@learnorama/mozaik-sdk 0.1.0

package/dist/index-wL_20vR8.d.ts

@@ -0,0 +1,4566 @@
+
+//#region src/models/product.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * Which of the three platforms a functional grant applies to.
+ *
+ * One API serves three products, and a tenant can offer more than one of them
+ * — a library with a Prof Express contract is one organisation whose patrons
+ * borrow books *and* whose pupils ask questions (the legacy says so itself
+ * with ``students.library`` and ``inquiries.for_librarian``). So the product is
+ * its own axis rather than something ``tenant_id`` implies.
+ *
+ * Not :class:`LegacySource`, which looks similar and means something else:
+ * that records where a migrated row *came from* and is null for anything
+ * created since. This says what a grant is *for*.
+ */
+type Product = typeof Product[keyof typeof Product];
+declare const Product: {
+  readonly biblio: 'biblio';
+  readonly mediatheques: 'mediatheques';
+  readonly prof_express: 'prof_express';
+};
+//#endregion
+//#region src/models/productRole.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * What kind of participant somebody is, in one product at one tenant.
+ *
+ * The vocabulary is **per product**, which is the point: Prof Express has
+ * pupils and teachers, and biblio has no such thing. A product that needs no
+ * functional roles simply has no rows — nothing forces a shared vocabulary,
+ * and adding a role to one product is an ``INSERT`` rather than a Keycloak
+ * change or a migration.
+ *
+ * Deliberately *not* Keycloak realm roles. The broker knows whether somebody
+ * is an end user or internal staff (:class:`RoleKind`); it does not know that
+ * user 42 teaches at works-council 3. Keeping these out of the realm keeps
+ * Keycloak off the write path for grants, and avoids the realm-and-enum
+ * lockstep that has already broken once.
+ *
+ * Valid pairings are declared in :data:`PRODUCT_ROLES` rather than as a CHECK
+ * constraint: the set will change as the products do, and a migration per
+ * product decision is a tax with no payer.
+ *
+ * Pupil and parent are explicit rather than derived from ``User.parent_id``.
+ * Deriving them is too clever — a parent who has not added a child yet is
+ * indistinguishable from a pupil — and the legacy makes the same distinction
+ * with its ``role:student`` / ``role:parent`` middleware.
+ */
+type ProductRole = typeof ProductRole[keyof typeof ProductRole];
+declare const ProductRole: {
+  readonly student: 'student';
+  readonly parent: 'parent';
+  readonly teacher: 'teacher';
+  readonly dispatcher: 'dispatcher';
+  readonly coach: 'coach';
+  readonly librarian: 'librarian';
+  readonly support: 'support';
+};
+//#endregion
+//#region src/models/productRoleRead.d.ts
+/**
+ * One functional grant: what this account is, where, in which product.
+ *
+ * The frontend's answer to "am I a pupil, a parent or a teacher" — which is
+ * not in the token and deliberately so, because a Keycloak realm role says
+ * nothing about which tenant or which product it applies to. See
+ * :class:`app.models.enums.ProductRole`.
+ */
+interface ProductRoleRead {
+  product: Product;
+  role: ProductRole;
+  tenantId: number;
+}
+//#endregion
+//#region src/models/accountDetailRead.d.ts
+/**
+ * The authenticated account in full (E15, ``GET /me``).
+ *
+ * Distinct from :class:`app.datamodels.auth.AccountRead`, which is the short
+ * summary embedded in a login response. This is the account *resource*.
+ *
+ * The shape follows ``app.models.identity.User`` rather than the spec's field
+ * list, because the spec was describing the legacy wire format and three of its
+ * fields have no column behind them any more:
+ *
+ * ``clientId`` is ``tenant_id`` here — the tenant *is* the customer company, and
+ * calling the same thing two names across one API is how the legacy ended up
+ * with ``/profile/{id}`` beside ``/profiles``.
+ *
+ * ``contactPrefs`` was an integer bitmask; the model carries two explicit
+ * booleans instead, which is what the code actually branched on.
+ *
+ * ``productRoles`` is new rather than ported: it is how a client knows which
+ * interface to render. The legacy asks Keycloak — its mobile API gates on
+ * ``role:student`` and ``role:parent`` middleware reading realm roles — which
+ * cannot express "a teacher at this council and a patron at that library".
+ *
+ * ``isCE`` is not here. It asked whether the account belongs to a works
+ * council, which is a property of the *tenant*, not the user — read it from the
+ * tenant rather than denormalising it onto every account response.
+ *
+ * ``avatar`` is a string, matching the column. See
+ * :class:`app.datamodels.biblio.profiles.ProfileRead` for the same call.
+ */
+interface AccountDetailRead {
+  acceptsContact?: boolean | null;
+  acceptsPartnerContact?: boolean | null;
+  avatar?: string | null;
+  birthDate?: string | null;
+  email?: string | null;
+  firstName: string;
+  isAccountHolder: boolean;
+  isActive: boolean;
+  isGeneric: boolean;
+  isGuest: boolean;
+  isPendingActivation: boolean;
+  lastLoginAt?: string | null;
+  lastName?: string | null;
+  login: string;
+  memberNumber?: string | null;
+  parentId?: number | null;
+  productRoles?: ProductRoleRead[];
+  tenantId: number;
+  userId: number;
+}
+//#endregion
+//#region src/models/accountRead.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * The local ``app_user`` row the session resolved to.
+ *
+ * Distinct from ``biblio.account.AccountRead``, which is the full patron profile
+ * the product API returns. This is the identity-layer summary: enough to render
+ * a name and to confirm the link happened, and nothing that would make it worth
+ * caching.
+ */
+interface AccountRead {
+  email?: string | null;
+  firstName: string;
+  id: number;
+  isActive: boolean;
+  lastLoginAt?: string | null;
+  lastName?: string | null;
+  login: string;
+  tenantId: number;
+}
+//#endregion
+//#region src/models/accountUpdateWrite.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * Partial update of the authenticated account (E16, ``PATCH /me``).
+ *
+ * Every field optional — that is the point of the verb. The legacy
+ * ``POST /account/edit`` required ``firstName`` and ``email`` on every call with
+ * no presence check, so omitting one produced a PHP warning rather than a
+ * ``400``.
+ *
+ * **``email`` is deliberately absent.** It arrives from the identity provider and
+ * is re-synced on every federated login, so a local edit would be silently
+ * reverted the next time the member signs in — and email is an identity key, not
+ * a preference. Changing it is a change at the provider.
+ *
+ * The response is a full :class:`AccountDetailRead` built from the *persisted*
+ * row. Do not echo the submitted values: the legacy did, and silently dropped
+ * the contact fields from what it echoed.
+ */
+interface AccountUpdateWrite {
+  acceptsContact?: boolean | null;
+  acceptsPartnerContact?: boolean | null;
+  avatar?: string | null;
+  birthDate?: string | null;
+  firstName?: string | null;
+  lastName?: string | null;
+}
+//#endregion
+//#region src/models/aiDraftRead.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * A model's first pass, as the reviewing practitioner sees it.
+ *
+ * ``answer`` is shown beside the pupil's statement, not in place of it. The
+ * draft is a starting point a person edits; the schema's ``vote`` and
+ * ``escalatedAt`` exist because nothing here is sendable as it stands.
+ *
+ * ``model`` and ``promptRef`` are on the wire deliberately. A reviewer who can
+ * see that two bad drafts came from the same prompt version can say so, and
+ * the pair is also what makes one generation accountable afterwards.
+ */
+interface AiDraftRead {
+  answer: string;
+  createdAt: string;
+  escalatedAt?: string | null;
+  id: number;
+  model: string;
+  promptRef?: string | null;
+  requestId: number;
+  reviewedById?: number | null;
+  vote?: number | null;
+}
+//#endregion
+//#region src/models/aiDraftReviewWrite.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * A practitioner's verdict on a draft.
+ *
+ * ``escalate`` is not derived from a low ``vote``. A reviewer may rate a draft
+ * poorly and still keep it as a starting point, or rate it well and hand the
+ * request to a person anyway because the pupil needs a conversation. Making
+ * one imply the other would record a decision nobody made.
+ */
+interface AiDraftReviewWrite {
+  escalate?: boolean;
+  /**
+   * @minimum 1
+   * @maximum 5
+   */
+  vote: number;
+}
+//#endregion
+//#region src/models/attachmentRole.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * Which side of the exchange a file belongs to.
+ *
+ * The legacy carries three ``text NOT NULL`` columns — ``documents``,
+ * ``drawings``, ``answer_documents`` — each holding a serialised list of paths,
+ * so a file has no size, no type, no uploader and no timestamp, and an empty
+ * list is the string ``''``. One row per file, with a role, replaces all three.
+ */
+type AttachmentRole = typeof AttachmentRole[keyof typeof AttachmentRole];
+declare const AttachmentRole: {
+  readonly question: 'question';
+  readonly sketch: 'sketch';
+  readonly answer: 'answer';
+};
+//#endregion
+//#region src/models/authorizationParams.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+type AuthorizationParams = {
+  /**
+   * @maxLength 2048
+   */
+  redirect_uri: string;
+  /**
+   * @minLength 43
+   * @maxLength 128
+   */
+  code_challenge: string;
+  /**
+   * @minLength 8
+   * @maxLength 512
+   */
+  state: string;
+  nonce?: string | null;
+  provider?: string | null;
+  prompt?: string | null;
+};
+//#endregion
+//#region src/models/authorizationRead.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * Where to send the browser to start a login.
+ *
+ * The URL is assembled server-side because choosing the identity provider is a
+ * *data* decision — host to tenant to partner — and the client has no business
+ * knowing the partner list. The client still owns PKCE: it generated the
+ * verifier, it keeps the verifier, and it sends only the challenge.
+ *
+ * ``provider`` echoes the alias that was resolved so a client can log or
+ * display it; when it is null, Keycloak will authenticate the user itself with
+ * a local credential.
+ */
+interface AuthorizationRead {
+  authorizationUrl: string;
+  provider?: string | null;
+}
+//#endregion
+//#region src/models/bodyUploadAttachment.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+interface BodyUploadAttachment {
+  file: Blob;
+}
+//#endregion
+//#region src/models/entitlementAct.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * What a grant permits somebody to *do* with a work.
+ *
+ * Recovered from ``mediadb.exemp``, which flattens a 4x7 matrix into 48
+ * columns: four acts — ``is_streaming``, ``is_download``, ``is_pret_streaming``,
+ * ``is_pret_download`` — each repeating the same seven limits (allowed, units
+ * granted, units left, max duration, duration unit, device cap, concurrent-user
+ * cap), plus ``is_extend`` / ``nb_extend`` on the side.
+ *
+ * That matrix is the whole reason this enum exists. Four acts x seven limits as
+ * columns means a fifth act costs a migration and seven more columns; as rows it
+ * costs an INSERT. ``jetons.consulterpret`` draws the same consult/loan line at
+ * the patron tier, which is corroboration rather than a second vocabulary.
+ *
+ * Biblio has no equivalent: its grant is boolean and maps to ``VIEW`` alone.
+ */
+type EntitlementAct = typeof EntitlementAct[keyof typeof EntitlementAct];
+declare const EntitlementAct: {
+  readonly view: 'view';
+  readonly download: 'download';
+  readonly loan_view: 'loan_view';
+  readonly loan_download: 'loan_download';
+  readonly extend: 'extend';
+  readonly tutor: 'tutor';
+};
+//#endregion
+//#region src/models/borrowWrite.d.ts
+/**
+ * Take a loan out.
+ *
+ * ``act`` chooses between borrowing to consume in place and borrowing with a
+ * copy taken away — the legacy's ``pret_streaming`` and ``pret_download``. They
+ * are separate acts with separate quotas on the grant, so the client has to say
+ * which.
+ *
+ * ``request_key`` makes the borrow idempotent. A client that retries after a
+ * timeout must not end up holding two copies of the same title.
+ */
+interface BorrowWrite {
+  act?: EntitlementAct;
+  deviceId?: string | null;
+  requestKey?: string | null;
+  /** @minimum 1 */
+  workId: number;
+}
+//#endregion
+//#region src/models/contentType.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * Denormalised onto ``content`` from the kind of its categories.
