /**
         * The FCRA-gated front door to dispatch
         * @description The FCRA-gated front door to dispatch. Refuses 400 unless disclosure_presented_at AND authorized_at are both set — a standalone disclosure and a separate authorization, in that order.
         */
        post: operations["hr_background_checks_request"];
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/hr/background-checks/{check_id}/adverse-action/pre": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        get?: never;
        put?: never;
        /**
         * Sends the pre-adverse notice with the report copy and summary of rights through the e-sign/notification lanes — never a
         * @description Sends the pre-adverse notice with the report copy and summary of rights through the e-sign/notification lanes — never a bespoke sender — and sets candidate_response_deadline_at from the statutory waiting period.
         */
        post: operations["hr_background_checks_adverse_action_pre"];
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/hr/background-checks/{check_id}/adverse-action/final": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        get?: never;
        put?: never;
        /**
         * Returns 409 hr_state_conflict with details
         * @description Returns 409 hr_state_conflict with details.earliest_at if called BEFORE the statutory deadline. The waiting period being enforced in code rather than trusted to a human is the entire reason these are endpoints and not a status dropdown.
         */
        post: operations["hr_background_checks_adverse_action_final"];
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/hr/new-hire-reports/generate": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        get?: never;
        put?: never;
        /**
         * State new-hire report artifact for a batch of employments
         * @description State new-hire report artifact for a batch of employments. REQUIRES the employer profile's EIN and returns 400 with details.missing:['employer_profile.ein'] when absent — a hard failure rather than a blank field in a government file.
         */
        post: operations["hr_new_hire_reports_generate"];
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/hr/new-hire-reports/{report_id}/record-submission": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        get?: never;
        put?: never;
        /**
         * Record the confirmation an org got back from the portal or the mail
         * @description Record the confirmation an org got back from the portal or the mail.
         */
        post: operations["hr_new_hire_reports_record_submission"];
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/hr/verification-letters/{letter_id}/generate": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        get?: never;
        put?: never;
        /**
         * Renders the letter and FREEZES exactly what it asserted into snapshot, because a letter is an assertion the org will be
         * @description Renders the letter and FREEZES exactly what it asserted into snapshot, because a letter is an assertion the org will be held to. 403 when includes_compensation is true and employee_consent_at is null — the DB CHECK enforces the same thing so the two cannot drift.
         */
        post: operations["hr_verification_letters_generate"];
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/hr/i9/inspection-export": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        get?: never;
        put?: never;
        /**
         * The I-9 inspection package for a government audit: the form set, its versions, the timing evidence, and a manifest
         * @description The I-9 inspection package for a government audit: the form set, its versions, the timing evidence, and a manifest. Reads the separate I-9 storage lane, writes an access_audit row with action='export', gated to i9.inspect alone.
         */
        post: operations["hr_i9_inspection_export"];
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/hr/identity/{identity_id}/ssn/reveal": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        get?: never;
        put?: never;
        /**
         * The ONE confidential operation that is server-side, and only because a Postgres RPC cannot decrypt
         * @description The ONE confidential operation that is server-side, and only because a Postgres RPC cannot decrypt. Runs as the calling user, requires a justification, writes access_audit action='reveal', RETURNS THE VALUE ONCE with Cache-Control: no-store, never caches. Crossing the daily threshold raises an alert AND STILL RETURNS THE VALUE — an alarm is not a denial.
         */
        post: operations["hr_identity_ssn_reveal"];
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/hr/outsider-tokens/mint": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        get?: never;
        put?: never;
        /**
         * Mints a platform
         * @description Mints a platform.outsider_token. Server-side only — never by a browser, never by anon. The SECRET IS RETURNED EXACTLY ONCE, to the sender, and goes straight into the outbound message; every later read returns a masked prefix.
         */
        post: operations["hr_outsider_tokens_mint"];
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/careers/{org_slug}/openings": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        /**
         * Public openings list
         * @description Public openings list. Projects the posting ONLY — never requisition budget or range (comp data), applicant counts, or hiring-team identities. An org with the portal disabled returns 404, never a differently-shaped error that confirms it exists.
         */
        get: operations["hr_careers_openings_list"];
        put?: never;
        post?: never;
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/careers/{org_slug}/openings/{posting_id}": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        /**
         * One public opening
         * @description One public opening.
         */
        get: operations["hr_careers_opening_get"];
        put?: never;
        post?: never;
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/careers/widget/bootstrap": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        /**
         * The widget's single call
         * @description The widget's single call. VERIFIES THE Origin HEADER against the embed_key's allowlist and returns 403 otherwise, so a stolen key cannot be embedded elsewhere. The key is public by nature — it is in a <script> tag — and grants nothing but this read. A public page must never ship a Supabase anon key belonging to an employer's tenant.
         */
        get: operations["hr_careers_widget_bootstrap"];
        put?: never;
        post?: never;
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/careers/{org_slug}/applications": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        get?: never;
        put?: never;
        /**
         * Apply
         * @description Apply. Creates candidate + application through THE SAME WRITER the outsider lane's apply_submit RPC uses — one code path, two doors. EEO self-ID is a SEPARATE call, never in this transaction or its log line. Resume goes through an upload ticket, not a body field. Idempotent on (posting_id, email, content-hash) inside a short window.
         */
        post: operations["hr_careers_application_create"];
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/esign/envelopes": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        get?: never;
        put?: never;
        /**
         * Create a draft envelope
         * @description Create a draft envelope.
         */
        post: operations["esign_envelopes_create"];
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/esign/envelopes/{envelope_id}/send": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        get?: never;
        put?: never;
        /**
         * THE FREEZE POINT, and idempotent on the ENVELOPE, not the header: a second send on an already-sent envelope returns 409
         * @description THE FREEZE POINT, and idempotent on the ENVELOPE, not the header: a second send on an already-sent envelope returns 409 hr_state_conflict with the existing state. It does not re-freeze or re-notify. Use remind.
         */
        post: operations["esign_envelopes_send"];
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/esign/envelopes/{envelope_id}/void": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        get?: never;
        put?: never;
        /**
         * Void an envelope
         * @description Void an envelope.
         */
        post: operations["esign_envelopes_void"];
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/esign/envelopes/{envelope_id}/remind": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        get?: never;
        put?: never;
        /**
         * Remind outstanding signers
         * @description Remind outstanding signers.
         */
        post: operations["esign_envelopes_remind"];
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/esign/envelopes/{envelope_id}/signers/{signer_id}/resend": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        get?: never;
        put?: never;
        /**
         * Resend to one signer, optionally at a corrected address
         * @description Resend to one signer, optionally at a corrected address.
         */
        post: operations["esign_envelopes_signer_resend"];
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/esign/envelopes/{envelope_id}": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        /**
         * State, signers and documents
         * @description State, signers and documents.
         */
        get: operations["esign_envelopes_get"];
        put?: never;
        post?: never;
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/esign/envelopes/{envelope_id}/events": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        /**
         * The ledger — the schema's one append-only event table
         * @description The ledger — the schema's one append-only event table.
         */
        get: operations["esign_envelopes_events_list"];
        put?: never;
        post?: never;
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/esign/envelopes/{envelope_id}/certificate": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        /**
         * Payload, Ed25519 signature and the rendered PDF link
         * @description Payload, Ed25519 signature and the rendered PDF link.
         */
        get: operations["esign_envelopes_certificate_get"];
        put?: never;
        post?: never;
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/esign/envelopes/{envelope_id}/verify": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        get?: never;
        put?: never;
        /**
         * Recompute and compare every hash
         * @description Recompute and compare every hash. A READ THAT CAN FAIL LOUDLY: returns 200 with {verified:false, mismatches:[...]} rather than a 4xx, because a tamper finding is a result the caller must render, not an error the caller might swallow.
         */
        post: operations["esign_envelopes_verify"];
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/esign/campaigns": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        get?: never;
        put?: never;
        /**
         * Bulk create
         * @description Bulk create.
         */
        post: operations["esign_campaigns_create"];
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/esign/campaigns/{campaign_id}/send": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        get?: never;
        put?: never;
        /**
         * Batched send
         * @description Batched send. PARTIAL COMPLETION IS A FIRST-CLASS RESULT, never rounded to success or failure.
         */
        post: operations["esign_campaigns_send"];
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/esign/campaigns/{campaign_id}/progress": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        /**
         * Rollup plus the outstanding list
         * @description Rollup plus the outstanding list.
         */
        get: operations["esign_campaigns_progress_get"];
        put?: never;
        post?: never;
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
    "/esign/campaigns/{campaign_id}/export": {
        parameters: {
            query?: never;
            header?: never;
            path?: never;
            cookie?: never;
        };
        /**
         * Audit export of the campaign
         * @description Audit export of the campaign.
         */
        get: operations["esign_campaigns_export_get"];
        put?: never;
        post?: never;
        delete?: never;
        options?: never;
        head?: never;
        patch?: never;
        trace?: never;
    };
}
type webhooks = Record<string, never>;
interface components {
    schemas: {
        HrError: {
            /** @description Machine code. §1.3 — a string literal, never an enum on the server. */
            error: string;
            /** @description For the log. */
            message: string;
            user_message?: string | null;
            details?: {
                [key: string]: unknown;
            } | null;
            /** @description Echoes X-Request-Id, or the one the server minted. §1.3 — it travels in the BODY, because X-Request-ID is a response header only on streaming responses. */
            request_id: string;
        };
        /** @description §1.5 — HR creates NO job table. The runtime spine's existing endpoints are the async surface. */
        AsyncAccepted: {
            request_id: string;
            execution_id: string;
            /** @enum {string} */
            status: "queued";
            /** @description /runtime/operations/<request_id> */
            poll: string;
            /** @description /runtime/executions/<execution_id>/events/stream */
            events: string;
            /** Format: date-time */
            submitted_at: string;
        };
        SubjectRef: {
            /** @description Entity token. §3.1 — never `hr_employee`; a subject is an employment, position assignment, workweek, ledger row or schedule change (AR 1.1). */
            type: string;
            /** Format: uuid */
            id: string;
        };
        RuleApplied: {
            class: string;
            /** Format: uuid */
            rule_id: string;
            rule_version: number;
            jurisdiction_key: string;
            /** @enum {string} */
            status: "active" | "advisory" | "draft";
        };
        CalcFlag: {
            code: string;
            class: string;
            rule_id?: string | null;
            jurisdiction_key?: string | null;
            message: string;
        };
        IncompleteFact: {
            class: string;
            fact: string;
        };
        Clamp: {
            class: string;
            from: string;
            to: string;
            reason: string;
        };
        EngineRef: {
            key: string;
            /** @description Deployed git SHA. */
            version: string;
        };
        CalcRequest: {
            /** Format: uuid */
            organization_id: string;
            subject: components["schemas"]["SubjectRef"];
            /**
             * Format: date
             * @description §1.6 law 1 — the EVENT date, never now().
             */
            as_of: string;
            /**
             * @default authoritative
             * @enum {string}
             */
            mode: "authoritative" | "prospective";
            parameters?: {
                [key: string]: unknown;
            };
            recalculation_batch_id?: string | null;
            jurisdiction_key?: string | null;
        };
        CalcResponse: {
            /**
             * Format: uuid
             * @description ALWAYS present. An endpoint that computed and did not snapshot is a defect (§3.1 invariant 1).
             */
            snapshot_id: string;
            prospective: boolean;
            /** Format: date */
            as_of: string;
            jurisdiction_key: string;
            engine: components["schemas"]["EngineRef"];
            /** @description Per endpoint. A MONEY FIELD IS ABSENT whenever a contributing rule is advisory on a produces_money class — never a zero, never a guess (§1.3 rule 3 / §3.1 invariant 2). */
            result: {
                [key: string]: unknown;
            };
            rules_applied: components["schemas"]["RuleApplied"][];
            flags: components["schemas"]["CalcFlag"][];
            incomplete: components["schemas"]["IncompleteFact"][];
            clamps: components["schemas"]["Clamp"][];
            /** @description Empty on every prospective call — the machine-checkable form of 'not evidence' (§3.1 invariant 5). */
            written: {
                [key: string]: unknown;
            };
        };
        ConfigViolation: {
            class: string;
            jurisdiction_key: string;
            rule_id?: string | null;
            parameter: string;
            submitted?: unknown;
            floor?: unknown;
            message: string;
        };
        ExportEnvelope: {
            /**
             * Format: uuid
             * @description The identity AND the handle. Redeem it at the durable, per-request-authenticated download_url; the whole envelope is safe to persist.
             */
            file_id: string;
            /** @description {PUBLIC_URL}/files/{file_id}/download — durable, never expires, authenticated on every request. Never a signed URL. */
            download_url: string;
            sha256: string;
        };
        ExportFormat: {
            /** @enum {string} */
            key: "quickbooks_online" | "quickbooks_iif" | "gusto_csv" | "adp_csv" | "generic_csv" | "json";
            label: string;
            delivery: ("file" | "api")[];
            media_type: string;
            columns?: {
                name: string;
                source: string;
                required: boolean;
            }[];
            requires_mapping: string[];
            supports_rates?: boolean;
            supports_adjustment_lines?: boolean;
            /** @description §4.3 / OI-1 — both QuickBooks mappers ship available:false; their column specs are unpublished by Intuit. */
            available: boolean;
            notes?: string | null;
        };
        /** @description §3.6 — the projection a client gets. NO credential_ref and NO connector secrets: provider credentials never reach the client. */
        ProviderBinding: {
            /** Format: uuid */
            binding_id: string;
            /** Format: uuid */
            organization_id?: string;
            seam: string;
            provider_key: string;
            display_name: string;
            /** @enum {string} */
            connector_kind: "rest" | "mcp" | "file" | "manual";
            is_active: boolean;
            capabilities: string[];
            /** Format: date-time */
            bound_at?: string;
        };
        ScheduleAssignment: {
            /** Format: uuid */
            shift_id: string;
            /** Format: uuid */
            employment_id: string;
            confidence?: number;
            rationale?: string;
            /** @description 🚨 SD-6 — an ORDINAL, not invertible to a rate. There is NO per-candidate money field anywhere beside an employment_id. */
            relative_cost_band: number;
            would_trigger_overtime: boolean;
        };
        ScheduleConflict: {
            /** Format: uuid */
            shift_id: string;
            employment_id?: string | null;
            rule: string;
            /** @enum {string} */
            severity: "block" | "warn";
            reason?: string | null;
        };
        EsignSigner: {
            /** Format: uuid */
            signer_id: string;
            full_name: string;
            email?: string | null;
            position: number;
            /** @enum {string} */
            state: "pending" | "viewed" | "consented" | "signed" | "declined" | "delegated";
            signed_at?: string | null;
        };
        EsignEnvelope: {
            /** Format: uuid */
            envelope_id: string;
            /** Format: uuid */
            organization_id: string;
            /** @enum {string} */
            state: "draft" | "sent" | "completed" | "declined" | "voided" | "expired";
            envelope_type: string;
            subject?: string;
            documents: {
                /** Format: uuid */
                document_id: string;
                name: string;
                sha256?: string | null;
            }[];
            signers: components["schemas"]["EsignSigner"][];
            sent_at?: string | null;
            completed_at?: string | null;
        };
    };
    responses: never;
    parameters: never;
    requestBodies: never;
    headers: never;
    pathItems: never;
}
type $defs = Record<string, never>;
interface operations {
    hr_rules_resolve: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
            };
            path?: never;
            cookie?: never;
        };
        requestBody: {
            content: {
                "application/json": {
                    /** Format: uuid */
                    organization_id: string;
                    subject: components["schemas"]["SubjectRef"];
                    /** Format: date */
                    as_of: string;
                    classes: string[];
                    facts: {
                        [key: string]: unknown;
                    };
                    jurisdiction_key?: string | null;
                };
            };
        };
        responses: {
            /** @description OK */
            200: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": {
                        /** Format: date */
                        as_of: string;
                        jurisdiction_key: string;
                        chain: string[];
                        resolved: components["schemas"]["RuleApplied"][];
                        incomplete: components["schemas"]["IncompleteFact"][];
                        trace: {
                            [key: string]: unknown;
                        }[];
                    };
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            422: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    hr_validate_config: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
            };
            path?: never;
            cookie?: never;
        };
        requestBody: {
            content: {
                "application/json": {
                    /** Format: uuid */
                    organization_id: string;
                    class: string;
                    parameters: {
                        [key: string]: unknown;
                    };
                    jurisdiction_keys?: string[] | null;
                    as_of?: string | null;
                };
            };
        };
        responses: {
            /** @description OK */
            200: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": {
                        valid: boolean;
                        violations: components["schemas"]["ConfigViolation"][];
                    };
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            422: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    hr_calc_overtime: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