+ *
+ * MUSIC is not in the source spec but is required for the derivation to be
+ * total — CategoryKind has it, so a content row can reach it.
+ */
+type ContentType = typeof ContentType[keyof typeof ContentType];
+declare const ContentType: {
+  readonly course: 'course';
+  readonly press_issue: 'press_issue';
+  readonly book: 'book';
+  readonly music: 'music';
+  readonly service: 'service';
+};
+//#endregion
+//#region src/models/contentSummaryRead.d.ts
+/**
+ * The ``<content summary>`` the spec references from seven endpoints.
+ *
+ * PROVISIONAL. ``contentId``, ``title`` and ``type`` are certain — they are
+ * named in E34, which is the same entity in full. The rest are drawn from
+ * ``app.models.biblio.catalogue.Content`` and are the fields a card needs to
+ * render. Pin this against a real client before treating it as closed: it is
+ * the most reused shape in the API, so widening it later is cheap and narrowing
+ * it is not.
+ */
+interface ContentSummaryRead {
+  contentId: number;
+  durationLabel?: string | null;
+  level?: string | null;
+  publishedAt?: string | null;
+  ratingAverage?: string | null;
+  teaser?: string | null;
+  title: string;
+  type: ContentType;
+}
+//#endregion
+//#region src/models/pageMeta.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * The ``meta`` block on a paginated collection (spec §2.1).
+ *
+ * Present only on paginated collections. A collection that is inherently
+ * bounded — the caller's own profiles, their services, a pack's catalogs —
+ * returns a bare ``{"data": [...]}`` with no ``meta`` at all.
+ */
+interface PageMeta {
+  limit: number;
+  page: number;
+  total: number;
+  totalPages: number;
+}
+//#endregion
+//#region src/models/themeRefRead.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * A theme inside a catalog, as listed by E39. PROVISIONAL.
+ */
+interface ThemeRefRead {
+  themeId: number;
+  title: string;
+}
+//#endregion
+//#region src/models/catalogRead.d.ts
+/**
+ * A pack catalog, or one theme within it (E39, E40).
+ *
+ * E40 returns this same shape scoped to a theme.
+ */
+interface CatalogRead {
+  catalogId: number;
+  data?: ContentSummaryRead[];
+  meta: PageMeta;
+  themes?: ThemeRefRead[];
+  title: string;
+}
+//#endregion
+//#region src/models/catalogRefRead.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * A catalog inside a pack, as listed by E38.
+ */
+interface CatalogRefRead {
+  catalogId: number;
+  itemCount: number;
+  title: string;
+}
+//#endregion
+//#region src/models/categoryRead.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * A favourite category (E26 item). PROVISIONAL, as :class:`PackRead`.
+ */
+interface CategoryRead {
+  categoryId: number;
+  title: string;
+}
+//#endregion
+//#region src/models/categoryListRead.d.ts
+/**
+ * The caller's favourite categories (E26). Unpaginated.
+ */
+interface CategoryListRead {
+  data: CategoryRead[];
+}
+//#endregion
+//#region src/models/categoryPreferencesWrite.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * Replace the favourite-category set wholesale (E29).
+ *
+ * ``PUT``, not ``POST``, because the legacy handler already replaced the whole
+ * set rather than merging — the verb now says so. An empty array clears the
+ * set and is valid input, not a validation failure.
+ *
+ * Unknown or non-entitled category ids are ``422`` with the offending ids in
+ * ``details``. In the legacy this path was uncaught and returned ``500``.
+ */
+interface CategoryPreferencesWrite {
+  /** @maxItems 500 */
+  categories: number[];
+}
+//#endregion
+//#region src/models/chatTicketRead.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * A single-use credential for opening one socket.
+ *
+ * Spend it immediately: it is valid for ``expiresIn`` seconds and works once.
+ *
+ * .. code-block:: js
+ *
+ *     const { ticket } = await (await fetch(base + "/chat/ticket",
+ *         { method: "POST", headers: { Authorization: "Bearer " + token } })).json();
+ *     const ws = new WebSocket(`${wsBase}/chat?ticket=${ticket}`);
+ */
+interface ChatTicketRead {
+  expiresIn: number;
+  ticket: string;
+}
+//#endregion
+//#region src/models/chromecastRead.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * Cast-target playback parameters — ``Entity/Chromecast.php``.
+ *
+ * Overlaps :class:`DrmRead` on ``mode``, ``token``, ``licenses``, ``kid`` and
+ * ``widevine``; the difference is that this one carries a resolvable ``url`` and
+ * a ``duration``, because the receiver plays it directly.
+ */
+interface ChromecastRead {
+  duration?: number | null;
+  kid?: string | null;
+  licenses?: string[];
+  mode?: string | null;
+  subtitles?: string[];
+  token?: string | null;
+  tracks?: string[];
+  url?: string | null;
+  widevine?: string | null;
+}
+//#endregion
+//#region src/models/codeExchangeWrite.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * Complete a login started at :class:`AuthorizationRead`.
+ *
+ * ``redirect_uri`` must match the one the authorization request carried, and is
+ * validated against ``AUTH_ALLOWED_REDIRECT_ORIGINS`` as well as by Keycloak.
+ * Two gates rather than one because an open redirect on the login callback is
+ * how a stolen code leaves the building — the legacy carried an unvalidated
+ * ``RelayState`` for exactly this shape of bug.
+ *
+ * ``state`` is the client's to generate and the client's to check. It is
+ * accepted here only so that it can be echoed back; this endpoint cannot verify
+ * it, and pretending otherwise would be worse than not asking.
+ */
+interface CodeExchangeWrite {
+  /**
+   * @minLength 1
+   * @maxLength 4096
+   */
+  code: string;
+  /**
+   * @minLength 43
+   * @maxLength 128
+   */
+  codeVerifier: string;
+  /**
+   * @minLength 1
+   * @maxLength 2048
+   */
+  redirectUri: string;
+  state?: string | null;
+}
+//#endregion
+//#region src/models/consumptionCloseReason.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * Why a consumption lease stopped. Legacy ``sessions.cloture``.
+ *
+ * The legacy's single letters, decoded from the procedures that write them:
+ * ``u`` is ``ouvreSessionCours2`` closing the previous session because the
+ * reader opened something else, ``a`` is ``FermeSessionAdherent`` — staff
+ * force-closing from the CE admin — and ``s`` is ``reset_sessions`` reaping a
+ * lease left open more than 180 minutes.
+ *
+ * ``n`` is not here: it means *open*, which this column expresses by being
+ * NULL. A closed-reason enum with an "isn't closed" member is how you get code
+ * that checks the wrong one of two things.
+ */
+type ConsumptionCloseReason = typeof ConsumptionCloseReason[keyof typeof ConsumptionCloseReason];
+declare const ConsumptionCloseReason: {
+  readonly completed: 'completed';
+  readonly superseded: 'superseded';
+  readonly staff: 'staff';
+  readonly expired: 'expired';
+  readonly failed: 'failed';
+};
+//#endregion
+//#region src/models/contentPage.d.ts
+/**
+ * A paginated run of content summaries.
+ *
+ * Used wherever a collection of content is returned with pagination — E39, E40
+ * and the ``content`` block of E45.
+ */
+interface ContentPage {
+  data: ContentSummaryRead[];
+  meta: PageMeta;
+}
+//#endregion
+//#region src/models/contentRead.d.ts
+/**
+ * One content item with the caller's own state on it (E34).
+ *
+ * PROVISIONAL beyond the named fields. ``liked``, ``like_count`` and
+ * ``favorited`` are the per-caller state the spec requires and are the reason
+ * this is not simply :class:`ContentSummaryRead` — they cannot be cached across
+ * users.
+ */
+interface ContentRead {
+  contentId: number;
+  description?: string | null;
+  durationLabel?: string | null;
+  favorited: boolean;
+  learningOutcomes?: string | null;
+  level?: string | null;
+  likeCount: number;
+  liked: boolean;
+  prerequisites?: string | null;
+  publishedAt?: string | null;
+  ratingAverage?: string | null;
+  summary?: string | null;
+  teaser?: string | null;
+  title: string;
+  type: ContentType;
+}
+//#endregion
+//#region src/models/credentialsWrite.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * Username and password, for the direct grant.
+ *
+ * Present because native clients in the field send it, not because it is the
+ * intended path — it bypasses MFA, brokering and account linking, and the
+ * password crosses this process. Refused unless
+ * ``AUTH_ALLOW_PASSWORD_GRANT`` is on.
+ */
+interface CredentialsWrite {
+  /**
+   * @minLength 1
+   * @maxLength 1024
+   */
+  password: string;
+  /**
+   * @minLength 1
+   * @maxLength 255
+   */
+  username: string;
+}
+//#endregion
+//#region src/models/currentReadingRead.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * One entry of the partner's own "continue reading" list.
+ *
+ * Joined back to :class:`~app.models.partner.catalogue.PartnerMedia` on the
+ * partner's product id, so the client gets our media id and can link to our
+ * detail route. An entry the partner knows and our catalogue does not is
+ * dropped — the import runs nightly and the partner's list is live, so a title
+ * added today is genuinely not browsable here yet.
+ */
+interface CurrentReadingRead {
+  coverImage?: string | null;
+  mediaId: number;
+  percentage?: number | null;
+  slug: string;
+  title: string;
+}
+//#endregion
+//#region src/models/currentReadingListRead.d.ts
+/**
+ * The partner's ongoing list for this reader.
+ */
+interface CurrentReadingListRead {
+  data: CurrentReadingRead[];
+}
+//#endregion
+//#region src/models/demoUserRead.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * The demonstration account (E57). ``201`` when created, ``200`` when it existed.
+ *
+ * The account must not be directly loginable with a guessable secret. The legacy
+ * derived its password from the establishment id alone (``Etab{id padded to 3}$``)
+ * with a predictable address (``etab_{id}@ta.com``), then redirected into the
+ * impersonation route (defect D15). Either generate a random password that is
+ * never returned and reach the account only through E56, or flag these accounts
+ * as demo-only and non-loginable.
+ *
+ * Note what is absent: no password field. Whatever the answer, it is not
+ * "return the credential".
+ */
+interface DemoUserRead {
+  email: string;
+  userId: number;
+}
+//#endregion
+//#region src/models/demoUserWrite.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * Create or fetch a demonstration account for an establishment (E57).
+ */
+interface DemoUserWrite {
+  /** @minimum 1 */
+  establishmentId: number;
+}
+//#endregion
+//#region src/models/documentInformationRead.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * A labelled metadata row shown on the document sheet.
+ *
+ * Legacy ``Entity/DocumentInformation.php``. Note the mismatch it carries:
+ * ``lineBreak``, ``html`` and ``avis`` are documented ``@var boolean`` but
+ * annotated ``@Serializer\Type("integer")``, so they cross the wire as
+ * integers. Kept as integers — the annotation is what the clients actually
+ * parse.
+ */
+interface DocumentInformationRead {
+  html?: number | null;
+  key: string;
+  lineBreak?: number | null;
+  order?: number | null;
+  review?: number | null;
+  value?: string | null;
+}
+//#endregion
+//#region src/models/documentLinkRead.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * An action the client may invoke on a document — ``Entity/DocumentLink.php``.
+ *
+ * The legacy uses this to tell the app which calls are available for this
+ * document and how to make them (``service`` + ``method`` + ``action``), which
+ * is a crude form of hypermedia. Worth keeping: it is what lets the server turn
+ * a capability off without an app release.
+ */
+interface DocumentLinkRead {
+  action?: string | null;
+  didDelete?: boolean | null;
+  label?: string | null;
+  method?: string | null;
+  service?: string | null;
+}
+//#endregion
+//#region src/models/pillar.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * A content vertical. The single most load-bearing decoder in the schema.
+ *
+ * Recovered from ``Services/V3/MenuService.php:1055`` and corroborated by
+ * ``v1/config.inc.php:651``::
+ *
+ *     1 => musique  2 => cinema  3 => savoirs
+ *     4 => livres   5 => presse  6 => jeux    7 => inclusion
+ *
+ * It decodes every numbered ``droit*`` (tenant offers this pillar),
+ * ``docsforfait*`` / ``nbdocs_forfait*`` (per-pillar document quota), and every
+ * ``pilier`` column on works, themes and the consumption log.