                /** @description §1.4 — REQUIRED when mode="authoritative" (the call writes result rows and a calculation snapshot); optional when mode="prospective", which writes no domain row. Enforced by the handler, because OpenAPI cannot express a requirement conditional on a body field. §1.4 — required on every mutating POST. A replay with the same key returns the stored outcome verbatim plus X-Idempotency-Replayed: true; the same key with a DIFFERENT body is 409 hr_idempotency_conflict. */
                "X-Idempotency-Key"?: string;
            };
            path?: never;
            cookie?: never;
        };
        requestBody: {
            content: {
                "application/json": components["schemas"]["CalcRequest"];
            };
        };
        responses: {
            /** @description OK */
            200: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["CalcResponse"];
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            422: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    hr_calc_break_premium: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
                /** @description §1.4 — REQUIRED when mode="authoritative" (the call writes result rows and a calculation snapshot); optional when mode="prospective", which writes no domain row. Enforced by the handler, because OpenAPI cannot express a requirement conditional on a body field. §1.4 — required on every mutating POST. A replay with the same key returns the stored outcome verbatim plus X-Idempotency-Replayed: true; the same key with a DIFFERENT body is 409 hr_idempotency_conflict. */
                "X-Idempotency-Key"?: string;
            };
            path?: never;
            cookie?: never;
        };
        requestBody: {
            content: {
                "application/json": components["schemas"]["CalcRequest"];
            };
        };
        responses: {
            /** @description OK */
            200: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["CalcResponse"];
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            422: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    hr_calc_leave_accrual: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
                /** @description §1.4 — REQUIRED when mode="authoritative" (the call writes result rows and a calculation snapshot); optional when mode="prospective", which writes no domain row. Enforced by the handler, because OpenAPI cannot express a requirement conditional on a body field. §1.4 — required on every mutating POST. A replay with the same key returns the stored outcome verbatim plus X-Idempotency-Replayed: true; the same key with a DIFFERENT body is 409 hr_idempotency_conflict. */
                "X-Idempotency-Key"?: string;
            };
            path?: never;
            cookie?: never;
        };
        requestBody: {
            content: {
                "application/json": components["schemas"]["CalcRequest"];
            };
        };
        responses: {
            /** @description OK */
            200: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["CalcResponse"];
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            422: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    hr_calc_carryover: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
                /** @description §1.4 — REQUIRED when mode="authoritative" (the call writes result rows and a calculation snapshot); optional when mode="prospective", which writes no domain row. Enforced by the handler, because OpenAPI cannot express a requirement conditional on a body field. §1.4 — required on every mutating POST. A replay with the same key returns the stored outcome verbatim plus X-Idempotency-Replayed: true; the same key with a DIFFERENT body is 409 hr_idempotency_conflict. */
                "X-Idempotency-Key"?: string;
            };
            path?: never;
            cookie?: never;
        };
        requestBody: {
            content: {
                "application/json": components["schemas"]["CalcRequest"];
            };
        };
        responses: {
            /** @description OK */
            200: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["CalcResponse"];
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            422: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    hr_calc_termination_payout: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
                /** @description §1.4 — REQUIRED when mode="authoritative" (the call writes result rows and a calculation snapshot); optional when mode="prospective", which writes no domain row. Enforced by the handler, because OpenAPI cannot express a requirement conditional on a body field. §1.4 — required on every mutating POST. A replay with the same key returns the stored outcome verbatim plus X-Idempotency-Replayed: true; the same key with a DIFFERENT body is 409 hr_idempotency_conflict. */
                "X-Idempotency-Key"?: string;
            };
            path?: never;
            cookie?: never;
        };
        requestBody: {
            content: {
                "application/json": components["schemas"]["CalcRequest"];
            };
        };
        responses: {
            /** @description OK */
            200: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["CalcResponse"];
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            422: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    hr_calc_predictability_pay: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
                /** @description §1.4 — REQUIRED when mode="authoritative" (the call writes result rows and a calculation snapshot); optional when mode="prospective", which writes no domain row. Enforced by the handler, because OpenAPI cannot express a requirement conditional on a body field. §1.4 — required on every mutating POST. A replay with the same key returns the stored outcome verbatim plus X-Idempotency-Replayed: true; the same key with a DIFFERENT body is 409 hr_idempotency_conflict. */
                "X-Idempotency-Key"?: string;
            };
            path?: never;
            cookie?: never;
        };
        requestBody: {
            content: {
                "application/json": components["schemas"]["CalcRequest"];
            };
        };
        responses: {
            /** @description OK */
            200: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["CalcResponse"];
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            422: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    hr_calc_training_mandates: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
                /** @description §1.4 — REQUIRED when mode="authoritative" (the call writes result rows and a calculation snapshot); optional when mode="prospective", which writes no domain row. Enforced by the handler, because OpenAPI cannot express a requirement conditional on a body field. §1.4 — required on every mutating POST. A replay with the same key returns the stored outcome verbatim plus X-Idempotency-Replayed: true; the same key with a DIFFERENT body is 409 hr_idempotency_conflict. */
                "X-Idempotency-Key"?: string;
            };
            path?: never;
            cookie?: never;
        };
        requestBody: {
            content: {
                "application/json": components["schemas"]["CalcRequest"];
            };
        };
        responses: {
            /** @description OK */
            200: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["CalcResponse"];
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            422: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    hr_calc_retention_due: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
                /** @description §1.4 — REQUIRED when mode="authoritative" (the call writes result rows and a calculation snapshot); optional when mode="prospective", which writes no domain row. Enforced by the handler, because OpenAPI cannot express a requirement conditional on a body field. §1.4 — required on every mutating POST. A replay with the same key returns the stored outcome verbatim plus X-Idempotency-Replayed: true; the same key with a DIFFERENT body is 409 hr_idempotency_conflict. */
                "X-Idempotency-Key"?: string;
            };
            path?: never;
            cookie?: never;
        };
        requestBody: {
            content: {
                "application/json": components["schemas"]["CalcRequest"];
            };
        };
        responses: {
            /** @description OK */
            200: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["CalcResponse"];
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            422: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    hr_calc_i9_deadlines: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
                /** @description §1.4 — REQUIRED when mode="authoritative" (the call writes result rows and a calculation snapshot); optional when mode="prospective", which writes no domain row. Enforced by the handler, because OpenAPI cannot express a requirement conditional on a body field. §1.4 — required on every mutating POST. A replay with the same key returns the stored outcome verbatim plus X-Idempotency-Replayed: true; the same key with a DIFFERENT body is 409 hr_idempotency_conflict. */
                "X-Idempotency-Key"?: string;
            };
            path?: never;
            cookie?: never;
        };
        requestBody: {
            content: {
                "application/json": components["schemas"]["CalcRequest"];
            };
        };
        responses: {
            /** @description OK */
            200: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["CalcResponse"];
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            422: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    hr_time_recompute: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
                /** @description §1.4 — required on every mutating POST. A replay with the same key returns the stored outcome verbatim plus X-Idempotency-Replayed: true; the same key with a DIFFERENT body is 409 hr_idempotency_conflict. */
                "X-Idempotency-Key": string;
            };
            path?: never;
            cookie?: never;
        };
        requestBody: {
            content: {
                "application/json": {
                    /** Format: uuid */
                    organization_id: string;
                    /** @description {kind:'pay_period',pay_period_id} | {kind:'employment_range',employment_ids[],from,to} | {kind:'workweek',workweek_ids[]} */
                    scope: {
                        [key: string]: unknown;
                    };
                    reason: string;
                    recalculation_batch_id?: string | null;
                };
            };
        };
        responses: {
            /** @description Accepted. §1.5 — the reference is the runtime spine's, not a new envelope. */
            202: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["AsyncAccepted"];
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            409: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            423: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            503: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    hr_time_exceptions_scan: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
                /** @description §1.4 — required on every mutating POST. A replay with the same key returns the stored outcome verbatim plus X-Idempotency-Replayed: true; the same key with a DIFFERENT body is 409 hr_idempotency_conflict. */
                "X-Idempotency-Key": string;
            };
            path?: never;
            cookie?: never;
        };
        requestBody: {
            content: {
                "application/json": {
                    /** Format: uuid */
                    organization_id: string;
                    location_ids?: string[] | null;
                    /** Format: date */
                    from: string;
                    /** Format: date */
                    to: string;
                    /** @default false */
                    dry_run: boolean;
                };
            };
        };
        responses: {
            /** @description Accepted. §1.5 — the reference is the runtime spine's, not a new envelope. */
            202: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["AsyncAccepted"];
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            409: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            423: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            503: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    hr_time_overtime_evaluate: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
            };
            path?: never;
            cookie?: never;
        };
        requestBody: {
            content: {
                "application/json": {
                    /** Format: uuid */
                    organization_id: string;
                    /** Format: uuid */
                    employment_id: string;
                    /**
                     * Format: date-time
                     * @description The evaluation instant. The workweek is DERIVED, never passed.
                     */
                    as_of: string;
                    /** @default true */
                    include_scheduled?: boolean;
                };
            };
        };
        responses: {
            /** @description OK */
            200: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": {
                        /** Format: uuid */
                        workweek_id: string;
                        /** Format: date */
                        week_start_local_date: string;
                        hours_worked_to_date: number;
                        hours_scheduled_remaining: number;
                        projected_week_hours: number;
                        thresholds: {
                            key: string;
                            at_hours: number;
                            crossed: boolean;
                            crosses_at?: string | null;
                        }[];
                        daily: {
                            hours_today: number;
                            daily_ot_at_hours?: number | null;
                            daily_dt_at_hours?: number | null;
                        };
                        preapproval: {
                            required: boolean;
                            /** @enum {string} */
                            state: "none" | "requested" | "approved" | "denied" | "exceeded_without_approval";
                            workflow_instance_id?: string | null;
                        };
                        grace_minutes: number;
                        /** Format: uuid */
                        snapshot_id: string;
                        /** @enum {boolean} */
                        prospective: true;
                        flags: components["schemas"]["CalcFlag"][];
                        incomplete: components["schemas"]["IncompleteFact"][];
                    };
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            409: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            423: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            503: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    hr_time_overtime_scan: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
                /** @description §1.4 — required on every mutating POST. A replay with the same key returns the stored outcome verbatim plus X-Idempotency-Replayed: true; the same key with a DIFFERENT body is 409 hr_idempotency_conflict. */
                "X-Idempotency-Key": string;
            };
            path?: never;
            cookie?: never;
        };
        requestBody: {
            content: {
                "application/json": {
                    /** Format: uuid */
                    organization_id: string;
                    location_ids?: string[] | null;
                    thresholds?: string[] | null;
                    /** @default false */
                    dry_run: boolean;
                };
            };
        };
        responses: {
            /** @description Accepted. §1.5 — the reference is the runtime spine's, not a new envelope. */
            202: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["AsyncAccepted"];
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            409: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            423: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            503: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    hr_accruals_run: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
                /** @description §1.4 — required on every mutating POST. A replay with the same key returns the stored outcome verbatim plus X-Idempotency-Replayed: true; the same key with a DIFFERENT body is 409 hr_idempotency_conflict. */
                "X-Idempotency-Key": string;
            };
            path?: never;
            cookie?: never;
        };
        requestBody: {
            content: {
                "application/json": {
                    /** Format: uuid */
                    organization_id: string;
                    /** Format: date */
                    through_date: string;
                    /** @description {kind:'org'} | {kind:'leave_policy',leave_policy_id} | {kind:'employment',employment_ids[]} */
                    scope: {
                        [key: string]: unknown;
                    };
                    /**
                     * @default authoritative
                     * @enum {string}
                     */
                    mode?: "authoritative" | "prospective";
                };
            };
        };
        responses: {
            /** @description Accepted. §1.5 — the reference is the runtime spine's, not a new envelope. */
            202: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["AsyncAccepted"];
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            422: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            503: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    hr_accruals_carryover_run: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
                /** @description §1.4 — required on every mutating POST. A replay with the same key returns the stored outcome verbatim plus X-Idempotency-Replayed: true; the same key with a DIFFERENT body is 409 hr_idempotency_conflict. */
                "X-Idempotency-Key": string;
            };
            path?: never;
            cookie?: never;
        };
        requestBody: {
            content: {
                "application/json": {
                    /** Format: uuid */
                    organization_id: string;
                    /** Format: date */
                    plan_year_end: string;
                    scope: {
                        [key: string]: unknown;
                    };
                    /**
                     * @default authoritative
                     * @enum {string}
                     */
                    mode?: "authoritative" | "prospective";
                };
            };
        };
        responses: {
            /** @description Accepted. §1.5 — the reference is the runtime spine's, not a new envelope. */
            202: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["AsyncAccepted"];
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            422: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            503: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    hr_schedule_draft: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
                /** @description §1.4 — required on every mutating POST. A replay with the same key returns the stored outcome verbatim plus X-Idempotency-Replayed: true; the same key with a DIFFERENT body is 409 hr_idempotency_conflict. */
                "X-Idempotency-Key": string;
            };
            path?: never;
            cookie?: never;
        };
        requestBody: {
            content: {
                "application/json": {
                    /** Format: uuid */
                    organization_id: string;
                    schedule_id?: string | null;
                    location_id?: string | null;
                    /** Format: date */
                    from: string;
                    /** Format: date */
                    to: string;
                    template_id?: string | null;
                };
            };
        };
        responses: {
            /** @description Accepted. §1.5 — the reference is the runtime spine's, not a new envelope. */
            202: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["AsyncAccepted"];
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            422: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            503: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    hr_schedule_autofill: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
                /** @description §1.4 — required on every mutating POST. A replay with the same key returns the stored outcome verbatim plus X-Idempotency-Replayed: true; the same key with a DIFFERENT body is 409 hr_idempotency_conflict. */
                "X-Idempotency-Key": string;
            };
            path?: never;
            cookie?: never;
        };
        requestBody: {
            content: {
                "application/json": {
                    /** Format: uuid */
                    organization_id: string;
                    /** Format: uuid */
                    schedule_id: string;
                    shift_ids?: string[] | null;
                    /**
                     * @default coverage
                     * @enum {string}
                     */
                    objective?: "coverage" | "cost" | "fairness";
                    constraints?: {
                        [key: string]: unknown;
                    };
                    posture?: ("recommend" | "review_and_comment" | "apply_final") | null;
                };
            };
        };
        responses: {
            /** @description Accepted. §1.5 — the reference is the runtime spine's, not a new envelope. */
            202: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["AsyncAccepted"];
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            422: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            503: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    hr_schedule_validate: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
            };
            path: {
                schedule_id: string;
            };
            cookie?: never;
        };
        requestBody: {
            content: {
                "application/json": {
                    /** Format: uuid */
                    organization_id: string;
                };
            };
        };
        responses: {
            /** @description OK */
            200: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": {
                        blocking: components["schemas"]["ScheduleConflict"][];
                        warnings: components["schemas"]["ScheduleConflict"][];
                        /** @description Aggregate only — a total over a population of one is a per-person figure and is suppressed under the same minimum-cell knob the EEO aggregate uses. */
                        projected: {
                            [key: string]: unknown;
                        };
                        prospective_snapshot_ids: string[];
                    };
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            422: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            503: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    hr_exports_formats_list: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
            };
            path?: never;
            cookie?: never;
        };
        requestBody?: never;
        responses: {
            /** @description OK */
            200: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": {
                        formats: components["schemas"]["ExportFormat"][];
                    };
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            409: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            422: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            423: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    hr_exports_payroll_preview: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
            };