+ *
+ * Note the asymmetry, which is real and worth preserving: the numbered columns
+ * stop at 6, but ``pilier`` reaches 7 — inclusion was added to the product after
+ * the numbered-column pattern was already set in the schema.
+ */
+type Pillar = typeof Pillar[keyof typeof Pillar];
+declare const Pillar: {
+  readonly music: 'music';
+  readonly film: 'film';
+  readonly learning: 'learning';
+  readonly books: 'books';
+  readonly press: 'press';
+  readonly games: 'games';
+  readonly inclusion: 'inclusion';
+};
+//#endregion
+//#region src/models/documentSummaryRead.d.ts
+/**
+ * A document as it appears in a list, carousel or search result.
+ *
+ * The legacy has no summary shape — every listing serialises the full
+ * :class:`DocumentRead` with a JMS group filter. This is that projection made
+ * explicit, so a catalogue page stops shipping licence and extension state for
+ * every tile.
+ */
+interface DocumentSummaryRead {
+  artist?: string | null;
+  id: number;
+  parentalControl?: boolean;
+  photoHd?: string | null;
+  photoSd?: string | null;
+  pillar?: Pillar | null;
+  rating?: number | null;
+  subTitle?: string | null;
+  title: string;
+  year?: number | null;
+}
+//#endregion
+//#region src/models/documentPage.d.ts
+/**
+ * A paginated run of documents.
+ *
+ * The legacy paginates with a ``page`` parameter and a per-menu
+ * ``maxNumberPerPage``, and returns no total anywhere. ``meta`` supplies what
+ * the apps currently have to guess.
+ */
+interface DocumentPage {
+  data: DocumentSummaryRead[];
+  meta: PageMeta;
+}
+//#endregion
+//#region src/models/layerRead.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * A visual overlay on a document's artwork — ``Entity/Layer.php``.
+ *
+ * ``background`` is declared ``boolean`` in the legacy DTO while sitting between
+ * two image/position fields; carried as declared.
+ */
+interface LayerRead {
+  background?: boolean | null;
+  color?: string | null;
+  description?: string | null;
+  gradient?: boolean | null;
+  image?: string | null;
+  opacity?: number | null;
+  positionX?: string | null;
+  positionY?: string | null;
+  type?: string | null;
+}
+//#endregion
+//#region src/models/trackRead.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * One track of a multi-part document — ``Entity/Track.php``.
+ */
+interface TrackRead {
+  artists?: string[];
+  duration?: number | null;
+  id: number;
+  title?: string | null;
+  url?: string | null;
+}
+//#endregion
+//#region src/models/documentRead.d.ts
+/**
+ * A catalogue work with this library's licence state on it.
+ *
+ * ``pillar`` is the recovered decoder, not a raw integer: the legacy column is
+ * ``1..7`` and its meaning was reconstructed in
+ * ``app.models.enums.Pillar`` — 1 music, 2 film, 3 learning, 4 books, 5 press,
+ * 6 games, 7 inclusion. The enum's string values cross the wire; the integer
+ * stays in the migration.
+ *
+ * PROVISIONAL fields, carried with their legacy names because nothing in the
+ * source explains them: ``tds`` / ``tds_doc_id`` (a paired flag and reference,
+ * meaning undocumented), ``max_time_int`` (a duration cap in unstated units),
+ * ``display_type`` and ``platform``. Resolve them before a client relies on
+ * any.
+ *
+ * The four rating fields are all present in the legacy DTO and all distinct:
+ * the work's own rating, this patron's, this library's, and the cross-library
+ * aggregate.
+ */
+interface DocumentRead {
+  artist?: string | null;
+  deletable?: boolean;
+  displayType?: number | null;
+  downloading?: boolean;
+  extendCount?: number | null;
+  extendList?: string[];
+  extendNewDate?: string | null;
+  extendNumberMax?: number | null;
+  extract1?: string | null;
+  extract2?: string | null;
+  id: number;
+  imageTitle?: string | null;
+  informations?: DocumentInformationRead[];
+  isPromo?: number | null;
+  lastPosition?: number | null;
+  layers?: LayerRead[];
+  licenceId?: number | null;
+  links?: DocumentLinkRead[];
+  maxTimeInt?: number | null;
+  pageCount?: number | null;
+  parentalControl?: boolean;
+  photoHd?: string | null;
+  photoSd?: string | null;
+  pictos?: string[];
+  pillar?: Pillar | null;
+  platform?: number | null;
+  price?: number | null;
+  rating?: number | null;
+  ratingAll?: number | null;
+  ratingLibrary?: number | null;
+  ratingUser?: number | null;
+  screenshots?: string[];
+  sizeBytes?: number | null;
+  streaming?: boolean;
+  subSectionId?: number | null;
+  subTitle?: string | null;
+  supplierId?: number | null;
+  support?: number | null;
+  tds?: boolean | null;
+  tdsDocId?: number | null;
+  title: string;
+  tracks?: TrackRead[];
+  unitCount?: number | null;
+  url?: string | null;
+  year?: number | null;
+}
+//#endregion
+//#region src/models/documentSearchWrite.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * Full-text search over the catalogue (``POST /document/search``).
+ *
+ * A search is a read. The legacy declares it ``POST`` because the query arrives
+ * in the body; if this becomes ``GET`` at rebuild time, ``words`` becomes ``q``
+ * to match biblio E46 and the two catalogues stop disagreeing about the name of
+ * a search term.
+ */
+interface DocumentSearchWrite {
+  /** @minimum 1 */
+  page?: number;
+  /**
+   * @minLength 1
+   * @maxLength 100
+   */
+  words: string;
+}
+//#endregion
+//#region src/models/drmRead.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * DRM playback parameters — ``Entity/DRM.php``.
+ *
+ * ``token``, ``licenses`` and ``certificate`` are credentials for the DRM
+ * system. Short-lived, per-playback, never logged.
+ *
+ * ``bandwidth``, ``width`` and ``height`` are declared ``@var integer`` while
+ * being initialised to ``""`` in the legacy DTO. Typed as integers here.
+ */
+interface DrmRead {
+  bandwidth?: number | null;
+  certificate?: string;
+  contentId?: string;
+  dash?: string;
+  fairplay?: string;
+  height?: number | null;
+  hls?: string;
+  kid?: string;
+  licenses?: string[];
+  mode?: string;
+  token?: string;
+  widevine?: string;
+  width?: number | null;
+}
+//#endregion
+//#region src/models/editorDetailRead.d.ts
+/**
+ * One editor and its content (E45).
+ *
+ * One endpoint replaces two — ``GET /editor/{id}`` rendered a page and
+ * ``GET /api/v1/editors/{id}`` returned JSON with ``pageSize`` instead of
+ * ``limit`` and the object wrapped in an array. Same entity, two conventions,
+ * one codebase (§4, consequence 5).
+ */
+interface EditorDetailRead {
+  content: ContentPage;
+  editorId: number;
+  name: string;
+}
+//#endregion
+//#region src/models/editorialSlideRead.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * A merchandising slide in the home feed's ``editos`` (E48). PROVISIONAL.
+ *
+ * Fields from ``app.models.biblio.catalogue.EditorialSlide``.
+ */
+interface EditorialSlideRead {
+  image?: string | null;
+  label?: string | null;
+  link?: string | null;
+  slideId: number;
+  teaser?: string | null;
+  title: string;
+}
+//#endregion
+//#region src/models/editorRead.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * An editor as listed (E44 item). PROVISIONAL.
+ */
+interface EditorRead {
+  editorId: number;
+  logo?: string | null;
+  name: string;
+}
+//#endregion
+//#region src/models/editorListRead.d.ts
+/**
+ * The editor list (E44).
+ *
+ * The legacy ``GET /api/v1/editors/`` wrapped this collection in a
+ * single-element array. It does not here — §2.1: never wrap a single object in
+ * an array.
+ */
+interface EditorListRead {
+  data: EditorRead[];
+}
+//#endregion
+//#region src/models/educationalGoalRead.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * Why the pupil is asking, as an option they pick.
+ */
+interface EducationalGoalRead {
+  appliesTo?: string[];
+  id: number;
+  name: string;
+  shortName?: string | null;
+}
+//#endregion
+//#region src/models/educationalGoalListRead.d.ts
+/**
+ * Every goal on offer.
+ */
+interface EducationalGoalListRead {
+  data: EducationalGoalRead[];
+}
+//#endregion
+//#region src/models/educationalGoalWrite.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * Create or amend a goal.
+ */
+interface EducationalGoalWrite {
+  /** @maxItems 20 */
+  appliesTo?: string[];
+  /**
+   * @minimum 0
+   * @maximum 999
+   */
+  displayOrder?: number;
+  isActive?: boolean;
+  /**
+   * @minLength 1
+   * @maxLength 200
+   */
+  name: string;
+  shortName?: string | null;
+}
+//#endregion
+//#region src/models/favoriteKind.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * ``favorites.mode``: 'C' / 'P'. The one enum the legacy code validates.
+ */
+type FavoriteKind = typeof FavoriteKind[keyof typeof FavoriteKind];
+declare const FavoriteKind: {
+  readonly content: 'content';
+  readonly press_title: 'press_title';
+};
+//#endregion
+//#region src/models/favoriteAddWrite.d.ts
+/**
+ * Body for ``PUT /me/favorites/{contentId}`` (E31).
+ *
+ * Idempotent: adding a favourite that is already set is ``204``, not a conflict.
+ *
+ * This and E32 (``DELETE``) replace a single ``POST /favorites`` that carried an
+ * ``enabled`` boolean — the verb encoded as data. A retry after a timeout
+ * silently reversed the user's intent; a repeated ``PUT`` cannot (§4,
+ * consequence 3). The legacy also left validation failures uncaught, returning
+ * ``500``.
+ */
+interface FavoriteAddWrite {
+  mode?: FavoriteKind | null;
+}
+//#endregion
+//#region src/models/selectionRead.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * A named list a patron files favourites into.
+ *
+ * The legacy exposes ``selectionId`` on the write path but has no DTO for the
+ * selection itself, so this shape is inferred from the identifier's use. Confirm
+ * it against the ``selection`` tables before relying on the name.
+ */
+interface SelectionRead {
+  id: number;
+  label?: string | null;
+}
+//#endregion
+//#region src/models/favoriteEntryRead.d.ts
+/**
+ * One favourited document, with the selection it belongs to.
+ */
+interface FavoriteEntryRead {
+  createdAt?: string | null;
+  document: DocumentSummaryRead;
+  selection?: SelectionRead | null;
+}
+//#endregion
+//#region src/models/favoriteListRead.d.ts
+/**
+ * The caller's favourites (``GET /my-favorites/list``).
+ *
+ * Unpaginated in the legacy. If a patron can accumulate an unbounded number of
+ * these — and nothing stops them — it needs a ``meta`` block and a page
+ * parameter before the first power user finds out.
+ */
+interface FavoriteListRead {
+  data: FavoriteEntryRead[];
+}
+//#endregion
+//#region src/models/favoriteRead.d.ts
+/**
+ * A favourited item (E30 item). PROVISIONAL beyond the three named fields.
+ *
+ * ``kind`` is the content family. It serialises as ``mode`` to match the spec's
+ * wire name, and its *values* are the new vocabulary from
+ * :class:`~app.models.enums.FavoriteKind` (``content`` / ``press_title``) rather
+ * than the legacy single letters ``C`` / ``P``. The mapping belongs in the
+ * migration and the mapper; nothing on the wire should carry the letters.
+ */
+interface FavoriteRead {
+  contentId: number;
+  mode: FavoriteKind;
+  title: string;
+}
+//#endregion
+//#region src/models/favoritePage.d.ts
+/**
+ * Paginated favourites (E30).
+ */
+interface FavoritePage {
+  data: FavoriteRead[];
+  meta: PageMeta;
+}
+//#endregion
+//#region src/models/historyEntryRead.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * One consumption-history entry (E33 item). PROVISIONAL beyond the named fields.