            path?: never;
            cookie?: never;
        };
        requestBody: {
            content: {
                "application/json": {
                    /** Format: uuid */
                    organization_id: string;
                    /** Format: uuid */
                    pay_period_id: string;
                    export_format: string;
                    /** @default true */
                    include_adjustments?: boolean;
                    /** @default false */
                    includes_pii?: boolean;
                };
            };
        };
        responses: {
            /** @description OK */
            200: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": {
                        line_count: number;
                        /** @description Decimal string. Never a float — precision is load-bearing. */
                        total_hours: string;
                        /** @description Decimal string. Never a float — precision is load-bearing. */
                        total_amount?: string;
                        by_earning_code: {
                            earning_code: string;
                            /** @description Decimal string. Never a float — precision is load-bearing. */
                            hours: string;
                            /** @description Decimal string. Never a float — precision is load-bearing. */
                            amount?: string;
                        }[];
                        employments_included: number;
                        warnings: string[];
                        blocking: string[];
                    };
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            409: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            422: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            423: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    hr_exports_payroll_create: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
                /** @description §1.4 — required on every mutating POST. A replay with the same key returns the stored outcome verbatim plus X-Idempotency-Replayed: true; the same key with a DIFFERENT body is 409 hr_idempotency_conflict. */
                "X-Idempotency-Key": string;
            };
            path?: never;
            cookie?: never;
        };
        requestBody: {
            content: {
                "application/json": {
                    /** Format: uuid */
                    organization_id: string;
                    /** Format: uuid */
                    pay_period_id: string;
                    export_format: string;
                    /** @description Domain key, unique (organization_id, idempotency_key). Checked FIRST, inside the transaction, before the platform claim matters (§9 D-8). */
                    idempotency_key: string;
                    /** @default true */
                    include_adjustments?: boolean;
                    /** @default false */
                    includes_pii?: boolean;
                    delivery?: {
                        [key: string]: unknown;
                    };
                };
            };
        };
        responses: {
            /** @description Accepted. §1.5 — the reference is the runtime spine's, not a new envelope. */
            202: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["AsyncAccepted"];
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            409: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            422: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            423: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    hr_exports_timesheet_create: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
                /** @description §1.4 — required on every mutating POST. A replay with the same key returns the stored outcome verbatim plus X-Idempotency-Replayed: true; the same key with a DIFFERENT body is 409 hr_idempotency_conflict. */
                "X-Idempotency-Key": string;
            };
            path?: never;
            cookie?: never;
        };
        requestBody: {
            content: {
                "application/json": {
                    /** Format: uuid */
                    organization_id: string;
                    pay_period_id?: string | null;
                    employment_ids?: string[] | null;
                    from?: string | null;
                    to?: string | null;
                    /** @enum {string} */
                    format: "pdf" | "csv";
                };
            };
        };
        responses: {
            /** @description Accepted. §1.5 — the reference is the runtime spine's, not a new envelope. */
            202: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["AsyncAccepted"];
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            409: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            422: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            423: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    hr_exports_get: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
            };
            path: {
                export_id: string;
            };
            cookie?: never;
        };
        requestBody?: never;
        responses: {
            /** @description OK */
            200: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": {
                        /** Format: uuid */
                        export_id: string;
                        export_version: number;
                        export_format: string;
                        /** @enum {string} */
                        delivery_state: "generated" | "sent" | "acknowledged" | "failed" | "superseded";
                        line_count: number;
                        /** @description Decimal string. Never a float — precision is load-bearing. */
                        total_hours?: string;
                        total_amount?: string | null;
                        artifact_file_id?: string | null;
                        artifact_sha256?: string | null;
                        supersedes_export_id?: string | null;
                        acknowledgement_ref?: string | null;
                        failure_reason?: string | null;
                    };
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            409: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            422: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            423: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    hr_exports_artifact_get: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
            };
            path: {
                export_id: string;
            };
            cookie?: never;
        };
        requestBody?: never;
        responses: {
            /** @description OK */
            200: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["ExportEnvelope"];
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            409: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            422: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            423: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    hr_exports_acknowledge: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
                /** @description §1.4 — required on every mutating POST. A replay with the same key returns the stored outcome verbatim plus X-Idempotency-Replayed: true; the same key with a DIFFERENT body is 409 hr_idempotency_conflict. */
                "X-Idempotency-Key": string;
            };
            path: {
                export_id: string;
            };
            cookie?: never;
        };
        requestBody: {
            content: {
                "application/json": {
                    /** Format: uuid */
                    organization_id: string;
                    acknowledgement_ref: string;
                    acknowledged_at?: string | null;
                };
            };
        };
        responses: {
            /** @description OK */
            200: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": {
                        /** Format: uuid */
                        export_id: string;
                        delivery_state: string;
                        /** Format: date-time */
                        acknowledged_at: string;
                    };
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            409: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            422: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            423: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    hr_exports_fail: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
                /** @description §1.4 — required on every mutating POST. A replay with the same key returns the stored outcome verbatim plus X-Idempotency-Replayed: true; the same key with a DIFFERENT body is 409 hr_idempotency_conflict. */
                "X-Idempotency-Key": string;
            };
            path: {
                export_id: string;
            };
            cookie?: never;
        };
        requestBody: {
            content: {
                "application/json": {
                    /** Format: uuid */
                    organization_id: string;
                    failure_reason: string;
                };
            };
        };
        responses: {
            /** @description OK */
            200: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": {
                        /** Format: uuid */
                        export_id: string;
                        delivery_state: string;
                        failure_reason: string;
                    };
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            409: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            422: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            423: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    hr_exports_supersede: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
                /** @description §1.4 — required on every mutating POST. A replay with the same key returns the stored outcome verbatim plus X-Idempotency-Replayed: true; the same key with a DIFFERENT body is 409 hr_idempotency_conflict. */
                "X-Idempotency-Key": string;
            };
            path: {
                export_id: string;
            };
            cookie?: never;
        };
        requestBody: {
            content: {
                "application/json": {
                    /** Format: uuid */
                    organization_id: string;
                    reason: string;
                };
            };
        };
        responses: {
            /** @description Accepted. §1.5 — the reference is the runtime spine's, not a new envelope. */
            202: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["AsyncAccepted"];
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            409: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            422: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            423: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    hr_providers_bindings_list: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
            };
            path: {
                seam: string;
            };
            cookie?: never;
        };
        requestBody?: never;
        responses: {
            /** @description OK */
            200: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": {
                        bindings: components["schemas"]["ProviderBinding"][];
                    };
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            424: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            503: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    hr_providers_dispatch: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
                /** @description §1.4 — required on every mutating POST. A replay with the same key returns the stored outcome verbatim plus X-Idempotency-Replayed: true; the same key with a DIFFERENT body is 409 hr_idempotency_conflict. */
                "X-Idempotency-Key": string;
            };
            path: {
                seam: string;
            };
            cookie?: never;
        };
        requestBody: {
            content: {
                "application/json": {
                    /** Format: uuid */