+ *
+ * ``progress`` is a ``Decimal`` rather than a float, matching
+ * ``app.models.biblio.activity.ContentProgress.progress`` — it is displayed, and
+ * float rounding shows.
+ */
+interface HistoryEntryRead {
+  contentId: number;
+  lastAccessAt: string;
+  progress?: string | null;
+  title: string;
+}
+//#endregion
+//#region src/models/historyPage.d.ts
+/**
+ * Paginated history (E33). Also embedded in the home feed, E48.
+ */
+interface HistoryPage {
+  data: HistoryEntryRead[];
+  meta: PageMeta;
+}
+//#endregion
+//#region src/models/homeFeedSectionRead.d.ts
+/**
+ * One carousel of the home feed (E48).
+ *
+ * ``key`` identifies the section to the client; ``sections`` carries its own
+ * order. The legacy hardcoded the ordering by splicing arrays at fixed offsets,
+ * so adding a carousel meant editing index arithmetic.
+ */
+interface HomeFeedSectionRead {
+  items: ContentSummaryRead[];
+  key: string;
+  title: string;
+}
+//#endregion
+//#region src/models/pressArticleSummaryRead.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * A press article as listed (E41 item, E43 item). PROVISIONAL.
+ */
+interface PressArticleSummaryRead {
+  articleId: number;
+  publishedAt?: string | null;
+  themeId?: number | null;
+  title: string;
+}
+//#endregion
+//#region src/models/pressReviewSectionRead.d.ts
+/**
+ * One curated section of the press review (E43).
+ */
+interface PressReviewSectionRead {
+  articles: PressArticleSummaryRead[];
+  title: string;
+}
+//#endregion
+//#region src/models/pressReviewRead.d.ts
+/**
+ * The curated press review (E43). An explicit aggregate (§5.2).
+ *
+ * New as an endpoint; the legacy composed it into the home and press pages.
+ */
+interface PressReviewRead {
+  sections: PressReviewSectionRead[];
+}
+//#endregion
+//#region src/models/homeFeedRead.d.ts
+/**
+ * The composed home screen (E48). An explicit aggregate (§5.2).
+ *
+ * Provided because assembling it client-side would cost eight round trips.
+ *
+ * Partial failure is not total failure: if a section's source fails, omit that
+ * section and still return ``200``. Never fail the whole screen for one
+ * carousel.
+ */
+interface HomeFeedRead {
+  editors?: EditorRead[];
+  editos?: EditorialSlideRead[];
+  history?: HistoryPage | null;
+  pressReview?: PressReviewRead | null;
+  sections?: HomeFeedSectionRead[];
+}
+//#endregion
+//#region src/models/hTTPExceptionResponse.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * Body of a raised ``HTTPException``. Declared so it lands in the spec.
+ *
+ * Wired into the app-wide ``responses`` map in ``app/main.py`` — that is what
+ * lets a generated client type 401/403/404/429/503 bodies instead of
+ * ``unknown``. Not 422: see :class:`ValidationErrorResponse`.
+ */
+interface HTTPExceptionResponse {
+  detail: string;
+}
+//#endregion
+//#region src/models/impersonationWrite.d.ts
+/**
+ * Open a support session acting as another account (E56).
+ *
+ * ``reason`` is mandatory and exists to be logged. A support action without a
+ * stated reason is indistinguishable from an abuse of the same endpoint.
+ *
+ * ``POST``, not the legacy ``GET /imitation-user/{id}`` — a state-changing GET,
+ * therefore outside the CSRF layer by construction, gated only by a forgeable
+ * cookie.
+ */
+interface ImpersonationWrite {
+  product: Product;
+  /**
+   * @minLength 8
+   * @maxLength 2000
+   */
+  reason: string;
+  /** @minimum 1 */
+  userId: number;
+}
+//#endregion
+//#region src/models/lastPositionWrite.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * Report the patron's playback or reading position (``/document/last-position/{docId}``).
+ *
+ * A write. The legacy declares it ``GET`` with the position in the query string,
+ * which makes resuming a book a cacheable idempotent read that mutates state.
+ */
+interface LastPositionWrite {
+  /** @minimum 0 */
+  position: number;
+}
+//#endregion
+//#region src/models/learningPathStepRead.d.ts
+/**
+ * One step of a ``parcours``: where it sits, and what it is.
+ *
+ * ``stepOrder`` is carried rather than left implicit in the array order,
+ * because a step the caller is not entitled to is dropped rather than
+ * renumbered — so positions can have gaps, and a client showing "3 / 8" needs
+ * the real number.
+ */
+interface LearningPathStepRead {
+  content: ContentSummaryRead;
+  stepOrder: number;
+}
+//#endregion
+//#region src/models/learningPathDetailRead.d.ts
+/**
+ * A ``parcours`` opened up: its own fields, plus its ordered steps.
+ *
+ * Closes a dead end. A pack lists its ``parcours`` as
+ * :class:`LearningPathRefRead` — an id, a title, a teaser — and until now
+ * there was nothing to call with that id, so the sequence a library had
+ * curated could be named but never followed.
+ *
+ * ``stepCount`` counts what the caller can actually reach, not what the path
+ * contains. The two differ whenever entitlement excludes a step, and reporting
+ * the larger number would promise content that never arrives.
+ */
+interface LearningPathDetailRead {
+  categoryId?: number | null;
+  durationLabel?: string | null;
+  learningPathId: number;
+  stepCount: number;
+  steps?: LearningPathStepRead[];
+  teaser?: string | null;
+  title: string;
+}
+//#endregion
+//#region src/models/learningPathRefRead.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * A ``parcours`` — an ordered sequence of content — as listed by E38.
+ *
+ * PROVISIONAL: the spec writes ``"parcours": [ … ]`` and names no field. These
+ * come from ``app.models.biblio.catalogue.LearningPath``.
+ */
+interface LearningPathRefRead {
+  durationLabel?: string | null;
+  learningPathId: number;
+  teaser?: string | null;
+  title: string;
+}
+//#endregion
+//#region src/models/leaseCloseWrite.d.ts
+/**
+ * Why staff are closing somebody else's lease.
+ *
+ * ``reason`` is fixed rather than free text — the legacy recorded a single
+ * letter and nothing else, so "who closed this and why" was unanswerable. The
+ * narrative goes in the audit row.
+ */
+interface LeaseCloseWrite {
+  note?: string | null;
+  reason: ConsumptionCloseReason;
+}
+//#endregion
+//#region src/models/leaseRead.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * An open consumption, and when it lapses if nobody renews it.
+ *
+ * The client's contract is simple: renew before ``expiresAt`` or the lease is
+ * reaped and the seat returns to the establishment's pool. That is what the
+ * legacy's 30-second refresh against a 60-second lease was doing.
+ */
+interface LeaseRead {
+  eventId: number;
+  expiresAt: string;
+}
+//#endregion
+//#region src/models/schoolCycle.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * The French school cycle a level belongs to.
+ *
+ * Not in the legacy schema, which stores levels as a flat list with a display
+ * order and reconstructs the grouping in views. It is here because every
+ * dispatch rule and every teacher competency is expressed per cycle in
+ * practice — a *professeur des écoles* does not answer a *terminale* question.
+ */
+type SchoolCycle = typeof SchoolCycle[keyof typeof SchoolCycle];
+declare const SchoolCycle: {
+  readonly kindergarten: 'kindergarten';
+  readonly primary: 'primary';
+  readonly middle: 'middle';
+  readonly high: 'high';
+  readonly higher: 'higher';
+};
+//#endregion
+//#region src/models/levelRead.d.ts
+/**
+ * A school year.
+ */
+interface LevelRead {
+  cycle: SchoolCycle;
+  id: number;
+  name: string;
+  nominalAge?: number | null;
+  slug: string;
+}
+//#endregion
+//#region src/models/levelListRead.d.ts
+/**
+ * Every level, in teaching order.
+ */
+interface LevelListRead {
+  data: LevelRead[];
+}
+//#endregion
+//#region src/models/levelWrite.d.ts
+/**
+ * Create or amend a school level.
+ */
+interface LevelWrite {
+  cycle: SchoolCycle;
+  /**
+   * @minimum 0
+   * @maximum 999
+   */
+  displayOrder?: number;
+  isActive?: boolean;
+  /**
+   * @minLength 1
+   * @maxLength 200
+   */
+  name: string;
+  nominalAge?: number | null;
+  /**
+   * @minLength 1
+   * @maxLength 200
+   * @pattern ^[a-z0-9]+(?:-[a-z0-9]+)*$
+   */
+  slug: string;
+}
+//#endregion
+//#region src/models/partnerProvider.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * A partner whose catalogue and reader we host directly.
+ *
+ * Names both halves of the integration: the seat pool
+ * (:class:`~app.models.biblio.license.PartnerLicense`) and the ingested
+ * catalogue (``app.models.partner.catalogue``). One enum rather than two
+ * because a provider is a provider — a licence for Nextory and a Nextory media
+ * row are the same partner seen from two sides.
+ *
+ * Distinct from :class:`BookSource`, which says which feed produced a *biblio*
+ * ``book`` row. The two vocabularies overlap on ``nextory`` and will keep
+ * overlapping: the partner catalogue is deliberately a separate subsystem from
+ * ``book``/``book_content_link``, bridged rather than merged.
+ */
+type PartnerProvider = typeof PartnerProvider[keyof typeof PartnerProvider];
+declare const PartnerProvider: {
+  readonly nextory: 'nextory';
+  readonly youscribe: 'youscribe';
+};
+//#endregion
+//#region src/models/licenseRead.d.ts
+/**
+ * An external reading licence — one seat at the partner (E49 read, E50 write).
+ *
+ * E49 is the safe read and returns ``404`` when the caller holds none; E50 is
+ * the explicit write that allocates or reactivates one. The legacy did both
+ * from a single ``GET``, so listing your services provisioned a subscription.
+ *
+ * ``seats_used`` / ``seats_limit`` are here because the failure the legacy hid
+ * is the one people actually hit: a household at its cap got ``null``, which
+ * the page rendered identically to "not a subscriber". Showing the count makes
+ * the fix — release a seat — visible.
+ */
+interface LicenseRead {
+  assignedAt?: string | null;
+  licenseNumber: string;
+  provider: PartnerProvider;
+  /** @minimum 0 */
+  seatsLimit: number;
+  /** @minimum 0 */
+  seatsUsed: number;
+}
+//#endregion
+//#region src/models/licenseUserRead.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * The account a staff licence diagnostic refers to (E51).
+ *
+ * Trimmed to identifying fields on purpose. The legacy diagnostic echoed the
+ * full subscription and session objects for an arbitrary account in its ``500``
+ * body.
+ */
+interface LicenseUserRead {
+  email: string;
+  userId: number;
+}
+//#endregion
+//#region src/models/likeRead.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * The result of liking or unliking (E36, E37).
+ *
+ * Both are idempotent and both return the resulting state plus the new count,
+ * so a client never has to re-read the content to update its UI. They replace
+ * one non-idempotent ``POST /content/{id}/toggle-like``.
+ */
+interface LikeRead {
+  count: number;
+  liked: boolean;
+}
+//#endregion
+//#region src/models/tutoringChannel.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * How the answer reaches the pupil.
+ *
+ * Orthogonal to :class:`TutoringKind`: any kind can be delivered by any
+ * channel the tenant has enabled, and a request legitimately changes channel
+ * mid-flight — the legacy's ``differed_to_live`` and ``ai_to_live`` are both
+ * that transition, recorded as booleans because the schema had nowhere to put
+ * a channel.
+ */
+type TutoringChannel = typeof TutoringChannel[keyof typeof TutoringChannel];
+declare const TutoringChannel: {
+  readonly chat: 'chat';
+  readonly classroom: 'classroom';
+  readonly phone: 'phone';
+  readonly written: 'written';
+  readonly ai: 'ai';
+};
+//#endregion
+//#region src/models/tutoringKind.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * What is being asked for.
+ *
+ * Replaces six independent booleans on ``inquiries`` — ``for_librarian``,
+ * ``for_grand_oral``, ``for_ai``, ``for_coach``, ``parents_web_advice`` and
+ * (in the archives) ``for_school_counselor`` / ``for_psychologist``. Six flags
+ * describe 64 states, of which a handful are meaningful and none is documented;
+ * one enum describes exactly the states that exist.
+ *
+ * Two of those flags are **not** kinds and are modelled elsewhere: ``for_ai``
+ * is a delivery channel (:class:`TutoringChannel`), and ``differed_to_live`` is
+ * a transition between channels rather than a state.
+ *
+ * Provisional in one respect: whether the legacy flags are mutually exclusive
+ * in the data is answered by section F of ``tools/profexpress_probe.sql``,
+ * which groups the live combinations. If a real row carries two at once, that
+ * combination needs a value here rather than a second column.
+ */
+type TutoringKind = typeof TutoringKind[keyof typeof TutoringKind];
+declare const TutoringKind: {
+  readonly homework: 'homework';
+  readonly grand_oral: 'grand_oral';
+  readonly coaching: 'coaching';
+  readonly orientation: 'orientation';
+  readonly librarian: 'librarian';
+  readonly parent_advice: 'parent_advice';
+};
+//#endregion
+//#region src/models/tutoringStatus.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * Where a request has got to.
+ *
+ * The legacy vocabulary is now known rather than guessed. ``InquiryStatus``
+ * holds no fixture, but ``InquiryStatus::getHrList()`` names ids 1-13 and
+ * ``AdminInquiriesController::applyStatusFilter`` maps each id to its initials,
+ * which together give the complete set — twelve initials, not the four that
+ * appear in ``whereInitials(...)`` calls:
+ *
+ * ==== ============================ ========= ========= =======================
+ * id   name                         initials  type_id   maps to
+ * ==== ============================ ========= ========= =======================
+ * 1    En édition                   ``E``     --        :attr:`DRAFT`
+ * 2    Différées enregistrées       ``R``     2         :attr:`SUBMITTED` + WRITTEN
+ * 3    Live en chat                 ``CHA``   1         :attr:`SUBMITTED` + CHAT
+ * 4    Différées validées           ``V``     2         :attr:`DISPATCHED` + WRITTEN
+ * 5    Live validées                ``V``     1         :attr:`DISPATCHED` + CHAT
+ * 6    Succès                       ``S``     --        :attr:`SUCCEEDED`
+ * 7    Echec                        ``F``     --        :attr:`FAILED`
+ * 8    Annulation du RDV            ``CAN``   --        :attr:`CANCELLED`
+ * 9    Non-présentation au RDV      ``ABS``   --        FAILED + ``no_show``
+ * 10   Problème compte              ``NI``    --        FAILED + ``account_problem``
+ * 11   Problème compte traité       ``FIX``   --        back to DISPATCHED
+ * 12   Problème mot de passe        ``MDP``   --        FAILED + ``password_problem``
+ * 13   Autre                        *(none)*  --        anything not above
+ * --   Abandon                      ``A``     --        :attr:`EXPIRED`
+ * ==== ============================ ========= ========= =======================
+ *
+ * **The important find: ``V`` is ambiguous on its own.** Ids 4 and 5 share it
+ * and are told apart by ``type_id`` — 1 is live, 2 is *différé*. So a legacy
+ * status is the pair ``(initials, type_id)``, which is exactly why this enum
+ * carries no channel: state and delivery are two axes, and the legacy conflated
+ * them into one lookup table with duplicate initials.
+ *
+ * Three of the twelve are not states at all. ``ABS``, ``NI`` and ``MDP``
+ * describe *why* a request stopped, so they are
+ * :class:`TutoringCloseReason` values on a FAILED request; and ``FIX`` is a
+ * transition back into the queue rather than a resting place. Modelling them as
+ * statuses is what forces the legacy to ask "is this status final?" with a
+ * hard-coded list of names (``InquiryStatus::final``).
+ *
+ * :attr:`TRIAGED`, :attr:`CLAIMED` and :attr:`ANSWERED` have no legacy status
+ * at all — the legacy records those moments only as timestamps, which is why
+ * "how long did triage take" is a question its own reporting code has to
+ * subtract to answer.
+ */
+type TutoringStatus = typeof TutoringStatus[keyof typeof TutoringStatus];
+declare const TutoringStatus: {
+  readonly draft: 'draft';
+  readonly submitted: 'submitted';
+  readonly triaged: 'triaged';
+  readonly dispatched: 'dispatched';
+  readonly claimed: 'claimed';
+  readonly answered: 'answered';
+  readonly succeeded: 'succeeded';
+  readonly failed: 'failed';
+  readonly cancelled: 'cancelled';
+  readonly expired: 'expired';
+};
+//#endregion
+//#region src/models/listAllRequestsParams.d.ts
+type ListAllRequestsParams = {
+  /**
+   * @minimum 1
+   */
+  page?: number;
+  /**
+   * @minimum 1
+   * @maximum 100
+   */
+  limit?: number;
+  status?: TutoringStatus[] | null;
+  kind?: TutoringKind | null;
+  channel?: TutoringChannel | null;
+  subjectId?: number | null;
+  levelId?: number | null;
+  submittedFrom?: string | null;
+  submittedUntil?: string | null;
+};
+//#endregion
+//#region src/models/listBiblioFavoritesParams.d.ts
+type ListBiblioFavoritesParams = {
+  /**
+   * @minimum 1
+   */
+  page?: number;
+  /**
+   * @minimum 1
+   * @maximum 100
+   */
+  limit?: number;
+  mode?: FavoriteKind | null;
+};
+//#endregion
+//#region src/models/listEditorsParams.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+type ListEditorsParams = {
+  /**
+   * @minimum 1
+   * @maximum 100
+   */
+  limit?: number;
+  /**
+   * @maxLength 32
+   */
+  order?: string;
+  /**
+   * @maxLength 4
+   */
+  sort?: string;
+};
+//#endregion
+//#region src/models/listExpiringDocumentsParams.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+type ListExpiringDocumentsParams = {
+  /**
+   * @minimum 0
+   * @maximum 365
+   */
+  within_days?: number;
+};
+//#endregion
+//#region src/models/listFeedbackParams.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+type ListFeedbackParams = {
+  /**
+   * @minimum 1
+   */
+  page?: number;
+  /**
+   * @minimum 1
+   * @maximum 100
+   */
+  limit?: number;
+  publishable?: boolean | null;
+};
+//#endregion
+//#region src/models/listGoalsParams.d.ts
+type ListGoalsParams = {
+  kind?: TutoringKind | null;
+};
+//#endregion
+//#region src/models/listHistoryParams.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+type ListHistoryParams = {
+  /**
+   * @minimum 1
+   */
+  page?: number;
+  /**
+   * @minimum 1
+   * @maximum 100
+   */
+  limit?: number;
+  groupType?: string | null;
+  compatibility?: number | null;
+};
+//#endregion
+//#region src/models/listLoansParams.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+type ListLoansParams = {
+  include_returned?: boolean;
+};
+//#endregion
+//#region src/models/partnerMediaType.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * How the partner catalogue shelves one media.
+ *
+ * Recovered from ``NextoryMediaTransformer::mediaType()``, which is not the
+ * obvious mapping from ``content_type`` and must not be simplified into one:
+ *
+ * * category 249 ("BDs et humour") + ``audiobook`` → ``livres-audio``
+ * * category 249 + a real comics subcategory (250–261) → ``bd``
+ * * category 249 with only 262–264 (Humour / Satires / Citations), or with no
+ *   subcategory at all → ``livres``
+ * * category 314 → ``podcasts``
+ * * otherwise ``ebook`` → ``livres``, ``audiobook`` → ``livres-audio``
+ *
+ * The 262–264 carve-out is load-bearing. Those subcategories sit under 249, but
+ * the ``livres`` menu excludes 249 entirely, so anything classified there was
+ * unreachable from every page — which is why the legacy grew a synthetic
+ * category 10001 to rehome them.
+ *
+ * Values are the feed's own strings; the importer writes them verbatim.
+ *
+ * **The derivation above is Nextory's.** YouScribe's is a plain one-to-one map
+ * from :attr:`~app.models.partner.catalogue.PartnerMedia.kind`, measured over
+ * all 173,742 of its rows on 2026-09-11 with no crossover at all::
+ *
+ *     partition  → partitions    119,534    68.8%
+ *     ebook      → livres         43,420    25.0%
+ *     audiobook  → livres-audio    8,273     4.8%
+ *     bd         → bd              2,495     1.4%
+ *     podcast    → podcasts           20     0.0%
+ *
+ * So one column is not derived the same way for both partners, and an importer
+ * that assumes Nextory's category arithmetic would mis-shelve every YouScribe
+ * title.
+ */
+type PartnerMediaType = typeof PartnerMediaType[keyof typeof PartnerMediaType];
+declare const PartnerMediaType: {
+  readonly livres: 'livres';
+  readonly bd: 'bd';
+  readonly 'livres-audio': 'livres-audio';
+  readonly podcasts: 'podcasts';
+  readonly partitions: 'partitions';
+};
+//#endregion
+//#region src/models/listMediaParams.d.ts
+type ListMediaParams = {
+  /**
+   * @minimum 1
+   */
+  page?: number;
+  /**
+   * @minimum 1
+   * @maximum 100
+   */
+  limit?: number;
+  mediaType?: PartnerMediaType | null;
+  categoryId?: number | null;
+  language?: string | null;
+  q?: string | null;
+  order?: string;
+};
+//#endregion
+//#region src/models/listMessagesParams.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+type ListMessagesParams = {
+  before?: number | null;
+  /**
+   * @minimum 1
+   * @maximum 200
+   */
+  limit?: number;
+};
+//#endregion
+//#region src/models/listMyRequestsParams.d.ts
+type ListMyRequestsParams = {
+  /**
+   * @minimum 1
+   */
+  page?: number;
+  /**
+   * @minimum 1
+   * @maximum 100
+   */
+  limit?: number;
+  status?: TutoringStatus[] | null;
+  kind?: TutoringKind | null;
+  channel?: TutoringChannel | null;
+  subjectId?: number | null;
+  levelId?: number | null;
+  submittedFrom?: string | null;
+  submittedUntil?: string | null;
+};
+//#endregion
+//#region src/models/listNotificationsParams.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+type ListNotificationsParams = {
+  /**
+   * @minimum 1
+   * @maximum 100
+   */
+  limit?: number;
+};
+//#endregion
+//#region src/models/listPatronsParams.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+type ListPatronsParams = {
+  /**
+   * @minimum 1
+   */
+  page?: number;
+  /**
+   * @minimum 1
+   * @maximum 100
+   */
+  limit?: number;
+  q?: string | null;
+  isActive?: boolean | null;
+  pendingOnly?: boolean;
+};
+//#endregion
+//#region src/models/listPractitionersParams.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+type ListPractitionersParams = {
+  /**
+   * @minimum 1
+   */
+  page?: number;
+  /**
+   * @minimum 1
+   * @maximum 100
+   */
+  limit?: number;
+  role?: string | null;
+  capability?: string | null;
+  subjectId?: number | null;
+  levelId?: number | null;
+  isAvailable?: boolean | null;
+  lapsedDocuments?: boolean | null;
+};
+//#endregion
+//#region src/models/listPressArticlesParams.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+type ListPressArticlesParams = {
+  /**
+   * @minimum 1
+   */
+  page?: number;
+  /**
+   * @minimum 1
+   * @maximum 100
+   */
+  limit?: number;
+  themeId?: number | null;
+  lang?: string | null;
+  countries?: string | null;
+  subthemes?: string | null;
+  order?: string | null;
+};
+//#endregion
+//#region src/models/listQueueParams.d.ts
+type ListQueueParams = {
+  /**
+   * @minimum 1
+   */
+  page?: number;
+  /**
+   * @minimum 1
+   * @maximum 100
+   */
+  limit?: number;
+  status?: TutoringStatus[] | null;
+  kind?: TutoringKind | null;
+  channel?: TutoringChannel | null;
+  subjectId?: number | null;
+  levelId?: number | null;
+  submittedFrom?: string | null;
+  submittedUntil?: string | null;
+};
+//#endregion
+//#region src/models/reviewState.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * ``avis.state``. Values recovered from the moderation screens.