                    organization_id: string;
                    seam: string;
                    subject: components["schemas"]["SubjectRef"];
                    provider_key?: string | null;
                    payload: {
                        [key: string]: unknown;
                    };
                };
            };
        };
        responses: {
            /** @description Accepted. §1.5 — the reference is the runtime spine's, not a new envelope. */
            202: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["AsyncAccepted"];
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            424: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            503: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    hr_providers_results_record: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
                /** @description §1.4 — required on every mutating POST. A replay with the same key returns the stored outcome verbatim plus X-Idempotency-Replayed: true; the same key with a DIFFERENT body is 409 hr_idempotency_conflict. */
                "X-Idempotency-Key": string;
            };
            path: {
                seam: string;
            };
            cookie?: never;
        };
        requestBody: {
            content: {
                "application/json": {
                    /** Format: uuid */
                    organization_id: string;
                    seam: string;
                    subject: components["schemas"]["SubjectRef"];
                    external_status: string;
                    external_ref?: string | null;
                    /** @enum {string} */
                    result_summary: "clear" | "consider" | "ineligible" | "incomplete";
                    artifact_file_id?: string | null;
                    /** Format: date-time */
                    occurred_at: string;
                };
            };
        };
        responses: {
            /** @description OK */
            200: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": {
                        recorded: boolean;
                        our_state: string;
                        external_status: string;
                    };
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            424: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            503: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    hr_providers_sync: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
                /** @description §1.4 — required on every mutating POST. A replay with the same key returns the stored outcome verbatim plus X-Idempotency-Replayed: true; the same key with a DIFFERENT body is 409 hr_idempotency_conflict. */
                "X-Idempotency-Key": string;
            };
            path: {
                seam: string;
            };
            cookie?: never;
        };
        requestBody: {
            content: {
                "application/json": {
                    /** Format: uuid */
                    organization_id: string;
                    seam: string;
                    binding_id?: string | null;
                    subject_ids?: string[] | null;
                };
            };
        };
        responses: {
            /** @description Accepted. §1.5 — the reference is the runtime spine's, not a new envelope. */
            202: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["AsyncAccepted"];
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            424: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            503: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    hr_hooks_provider_webhook: {
        parameters: {
            query?: never;
            header?: {
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
            };
            path: {
                seam: string;
                provider_key: string;
            };
            cookie?: never;
        };
        requestBody: {
            content: {
                "application/json": {
                    [key: string]: unknown;
                };
            };
        };
        responses: {
            /** @description OK */
            200: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": Record<string, never>;
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            424: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            503: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    hr_background_checks_request: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
                /** @description §1.4 — required on every mutating POST. A replay with the same key returns the stored outcome verbatim plus X-Idempotency-Replayed: true; the same key with a DIFFERENT body is 409 hr_idempotency_conflict. */
                "X-Idempotency-Key": string;
            };
            path: {
                check_id: string;
            };
            cookie?: never;
        };
        requestBody: {
            content: {
                "application/json": {
                    /** Format: uuid */
                    organization_id: string;
                    provider_key?: string | null;
                    package_key?: string | null;
                };
            };
        };
        responses: {
            /** @description Accepted. §1.5 — the reference is the runtime spine's, not a new envelope. */
            202: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["AsyncAccepted"];
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            409: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    hr_background_checks_adverse_action_pre: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
                /** @description §1.4 — required on every mutating POST. A replay with the same key returns the stored outcome verbatim plus X-Idempotency-Replayed: true; the same key with a DIFFERENT body is 409 hr_idempotency_conflict. */
                "X-Idempotency-Key": string;
            };
            path: {
                check_id: string;
            };
            cookie?: never;
        };
        requestBody: {
            content: {
                "application/json": {
                    /** Format: uuid */
                    organization_id: string;
                    reason_summary: string;
                };
            };
        };
        responses: {
            /** @description OK */
            200: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": {
                        /** Format: uuid */
                        check_id: string;
                        /** Format: date-time */
                        pre_adverse_sent_at: string;
                        /** Format: date-time */
                        candidate_response_deadline_at: string;
                        /** @enum {string} */
                        result_summary: "clear" | "consider" | "ineligible" | "incomplete";
                    };
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            409: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    hr_background_checks_adverse_action_final: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
                /** @description §1.4 — required on every mutating POST. A replay with the same key returns the stored outcome verbatim plus X-Idempotency-Replayed: true; the same key with a DIFFERENT body is 409 hr_idempotency_conflict. */
                "X-Idempotency-Key": string;
            };
            path: {
                check_id: string;
            };
            cookie?: never;
        };
        requestBody: {
            content: {
                "application/json": {
                    /** Format: uuid */
                    organization_id: string;
                    decision_note: string;
                };
            };
        };
        responses: {
            /** @description OK */
            200: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": {
                        /** Format: uuid */
                        check_id: string;
                        /** Format: date-time */
                        final_adverse_sent_at: string;
                        state: string;
                    };
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            409: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    hr_new_hire_reports_generate: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
                /** @description §1.4 — required on every mutating POST. A replay with the same key returns the stored outcome verbatim plus X-Idempotency-Replayed: true; the same key with a DIFFERENT body is 409 hr_idempotency_conflict. */
                "X-Idempotency-Key": string;
            };
            path?: never;
            cookie?: never;
        };
        requestBody: {
            content: {
                "application/json": {
                    /** Format: uuid */
                    organization_id: string;
                    employment_ids?: string[] | null;
                    due_before?: string | null;
                    jurisdiction_key?: string | null;
                    /** @enum {string} */
                    format: "state_portal_csv" | "fixed_width" | "pdf";
                };
            };
        };
        responses: {
            /** @description Accepted. §1.5 — the reference is the runtime spine's, not a new envelope. */
            202: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["AsyncAccepted"];
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            409: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    hr_new_hire_reports_record_submission: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
                /** @description §1.4 — required on every mutating POST. A replay with the same key returns the stored outcome verbatim plus X-Idempotency-Replayed: true; the same key with a DIFFERENT body is 409 hr_idempotency_conflict. */
                "X-Idempotency-Key": string;
            };
            path: {
                report_id: string;
            };
            cookie?: never;
        };
        requestBody: {
            content: {
                "application/json": {
                    /** Format: uuid */
                    organization_id: string;
                    submission_method: string;
                    confirmation_ref?: string | null;
                    /** Format: date-time */
                    submitted_at: string;
                    artifact_file_id?: string | null;
                    failure_reason?: string | null;
                };
            };
        };
        responses: {
            /** @description OK */
            200: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": {
                        /** Format: uuid */
                        report_id: string;
                        /** @enum {string} */
                        state: "submitted" | "acknowledged" | "failed";
                        confirmation_ref?: string | null;
                    };
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            409: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    hr_verification_letters_generate: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
                /** @description §1.4 — required on every mutating POST. A replay with the same key returns the stored outcome verbatim plus X-Idempotency-Replayed: true; the same key with a DIFFERENT body is 409 hr_idempotency_conflict. */
                "X-Idempotency-Key": string;
            };
            path: {
                letter_id: string;
            };
            cookie?: never;
        };
        requestBody: {
            content: {
                "application/json": {
                    /** Format: uuid */
                    organization_id: string;
                    /** @default false */
                    includes_compensation: boolean;
                    recipient?: string | null;
                };
            };
        };
        responses: {
            /** @description OK */
            200: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": {
                        /** Format: uuid */
                        letter_id: string;
                        /** Format: uuid */
                        artifact_file_id: string;
                        snapshot: {
                            [key: string]: unknown;
                        };
                        /** Format: date-time */