+ *
+ * Unconstrained in the schema — the column is a ``tinyint`` with no decoder —
+ * so this names what the API accepts, not what the column is known to hold.
+ */
+type ReviewState = typeof ReviewState[keyof typeof ReviewState];
+declare const ReviewState: {
+  readonly pending: 'pending';
+  readonly published: 'published';
+  readonly rejected: 'rejected';
+};
+//#endregion
+//#region src/models/listReviewsParams.d.ts
+type ListReviewsParams = {
+  /**
+   * @minimum 1
+   */
+  page?: number;
+  /**
+   * @minimum 1
+   * @maximum 100
+   */
+  limit?: number;
+  state?: ReviewState;
+};
+//#endregion
+//#region src/models/listThemesParams.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+type ListThemesParams = {
+  pillar?: number | null;
+};
+//#endregion
+//#region src/models/subjectKind.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * Which catalogue a consumed item belongs to. The ledger's polymorphic key.
+ *
+ * Replaces the three nullable FKs the ledger used to carry (``work_id`` /
+ * ``content_id`` / ``partner_media_id``) with one ``(kind, id)`` pair, so a new
+ * platform costs **an enum value, not a migration** — the same trade every
+ * other enum here makes. The id has no database foreign key: the ledger is a
+ * billing and history record, and a consumed item being deleted from its
+ * catalogue must not erase the record of it having been consumed.
+ *
+ * Grant *resolution* stays keyed by the concrete catalogue FK (grants are
+ * defined per work, per content, per category); only the *ledger* subject is
+ * polymorphic. :class:`app.services.consumption.Subject` bridges the two.
+ */
+type SubjectKind = typeof SubjectKind[keyof typeof SubjectKind];
+declare const SubjectKind: {
+  readonly content: 'content';
+  readonly work: 'work';
+  readonly partner_media: 'partner_media';
+  readonly tutoring_request: 'tutoring_request';
+};
+//#endregion
+//#region src/models/liveLeaseRead.d.ts
+/**
+ * One live lease, as staff see it. The legacy's "sessions en cours".
+ *
+ * ``ip_address`` is shown because it is what the establishment's own limit is
+ * counted on for remote-simultaneous access, so a support agent looking at an
+ * over-limit tenant needs it to make sense of the number.
+ */
+interface LiveLeaseRead {
+  act: EntitlementAct;
+  eventId: number;
+  expiresAt?: string | null;
+  ipAddress?: string | null;
+  startedAt: string;
+  subjectId?: number | null;
+  subjectKind?: SubjectKind | null;
+  userId: number;
+}
+//#endregion
+//#region src/models/liveLeaseListRead.d.ts
+/**
+ * Everything open for one tenant right now.
+ */
+interface LiveLeaseListRead {
+  data: LiveLeaseRead[];
+  /** @minimum 0 */
+  total: number;
+}
+//#endregion
+//#region src/models/loanRead.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * One loan, as the new ledger sees it.
+ *
+ * Distinct from :class:`DownloadRead`, which is the legacy ``Download`` row with
+ * its eleven timestamps and its provider fields. A loan here is a
+ * ``consumption_event``: who borrowed what, when it expires, whether it came
+ * back, and how many extensions are left.
+ *
+ * ``extensions_remaining`` is ``None`` when the grant sets no cap. It is
+ * computed rather than stored, because a stored remainder is the same lost
+ * update the legacy's ``leftnbunit*`` columns are.
+ */
+interface LoanRead {
+  act: string;
+  borrowedAt: string;
+  expiresAt?: string | null;
+  extensionCount?: number;
+  extensionsRemaining?: number | null;
+  id: number;
+  isActive: boolean;
+  returnedAt?: string | null;
+  workId?: number | null;
+}
+//#endregion
+//#region src/models/loanPage.d.ts
+/**
+ * The caller's loans.
+ */
+interface LoanPage {
+  data: LoanRead[];
+}
+//#endregion
+//#region src/models/logoutWrite.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * End the session at the broker.
+ *
+ * Sending the refresh token is what makes this more than a client-side
+ * forget: it revokes the Keycloak session, so a copy of the refresh token
+ * elsewhere stops working. The access token remains valid until it expires,
+ * which is inherent to stateless verification and why realm access-token
+ * lifetimes are short.
+ */
+interface LogoutWrite {
+  /**
+   * @minLength 1
+   * @maxLength 8192
+   */
+  refresh_token: string;
+}
+//#endregion
+//#region src/models/principalRead.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * What the platform believes about the current session.
+ *
+ * Deliberately thin. It answers "who am I, how did I get here, and what is this
+ * session trusted for" — the three things a client legitimately needs in order
+ * to hide a control it is about to be refused. It is *not* the account: that is
+ * :class:`AccountRead`.
+ *
+ * ``assurance`` is the clamped value, never the raw claim. A client that wants
+ * to know why an operation is unavailable should read this rather than
+ * re-deriving trust from ``provider``.
+ */
+interface PrincipalRead {
+  assurance: number;
+  assuranceLabel: string;
+  expiresAt?: string | null;
+  mayChangeCredentials: boolean;
+  mayChangeEntitlement: boolean;
+  mayEditProfile: boolean;
+  partnerName?: string | null;
+  provider?: string | null;
+  roles?: string[];
+  subject: string;
+  tenantId?: number | null;
+}
+//#endregion
+//#region src/models/meRead.d.ts
+/**
+ * The current session, without reissuing anything.
+ *
+ * Separate from :class:`SessionRead` rather than that class with the token
+ * fields blanked: a response shape that *can* hold a credential eventually
+ * holds one, and this one never should.
+ */
+interface MeRead {
+  account: AccountRead;
+  principal: PrincipalRead;
+}
+//#endregion
+//#region src/models/messageKind.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * What a chat line is.
+ *
+ * Prof Express has no equivalent, because it has no message table at all — the
+ * conversation lives in SendBird and the platform holds only a channel URL. So
+ * "what did the teacher tell this pupil last term" is a question for a third
+ * party's retention policy, and a chat that breaks needs a
+ * ``/requete/reparer-probleme-chat/{id}`` route to repair it.
+ */
+type MessageKind = typeof MessageKind[keyof typeof MessageKind];
+declare const MessageKind: {
+  readonly text: 'text';
+  readonly system: 'system';
+};
+//#endregion
+//#region src/models/messageRead.d.ts
+/**
+ * One line in the thread.
+ *
+ * ``senderId`` rather than a name: the client already knows the participants
+ * from the request, and a message stream is the wrong place to be resolving
+ * display names row by row. ``null`` means the platform said it.
+ *
+ * ``body`` is nullable because erasure empties it and leaves the row, so a
+ * client must render "message removed" rather than assume a gap in the thread
+ * means nothing was ever said.
+ */
+interface MessageRead {
+  body?: string | null;
+  createdAt: string;
+  id: number;
+  kind: MessageKind;
+  requestId: number;
+  senderId?: number | null;
+}
+//#endregion
+//#region src/models/messagePage.d.ts
+/**
+ * A page of history, newest first.
+ *
+ * Walk backwards by passing the last ``nextBefore`` you were given. ``null``
+ * means you have reached the beginning of the conversation.
+ */
+interface MessagePage {
+  data: MessageRead[];
+  hasMore?: boolean;
+  nextBefore?: number | null;
+}
+//#endregion
+//#region src/models/messageWrite.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * Something to say.
+ *
+ * ``clientKey`` is how a send survives a lost acknowledgement: the same key
+ * twice returns the original message rather than saying it twice. A chat on a
+ * phone connection needs this, and the legacy has no equivalent because
+ * SendBird owns the send.
+ */
+interface MessageWrite {
+  /**
+   * @minLength 1
+   * @maxLength 4000
+   */
+  body: string;
+  clientKey?: string | null;
+}
+//#endregion
+//#region src/models/moderationWrite.d.ts
+/**
+ * Publish or reject a review.
+ *
+ * ``reason`` is optional when publishing and required when rejecting: somebody
+ * whose review disappears is owed an explanation, and the person who rejected it
+ * is the only one who can give it.
+ */
+interface ModerationWrite {
+  reason?: string | null;
+  state: ReviewState;
+}
+//#endregion
+//#region src/models/notificationRead.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * One notification addressed to a patron.
+ *
+ * PROVISIONAL: the legacy has no DTO class for this — the handler assembles an
+ * array inline. Fields are taken from the ``/application/notif`` query
+ * parameters and from what the app is known to render. Confirm against
+ * ``app_notification`` before relying on it.
+ */
+interface NotificationRead {
+  body?: string | null;
+  createdAt?: string | null;
+  documentId?: number | null;
+  id: string;
+  readAt?: string | null;
+  title?: string | null;
+  type?: number | null;
+}
+//#endregion
+//#region src/models/notificationListRead.d.ts
+/**
+ * A patron's notifications.
+ */
+interface NotificationListRead {
+  data: NotificationRead[];
+  unreadCount?: number;
+}
+//#endregion
+//#region src/models/packDetailReadFilters.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+type PackDetailReadFilters = {
+  [key: string]: unknown;
+};
+//#endregion
+//#region src/models/packDetailRead.d.ts
+/**
+ * A pack with its catalogs, filters, latest additions and learning paths (E38).
+ *
+ * ``canonical`` is how the redirect dies. When a pack resolves to a single
+ * catalog the legacy answered ``302 → /pack/{id}/catalog/{groupId}``; here the
+ * response is ``200`` and ``canonical`` names the resolved catalog path, leaving
+ * the client to decide whether to follow it (§5.1). It is ``None`` when the pack
+ * has more than one catalog.
+ *
+ * ``filters`` is the one shape in this package that is genuinely unspecified.
+ * The spec writes ``"filters": {…}`` and nothing else; the legacy assembled it
+ * per pack from whatever facets the catalogue exposed. It stays an open mapping
+ * rather than an invented class — pin it from a real pack response before any
+ * client depends on its interior.
+ */
+interface PackDetailRead {
+  canonical?: string | null;
+  catalogs: CatalogRefRead[];
+  filters?: PackDetailReadFilters;
+  latest?: ContentSummaryRead[];
+  packId: number;
+  parcours?: LearningPathRefRead[];
+  title: string;
+}
+//#endregion
+//#region src/models/packRead.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * A content pack the caller is entitled to (E25 item).
+ *
+ * PROVISIONAL — the spec names ``packId``, ``title`` and ``type`` then elides
+ * the rest with "the metadata needed for navigation". The pack's full shape,
+ * with its catalogs, is E38 (:class:`~app.datamodels.biblio.content.PackDetailRead`).
+ */
+interface PackRead {
+  packId: number;
+  title: string;
+  type: string;
+}
+//#endregion
+//#region src/models/packListRead.d.ts
+/**
+ * The caller's packs (E25). Unpaginated.
+ */
+interface PackListRead {
+  data: PackRead[];
+}
+//#endregion
+//#region src/models/partnerCategoryRead.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * One node of a provider's taxonomy.
+ *
+ * ``total`` is the precomputed count for the *caller's* filter combination,
+ * read from ``partner_category_total`` — not the size of the whole branch. A
+ * menu that shows a count nobody can reach is how the legacy ended up with
+ * categories that opened onto an empty page.
+ */
+interface PartnerCategoryRead {
+  categoryId: number;
+  level: number;
+  parentId?: number | null;
+  slug: string;
+  title: string;
+  /** @minimum 0 */
+  total?: number;
+}
+//#endregion
+//#region src/models/partnerCategoryListRead.d.ts
+/**
+ * A provider's taxonomy, flat, with parent links.
+ *
+ * Flat rather than nested on purpose: the tree is three levels deep and the
+ * menu renders two of them, so a client that wants nesting can build it from
+ * ``parent_id`` — and one that wants a breadcrumb does not have to walk a
+ * structure to find a node.
+ */
+interface PartnerCategoryListRead {
+  data: PartnerCategoryRead[];
+}
+//#endregion
+//#region src/models/partnerMediaSummaryRead.d.ts
+/**
+ * A media as it appears in a listing or a slider.