                        issued_at: string;
                    };
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            409: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    hr_i9_inspection_export: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
                /** @description §1.4 — required on every mutating POST. A replay with the same key returns the stored outcome verbatim plus X-Idempotency-Replayed: true; the same key with a DIFFERENT body is 409 hr_idempotency_conflict. */
                "X-Idempotency-Key": string;
            };
            path?: never;
            cookie?: never;
        };
        requestBody: {
            content: {
                "application/json": {
                    /** Format: uuid */
                    organization_id: string;
                    employment_ids?: string[] | null;
                    from?: string | null;
                    to?: string | null;
                };
            };
        };
        responses: {
            /** @description Accepted. §1.5 — the reference is the runtime spine's, not a new envelope. */
            202: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["AsyncAccepted"];
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            409: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    hr_identity_ssn_reveal: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
            };
            path: {
                identity_id: string;
            };
            cookie?: never;
        };
        requestBody: {
            content: {
                "application/json": {
                    /** Format: uuid */
                    organization_id: string;
                    purpose: string;
                    justification: string;
                };
            };
        };
        responses: {
            /** @description OK */
            200: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": {
                        ssn: string;
                        /** Format: date-time */
                        revealed_at: string;
                        /** Format: uuid */
                        audit_id: string;
                    };
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            429: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    hr_outsider_tokens_mint: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
                /** @description §1.4 — required on every mutating POST. A replay with the same key returns the stored outcome verbatim plus X-Idempotency-Replayed: true; the same key with a DIFFERENT body is 409 hr_idempotency_conflict. */
                "X-Idempotency-Key": string;
            };
            path?: never;
            cookie?: never;
        };
        requestBody: {
            content: {
                "application/json": {
                    /** Format: uuid */
                    organization_id: string;
                    /** @enum {string} */
                    purpose: "signature" | "application" | "preboarding" | "records_request" | "candidate_portal" | "referee";
                    subject: components["schemas"]["SubjectRef"];
                    identity_hint: string;
                    expires_in_days?: number | null;
                    max_uses?: number | null;
                    requires_second_factor?: boolean | null;
                };
            };
        };
        responses: {
            /** @description OK */
            200: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": {
                        /** Format: uuid */
                        token_id: string;
                        /** @description Returned exactly once. Travels in the URL FRAGMENT, never the query string. */
                        secret: string;
                        /** Format: date-time */
                        expires_at: string;
                        max_uses: number;
                        verification_factor: string;
                    };
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            429: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    hr_careers_openings_list: {
        parameters: {
            query?: never;
            header?: {
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
            };
            path: {
                org_slug: string;
            };
            cookie?: never;
        };
        requestBody?: never;
        responses: {
            /** @description OK */
            200: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": {
                        organization: {
                            slug: string;
                            display_name: string;
                        };
                        openings: {
                            /** Format: uuid */
                            posting_id: string;
                            title: string;
                            location?: string | null;
                            employment_type?: string | null;
                            compensation_range?: string | null;
                            /** Format: date-time */
                            posted_at: string;
                            apply_url: string;
                        }[];
                    };
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            404: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            429: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    hr_careers_opening_get: {
        parameters: {
            query?: never;
            header?: {
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
            };
            path: {
                org_slug: string;
                posting_id: string;
            };
            cookie?: never;
        };
        requestBody?: never;
        responses: {
            /** @description OK */
            200: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": {
                        /** Format: uuid */
                        posting_id: string;
                        title: string;
                        location?: string | null;
                        employment_type?: string | null;
                        description: string;
                        compensation_range?: string | null;
                        /** Format: date-time */
                        posted_at: string;
                        apply_url: string;
                    };
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            404: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            429: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    hr_careers_widget_bootstrap: {
        parameters: {
            query?: never;
            header?: {
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
            };
            path?: never;
            cookie?: never;
        };
        requestBody?: never;
        responses: {
            /** @description OK */
            200: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": {
                        organization: {
                            [key: string]: unknown;
                        };
                        branding: {
                            [key: string]: unknown;
                        };
                        openings: {
                            [key: string]: unknown;
                        }[];
                        apply_mode: string;
                        locale: string;
                        csp_nonce: string;
                    };
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            404: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            429: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    hr_careers_application_create: {
        parameters: {
            query?: never;
            header?: {
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
            };
            path: {
                org_slug: string;
            };
            cookie?: never;
        };
        requestBody: {
            content: {
                "application/json": {
                    /** Format: uuid */
                    posting_id: string;
                    full_name: string;
                    email: string;
                    phone?: string | null;
                    resume_upload_ticket?: string | null;
                    answers?: {
                        [key: string]: unknown;
                    };
                };
            };
        };
        responses: {
            /** @description OK */
            200: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": {
                        /** Format: uuid */
                        application_id: string;
                        candidate_portal_url: string;
                    };
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            404: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            429: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    esign_envelopes_create: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
                /** @description §1.4 — required on every mutating POST. A replay with the same key returns the stored outcome verbatim plus X-Idempotency-Replayed: true; the same key with a DIFFERENT body is 409 hr_idempotency_conflict. */
                "X-Idempotency-Key": string;
            };
            path?: never;
            cookie?: never;
        };
        requestBody: {
            content: {
                "application/json": {
                    /** Format: uuid */
                    organization_id: string;
                    envelope_type: string;
                    subject: string;
                    documents: {
                        [key: string]: unknown;
                    }[];
                    signers: {
                        [key: string]: unknown;
                    }[];
                    expires_in_days?: number | null;
                };
            };
        };
        responses: {
            /** @description OK */
            200: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["EsignEnvelope"];
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            404: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            409: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    esign_envelopes_send: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
                /** @description §1.4 — required on every mutating POST. A replay with the same key returns the stored outcome verbatim plus X-Idempotency-Replayed: true; the same key with a DIFFERENT body is 409 hr_idempotency_conflict. */
                "X-Idempotency-Key": string;
            };
            path: {
                envelope_id: string;
            };
            cookie?: never;
        };
        requestBody: {
            content: {
                "application/json": {
                    /** Format: uuid */
                    organization_id: string;
                };
            };
        };
        responses: {
            /** @description OK */
            200: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["EsignEnvelope"];
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            404: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            409: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    esign_envelopes_void: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
                /** @description §1.4 — required on every mutating POST. A replay with the same key returns the stored outcome verbatim plus X-Idempotency-Replayed: true; the same key with a DIFFERENT body is 409 hr_idempotency_conflict. */
                "X-Idempotency-Key": string;
            };
            path: {
                envelope_id: string;
            };
            cookie?: never;
        };
        requestBody: {
            content: {
                "application/json": {
                    /** Format: uuid */
                    organization_id: string;
                    reason: string;
                };
            };
        };
        responses: {
            /** @description OK */
            200: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["EsignEnvelope"];
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            404: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            409: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    esign_envelopes_remind: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