+ */
+interface PartnerMediaSummaryRead {
+  author?: string | null;
+  averageRating?: number | null;
+  coverImage?: string | null;
+  isFavorite?: boolean;
+  mediaId: number;
+  mediaType: PartnerMediaType;
+  slug: string;
+  title: string;
+}
+//#endregion
+//#region src/models/partnerFavoriteListRead.d.ts
+/**
+ * This reader's bookmarks on one provider's catalogue.
+ *
+ * Unpaginated, like biblio's own service list: the legacy's favourites page had
+ * no pagination either, and a bookmark list that needs it is a different
+ * problem from the one this endpoint solves.
+ */
+interface PartnerFavoriteListRead {
+  data: PartnerMediaSummaryRead[];
+}
+//#endregion
+//#region src/models/partnerMediaPage.d.ts
+/**
+ * A page of partner media.
+ */
+interface PartnerMediaPage {
+  data: PartnerMediaSummaryRead[];
+  meta: PageMeta;
+}
+//#endregion
+//#region src/models/partnerMediaRead.d.ts
+/**
+ * The detail page.
+ *
+ * ``biblio_content_id`` is exposed because it is the bridge a client needs to
+ * cross-link a partner title to the biblio catalogue — the one thing the two
+ * permanently-separate subsystems share.
+ */
+interface PartnerMediaRead {
+  author?: string | null;
+  averageRating?: number | null;
+  biblioContentId?: number | null;
+  categories?: PartnerCategoryRead[];
+  contributor?: string | null;
+  coverImage?: string | null;
+  description?: string | null;
+  isFavorite?: boolean;
+  isbn?: string | null;
+  language?: string | null;
+  mediaId: number;
+  mediaType: PartnerMediaType;
+  pageCount?: number | null;
+  publicationDate?: string | null;
+  publisherName?: string | null;
+  seriesName?: string | null;
+  slug: string;
+  title: string;
+}
+//#endregion
+//#region src/models/patronDetailRead.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * One patron in full.
+ *
+ * Still not everything: ``password_hash`` and ``parental_code_hash`` are absent
+ * by construction rather than by filtering, because a response model that *can*
+ * hold a credential eventually does.
+ */
+interface PatronDetailRead {
+  accessLevel: number;
+  birthDate?: string | null;
+  email?: string | null;
+  firstName: string;
+  isActive: boolean;
+  isAnonymous: boolean;
+  isGuest: boolean;
+  isPendingActivation: boolean;
+  lastLoginAt?: string | null;
+  lastName?: string | null;
+  login: string;
+  memberNumber?: string | null;
+  parentId?: number | null;
+  registeredAt: string;
+  subscriptionEndsAt?: string | null;
+  tenantId: number;
+  userId: number;
+}
+//#endregion
+//#region src/models/patronSummaryRead.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * A patron as a row in a list.
+ *
+ * No email. A staff listing is the most-viewed screen in the back office and
+ * the easiest to export; the address is on the detail view, one deliberate click
+ * away, where the access is worth auditing.
+ */
+interface PatronSummaryRead {
+  firstName: string;
+  isActive: boolean;
+  isPendingActivation: boolean;
+  lastLoginAt?: string | null;
+  lastName?: string | null;
+  login: string;
+  registeredAt: string;
+  tenantId: number;
+  userId: number;
+}
+//#endregion
+//#region src/models/patronPage.d.ts
+interface PatronPage {
+  data: PatronSummaryRead[];
+  meta: PageMeta;
+}
+//#endregion
+//#region src/models/patronUpdateWrite.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * What a staff member may change about a patron.
+ *
+ * A short list on purpose. Identity comes from the identity provider and is
+ * re-synced on every login, so a name edited here is reverted at the next
+ * sign-in; and nothing here can move a patron between tenants, which would be a
+ * way to walk an account out of one library and into another.
+ */
+interface PatronUpdateWrite {
+  accessLevel?: number | null;
+  isActive?: boolean | null;
+  memberNumber?: string | null;
+  subscriptionEndsAt?: string | null;
+}
+//#endregion
+//#region src/models/playbackReportRead.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * An accepted incident report — ``Entity/Report.php``.
+ */
+interface PlaybackReportRead {
+  createdAt?: string | null;
+  date?: string | null;
+  description?: string | null;
+  email?: string | null;
+  id: number;
+  operatingSystem?: number | null;
+  patronId?: number | null;
+  tenantId?: number | null;
+  title?: string | null;
+  type?: number | null;
+  updatedAt?: string | null;
+  version?: string | null;
+}
+//#endregion
+//#region src/models/playbackReportWrite.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * Report a playback problem (``/streaming/report``, ``/application/report``).
+ *
+ * Maps to ``Entity/Report.php``.
+ *
+ * ``patron_id``, ``tenant_id`` and ``local_branch_id`` are **legacy transition
+ * fields**. They exist because the current clients send them and the current
+ * server trusts them. The rebuild must take all three from the credential and
+ * ignore whatever arrives here; delete the fields once no deployed client sends
+ * them.
+ *
+ * ``email`` is free text sent onward in a message. Validate it and rate-limit
+ * the endpoint: unauthenticated, it is a spam relay with the library's return
+ * address on it.
+ */
+interface PlaybackReportWrite {
+  date: string;
+  /**
+   * @minLength 1
+   * @maxLength 20000
+   */
+  description: string;
+  docId?: number | null;
+  /**
+   * @minLength 3
+   * @maxLength 200
+   */
+  email: string;
+  localBranchId?: number | null;
+  patronId?: number | null;
+  tenantId?: number | null;
+  /**
+   * @minLength 1
+   * @maxLength 200
+   */
+  title: string;
+  /**
+   * @minimum 0
+   * @maximum 100
+   */
+  type: number;
+}
+//#endregion
+//#region src/models/practitionerDocumentKind.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * A compliance document a contracted practitioner must hold.
+ *
+ * French self-employment paperwork, which the legacy keeps as four bare
+ * ``text`` columns on both ``teachers`` and ``switchmen``
+ * (``kbis_siret_document``, ``ursaff_document``, ``ursaff_date``,
+ * ``contrat_documents``) — so a document has no expiry anyone can query, and
+ * ``ursaff_date`` is ``NOT NULL`` with no default, meaning "not supplied" is
+ * stored as a real date.
+ *
+ * Modelling expiry is the point: an URSSAF attestation is valid for six months
+ * and a lapsed one is a compliance problem that should be answerable by a
+ * query rather than by opening a filing cabinet.
+ */
+type PractitionerDocumentKind = typeof PractitionerDocumentKind[keyof typeof PractitionerDocumentKind];
+declare const PractitionerDocumentKind: {
+  readonly siret: 'siret';
+  readonly urssaf: 'urssaf';
+  readonly contract: 'contract';
+  readonly insurance: 'insurance';
+  readonly diploma: 'diploma';
+};
+//#endregion
+//#region src/models/practitionerDocumentRead.d.ts
+/**
+ * One compliance document. Metadata only — never the file itself here.
+ */
+interface PractitionerDocumentRead {
+  expiresAt?: string | null;
+  filename?: string | null;
+  id: number;
+  isLapsed?: boolean;
+  issuedAt?: string | null;
+  kind: PractitionerDocumentKind;
+  userId: number;
+}
+//#endregion
+//#region src/models/practitionerDocumentListRead.d.ts
+/**
+ * A practitioner's documents, or everything lapsing.
+ */
+interface PractitionerDocumentListRead {
+  data: PractitionerDocumentRead[];
+}
+//#endregion
+//#region src/models/practitionerRead.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * A teacher, dispatcher or coach as the back office sees them.
+ *
+ * No IBAN and no document contents. Those are the most sensitive non-health
+ * data in the schema and they belong to contractors rather than customers, so
+ * they are not in a list model — see the GDPR note in
+ * ``app.models.tutoring.workforce``.
+ */
+interface PractitionerRead {
+  capabilities?: string[];
+  displayName: string;
+  email?: string | null;
+  engagedAt?: string | null;
+  hasLapsedDocument?: boolean;
+  isAvailable?: boolean;
+  isTestOnly?: boolean;
+  levelIds?: number[];
+  mainSubjectId?: number | null;
+  roles?: string[];
+  subjectIds?: number[];
+  userId: number;
+}
+//#endregion
+//#region src/models/practitionerPage.d.ts
+/**
+ * A page of practitioners.
+ */
+interface PractitionerPage {
+  data: PractitionerRead[];
+  meta: PageMeta;
+}
+//#endregion
+//#region src/models/practitionerWrite.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * What the back office may change about a practitioner.
+ *
+ * Competencies are a wholesale replace rather than add/remove endpoints: the
+ * screen shows a checklist and submits it, and two lists are cheaper to reason
+ * about than a diff protocol. Absent means unchanged; an empty list means none.
+ *
+ * **Roles are not here.** They were, briefly, and it was the wrong place: this
+ * endpoint can only reach somebody who already has a ``practitioner_profile``
+ * row, so ``student``, ``parent``, ``librarian`` and ``support`` could not be
+ * granted at all — and it only ever wrote Prof Express, at the caller's own
+ * tenant. Granting is ``PUT /admin/users/{id}/product-roles``, which is
+ * cross-product, takes an explicit organisation, and is audited.
+ */
+interface PractitionerWrite {
+  capabilities?: string[] | null;
+  isAvailable?: boolean | null;
+  isTestOnly?: boolean | null;
+  levelIds?: number[] | null;
+  mainSubjectId?: number | null;
+  subjectIds?: number[] | null;
+}
+//#endregion
+//#region src/models/preferencesRead.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * The caller's preferences (E28).
+ *
+ * One key today. It stays an object rather than a bare array so that a second
+ * preference can be added without a breaking change.
+ */
+interface PreferencesRead {
+  categories: number[];
+}
+//#endregion
+//#region src/models/pressArticleListReadFilters.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+type PressArticleListReadFilters = {
+  [key: string]: unknown;
+};
+//#endregion
+//#region src/models/pressArticleListRead.d.ts
+/**
+ * The press list with its own navigation aids (E41).
+ *
+ * The legacy page also carried four carousels — ``latest``, ``lastRead``,
+ * ``favorites`` and ``favoritesByTheme`` — which are **commented out and
+ * hardcoded to empty** in the source. They are absent here on purpose. Adding
+ * them is a product decision; inheriting four empty arrays is not.
+ */
+interface PressArticleListRead {
+  data: PressArticleSummaryRead[];
+  filters?: PressArticleListReadFilters;
+  meta: PageMeta;
+  themes?: ThemeRefRead[];
+}
+//#endregion
+//#region src/models/pressArticleRead.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * One press article (E42). PROVISIONAL beyond the named fields.
+ *
+ * The legacy ``GET /press/{id}`` dereferences the article unguarded, so an
+ * unknown or non-entitled id returns ``500`` (defect D12). It is ``404`` here.
+ */
+interface PressArticleRead {
+  articleId: number;
+  body?: string | null;
+  favorited: boolean;
+  publishedAt?: string | null;
+  themeId?: number | null;
+  title: string;
+}
+//#endregion
+//#region src/models/productGrantRead.d.ts
+/**
+ * One grant: what somebody is, where, in which product.
+ */
+interface ProductGrantRead {
+  grantedAt: string;
+  product: Product;
+  role: ProductRole;
+  tenantId: number;
+}
+//#endregion
+//#region src/models/productGrantListRead.d.ts
+/**
+ * Every grant this account holds, across products and organisations.
+ */
+interface ProductGrantListRead {
+  data: ProductGrantRead[];
+}
+//#endregion
+//#region src/models/productGrantWrite.d.ts
+/**
+ * Replace this account's roles for one product at one organisation.
+ *
+ * Wholesale rather than add/remove: a checklist is what the screen shows, and
+ * two sets are cheaper to reason about than a diff protocol. An empty
+ * ``roles`` revokes everything for that pairing, which is a real instruction
+ * and the way to take a remit away.
+ *
+ * Scoped to **one** ``(tenant, product)`` pair, so setting somebody's Prof
+ * Express roles at one library cannot silently drop the librarian grant that
+ * makes them staff at another, or the support remit they hold for biblio.