                /** @description §1.4 — required on every mutating POST. A replay with the same key returns the stored outcome verbatim plus X-Idempotency-Replayed: true; the same key with a DIFFERENT body is 409 hr_idempotency_conflict. */
                "X-Idempotency-Key": string;
            };
            path: {
                envelope_id: string;
            };
            cookie?: never;
        };
        requestBody: {
            content: {
                "application/json": {
                    /** Format: uuid */
                    organization_id: string;
                    signer_ids?: string[] | null;
                };
            };
        };
        responses: {
            /** @description OK */
            200: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": {
                        /** Format: uuid */
                        envelope_id: string;
                        reminded: string[];
                    };
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            404: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            409: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    esign_envelopes_signer_resend: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
                /** @description §1.4 — required on every mutating POST. A replay with the same key returns the stored outcome verbatim plus X-Idempotency-Replayed: true; the same key with a DIFFERENT body is 409 hr_idempotency_conflict. */
                "X-Idempotency-Key": string;
            };
            path: {
                envelope_id: string;
                signer_id: string;
            };
            cookie?: never;
        };
        requestBody: {
            content: {
                "application/json": {
                    /** Format: uuid */
                    organization_id: string;
                    email?: string | null;
                };
            };
        };
        responses: {
            /** @description OK */
            200: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": {
                        /** Format: uuid */
                        envelope_id: string;
                        /** Format: uuid */
                        signer_id: string;
                        /** Format: date-time */
                        resent_at: string;
                    };
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            404: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            409: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    esign_envelopes_get: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
            };
            path: {
                envelope_id: string;
            };
            cookie?: never;
        };
        requestBody?: never;
        responses: {
            /** @description OK */
            200: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["EsignEnvelope"];
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            404: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            409: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    esign_envelopes_events_list: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
            };
            path: {
                envelope_id: string;
            };
            cookie?: never;
        };
        requestBody?: never;
        responses: {
            /** @description OK */
            200: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": {
                        /** Format: uuid */
                        envelope_id: string;
                        events: {
                            /** Format: uuid */
                            event_id: string;
                            event_type: string;
                            /** Format: date-time */
                            occurred_at: string;
                            /** @enum {string} */
                            actor_kind: "user" | "token" | "system";
                            actor_ref?: string | null;
                            detail?: {
                                [key: string]: unknown;
                            };
                        }[];
                    };
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            404: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            409: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    esign_envelopes_certificate_get: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
            };
            path: {
                envelope_id: string;
            };
            cookie?: never;
        };
        requestBody?: never;
        responses: {
            /** @description OK */
            200: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": {
                        /** Format: uuid */
                        envelope_id: string;
                        payload: {
                            [key: string]: unknown;
                        };
                        signature: string;
                        public_key_id: string;
                        rendered_file_id?: string | null;
                    };
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            404: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            409: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    esign_envelopes_verify: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
            };
            path: {
                envelope_id: string;
            };
            cookie?: never;
        };
        requestBody: {
            content: {
                "application/json": {
                    /** Format: uuid */
                    organization_id: string;
                };
            };
        };
        responses: {
            /** @description OK */
            200: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": {
                        /** Format: uuid */
                        envelope_id: string;
                        verified: boolean;
                        mismatches: {
                            kind: string;
                            target_id?: string | null;
                            expected_sha256: string;
                            observed_sha256: string;
                        }[];
                        /** Format: date-time */
                        verified_at: string;
                    };
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            404: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            409: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    esign_campaigns_create: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
                /** @description §1.4 — required on every mutating POST. A replay with the same key returns the stored outcome verbatim plus X-Idempotency-Replayed: true; the same key with a DIFFERENT body is 409 hr_idempotency_conflict. */
                "X-Idempotency-Key": string;
            };
            path?: never;
            cookie?: never;
        };
        requestBody: {
            content: {
                "application/json": {
                    /** Format: uuid */
                    organization_id: string;
                    name: string;
                    envelope_type: string;
                    documents: {
                        [key: string]: unknown;
                    }[];
                    member_employment_ids: string[];
                };
            };
        };
        responses: {
            /** @description OK */
            200: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": {
                        /** Format: uuid */
                        campaign_id: string;
                        member_count: number;
                        state: string;
                    };
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            404: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            409: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    esign_campaigns_send: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
                /** @description §1.4 — required on every mutating POST. A replay with the same key returns the stored outcome verbatim plus X-Idempotency-Replayed: true; the same key with a DIFFERENT body is 409 hr_idempotency_conflict. */
                "X-Idempotency-Key": string;
            };
            path: {
                campaign_id: string;
            };
            cookie?: never;
        };
        requestBody: {
            content: {
                "application/json": {
                    /** Format: uuid */
                    organization_id: string;
                    batch_size?: number | null;
                };
            };
        };
        responses: {
            /** @description OK */
            200: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": {
                        /** Format: uuid */
                        campaign_id: string;
                        sent: number;
                        skipped: number;
                        failed: {
                            /** Format: uuid */
                            member_id: string;
                            reason: string;
                        }[];
                    };
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            404: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            409: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    esign_campaigns_progress_get: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
            };
            path: {
                campaign_id: string;
            };
            cookie?: never;
        };
        requestBody?: never;
        responses: {
            /** @description OK */
            200: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": {
                        /** Format: uuid */
                        campaign_id: string;
                        total: number;
                        signed: number;
                        outstanding: number;
                        declined: number;
                        state: string;
                        outstanding_members: {
                            /** Format: uuid */
                            member_id: string;
                            full_name: string;
                            state: string;
                        }[];
                    };
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            404: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            409: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
    esign_campaigns_export_get: {
        parameters: {
            query?: never;
            header: {
                /** @description §1.2 — required on every /hr/* and /esign/* call. A disagreement with the resolved context is 409 organization_context_mismatch. ADMINS GET THE SAME REQUIREMENT; admin is never an org-less bypass. */
                "X-Organization-Id": string;
                /** @description Client-generated; must be a valid UUID or the server mints one. */
                "X-Request-Id"?: string;
            };
            path: {
                campaign_id: string;
            };
            cookie?: never;
        };
        requestBody?: never;
        responses: {
            /** @description OK */
            200: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["ExportEnvelope"];
                };
            };
            /** @description §1.3 error envelope. */
            400: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            401: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            403: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            404: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 error envelope. */
            409: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
            /** @description §1.3 — unhandled. Never 502/504: wire_status() rewrites them to 500 and preserves details.intended_status, because Cloudflare discards an origin 502/504 and destroys both CORS and the body. */
            500: {
                headers: {
                    [name: string]: unknown;
                };
                content: {
                    "application/json": components["schemas"]["HrError"];
                };
            };
        };
    };
}

export type { $defs, components, operations, paths, webhooks };