+ *
+ * ``tenantId`` is explicit rather than taken from the caller's token: a vendor
+ * operator administers grants at the libraries beneath them, and defaulting to
+ * their own tenant would make that impossible while looking like it worked.
+ */
+interface ProductGrantWrite {
+  product: Product;
+  reason?: string | null;
+  /** @maxItems 8 */
+  roles?: ProductRole[];
+  /** @minimum 1 */
+  tenantId: number;
+}
+//#endregion
+//#region src/models/profileCreateWrite.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * Add a profile to the caller's account (E21).
+ *
+ * The ten-profile cap is enforced *here*. In the legacy it was enforced only on
+ * the form route ``GET /createprofile`` and never on the write, so it is
+ * bypassable today by anyone posting directly. Exceeding it is
+ * ``409 PROFILE_LIMIT_REACHED``; validation failure is ``422``, not the ``200``
+ * with an error message the legacy returned.
+ */
+interface ProfileCreateWrite {
+  avatar?: string | null;
+  birthDate?: string | null;
+  /**
+   * @minLength 1
+   * @maxLength 200
+   */
+  firstName: string;
+  lastName?: string | null;
+}
+//#endregion
+//#region src/models/profileRead.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * One profile under the caller's account (E20 item shape, E22 whole body).
+ *
+ * ``avatar`` is a string, not the integer the spec writes. The spec was
+ * describing the legacy wire format; ``app.models.identity.User.avatar`` is
+ * ``TEXT``, and inventing an integer here would mean a lossy parse in the mapper
+ * for no gain now that the clients are being rebuilt anyway. Same reasoning for
+ * ``last_name``, which is nullable on the model.
+ */
+interface ProfileRead {
+  avatar?: string | null;
+  firstName: string;
+  isAccountHolder: boolean;
+  lastName?: string | null;
+  /** @minimum 1 */
+  profileId: number;
+}
+//#endregion
+//#region src/models/profileListRead.d.ts
+/**
+ * The caller's profiles (E20).
+ *
+ * Unpaginated: the account holds at most ten (see
+ * :class:`ProfileCreateWrite`), so there is no ``meta`` block.
+ *
+ * One endpoint replaces two legacy routes — ``GET /profiles`` and
+ * ``GET /profile/manage`` rendered the same collection two different ways. The
+ * difference was presentation, which is now the client's problem.
+ */
+interface ProfileListRead {
+  data: ProfileRead[];
+}
+//#endregion
+//#region src/models/profileUpdateWrite.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * Partially update one of the caller's profiles (E23).
+ *
+ * Keep the one good habit the legacy had here: after confirming ownership, it
+ * overwrites the identity fields in the payload from the trusted server-side
+ * record, so body tampering cannot retarget the write. That is why no
+ * ``profile_id`` field exists on this model — the target comes from the path.
+ */
+interface ProfileUpdateWrite {
+  avatar?: string | null;
+  birthDate?: string | null;
+  firstName?: string | null;
+  lastName?: string | null;
+}
+//#endregion
+//#region src/models/ratingUpdateWrite.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * Rate a document (``POST /document/rating/update``).
+ *
+ * Legacy ``docid`` moves to the path; only the value stays in the body.
+ */
+interface RatingUpdateWrite {
+  /**
+   * @minimum 0
+   * @maximum 5
+   */
+  note: number;
+}
+//#endregion
+//#region src/models/readCatalogParams.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+type ReadCatalogParams = {
+  /**
+   * @minimum 1
+   */
+  page?: number;
+  /**
+   * @minimum 1
+   * @maximum 100
+   */
+  limit?: number;
+};
+//#endregion
+//#region src/models/readCatalogThemeParams.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+type ReadCatalogThemeParams = {
+  /**
+   * @minimum 1
+   */
+  page?: number;
+  /**
+   * @minimum 1
+   * @maximum 100
+   */
+  limit?: number;
+};
+//#endregion
+//#region src/models/readEditorParams.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+type ReadEditorParams = {
+  /**
+   * @minimum 1
+   */
+  page?: number;
+  /**
+   * @minimum 1
+   * @maximum 100
+   */
+  limit?: number;
+};
+//#endregion
+//#region src/models/readerPackageRead.d.ts
+/**
+ * Where the reader front-end fetches the content itself.
+ *
+ * ``url`` is a short-lived, DRM-wrapped location issued by the partner. It is a
+ * credential: it should not be logged, cached by a shared proxy, or stored.
+ *
+ * Two expiries here, and they are not the same thing. ``expiresAt`` is the
+ * partner's deadline on that URL. ``lease.expiresAt`` is ours, on the seat the
+ * read occupies.
+ */
+interface ReaderPackageRead {
+  expiresAt?: string | null;
+  format: string;
+  lease: LeaseRead;
+  url: string;
+}
+//#endregion
+//#region src/models/readHomeFeedParams.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+type ReadHomeFeedParams = {
+  /**
+   * @minimum 1
+   * @maximum 50
+   */
+  limit?: number;
+};
+//#endregion
+//#region src/models/readingPositionRead.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * Where this reader last was.
+ *
+ * Both shapes the partner uses share ``reached_at`` and ``percentage``; the
+ * rest is format-specific and nullable rather than split into two models,
+ * because a client renders a progress bar from ``percentage`` without caring
+ * which it got.
+ */
+interface ReadingPositionRead {
+  elapsedTime?: number | null;
+  idref?: string | null;
+  path?: string | null;
+  /**
+   * @minimum 0
+   * @maximum 1
+   */
+  percentage: number;
+  reachedAt: string;
+}
+//#endregion
+//#region src/models/readingPositionWriteUsageBlocks.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+type ReadingPositionWriteUsageBlocks = {
+  [key: string]: unknown;
+}[] | null;
+//#endregion
+//#region src/models/readingPositionWrite.d.ts
+/**
+ * Report progress.
+ *
+ * ``reached_at`` is required and must carry a timezone. The legacy took epoch
+ * milliseconds and divided; an instant with an offset is the same information
+ * without a conversion that can silently be wrong by hours.
+ *
+ * A caller sends the pair for its format: ``path``/``idref`` for EPUB,
+ * ``elapsed_time`` for audio. Sending neither still records ``percentage``,
+ * which is what a progress bar needs.
+ */
+interface ReadingPositionWrite {
+  elapsedTime?: number | null;
+  idref?: string | null;
+  path?: string | null;
+  /**
+   * @minimum 0
+   * @maximum 1
+   */
+  percentage: number;
+  reachedAt: string;
+  usageBlocks?: ReadingPositionWriteUsageBlocks;
+}
+//#endregion
+//#region src/models/readingSessionRead.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * The stored session's id (E54).
+ *
+ * ``201`` with a ``Location`` header on first write for a tag, ``200`` when the
+ * tag already existed. Never an error for a repeat — that is what idempotent
+ * means (§2.6).
+ */
+interface ReadingSessionRead {
+  id: number;
+}
+//#endregion
+//#region src/models/readingSessionWrite.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * Record one content-consumption session (E54).
+ *
+ * ``PUT /reading-sessions/{sessionTag}`` — idempotent on a client-generated
+ * tag carried in the path. The legacy handler already checked whether the tag
+ * existed and returned success rather than duplicating, which is exactly an
+ * upsert keyed by a client-supplied identifier; the verb now says so.
+ *
+ * **There is no ``user_id`` and no ``client_id``, and there must never be.**
+ * The legacy ``POST /api/v1/sessions`` was unauthenticated and took both from
+ * the body without checking either against any credential, so consumption
+ * records were forgeable for any account (defect D3). Both are derived from the
+ * credential (§3.3).
+ *
+ * ``end_time`` before ``start_time`` is ``422``, as is an unparseable timestamp
+ * — the legacy returned ``500`` for malformed JSON here.
+ */
+interface ReadingSessionWrite {
+  /** @minimum 1 */
+  contentId: number;
+  endTime: string;
+  startTime: string;
+}
+//#endregion
+//#region src/models/readPackageParams.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+type ReadPackageParams = {
+  /**
+   * @pattern ^(epub|audio)$
+   */
+  format?: string;
+};
+//#endregion
+//#region src/models/readPackParams.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+type ReadPackParams = {
+  /**
+   * @minimum 1
+   */
+  page?: number;
+  /**
+   * @minimum 1
+   * @maximum 100
+   */
+  limit?: number;
+};
+//#endregion
+//#region src/models/readPatronLicenseParams.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+type ReadPatronLicenseParams = {
+  /**
+   * @minLength 3
+   * @maxLength 200
+   */
+  email: string;
+};
+//#endregion
+//#region src/models/readPressReviewParams.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+type ReadPressReviewParams = {
+  theme_id?: number | null;
+  /**
+   * @minimum 1
+   * @maximum 50
+   */
+  limit?: number;
+};
+//#endregion
+//#region src/models/readRecommendationsParams.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+type ReadRecommendationsParams = {
+  /**
+   * @minimum 1
+   * @maximum 50
+   */
+  limit?: number;
+};
+//#endregion
+//#region src/models/recommendationsRead.d.ts
+/**
+ * Recommendations for a content item (E35). Unpaginated, capped by ``limit``.
+ *
+ * New as an endpoint; the legacy embedded this in the content page.
+ */
+interface RecommendationsRead {
+  data: ContentSummaryRead[];
+}
+//#endregion
+//#region src/models/refreshWrite.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * Exchange a refresh token for a new pair.
+ *
+ * The refresh token is itself the credential, so the endpoint takes no bearer.
+ * Rotation is enforced at the broker: the presented token is invalidated as the
+ * new pair is issued.
+ *
+ * Field name is snake_case on the wire for the same RFC 6749 reason as
+ * :class:`TokenPairRead`.
+ */
+interface RefreshWrite {
+  /**
+   * @minLength 1
+   * @maxLength 8192
+   */
+  refresh_token: string;
+}
+//#endregion
+//#region src/models/reviewModerationRead.d.ts
+/**
+ * One review awaiting a decision.
+ */
+interface ReviewModerationRead {
+  documentId?: number | null;
+  id: number;
+  rating?: number | null;
+  state: ReviewState;
+  submittedAt?: string | null;
+  tenantId?: number | null;
+  text?: string | null;
+  userId?: number | null;
+}
+//#endregion
+//#region src/models/reviewPage.d.ts
+interface ReviewPage {
+  data: ReviewModerationRead[];
+  meta: PageMeta;
+}
+//#endregion
+//#region src/models/reviewRead.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * A patron's written review — ``Entity/Review.php``.
+ */
+interface ReviewRead {
+  documentId: number;
+  id: number;
+  rating?: number;
+  text?: string | null;
+}
+//#endregion
+//#region src/models/reviewUpdateWrite.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * Write or amend a review (``POST /document/review/update/{docId}[/{avisId}]``).
+ *
+ * Both identifiers stay in the path, as the legacy already has them there.
+ */
+interface ReviewUpdateWrite {
+  /**
+   * @minimum 0
+   * @maximum 5
+   */
+  note: number;
+  /**
+   * @minLength 1
+   * @maxLength 20000
+   */
+  text: string;
+}
+//#endregion
+//#region src/models/searchNavigationRead.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * One tab of the search result navigation (E46).
+ *
+ * This is what replaces the legacy redirect: rather than bouncing the client to
+ * a corrected URL, the response describes which families are valid, how many
+ * hits each holds, and which one is active.
+ */
+interface SearchNavigationRead {
+  active: boolean;
+  label: string;
+  total: number;
+  type: string;
+}
+//#endregion
+//#region src/models/searchParams.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+type SearchParams = {
+  /**
+   * @minimum 1
+   */
+  page?: number;
+  /**
+   * @minimum 1
+   * @maximum 100
+   */
+  limit?: number;
+  /**
+   * @maxLength 100
+   */
+  q?: string;
+  type?: string | null;
+  filter?: string | null;
+};
+//#endregion
+//#region src/models/searchResultsRead.d.ts
+/**
+ * Search results plus the family navigation (E46).
+ */
+interface SearchResultsRead {
+  data: ContentSummaryRead[];
+  meta: PageMeta;
+  navigation?: SearchNavigationRead[];
+}
+//#endregion
+//#region src/models/serviceRead.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * A third-party service the caller's establishment entitles them to (E27).
+ *
+ * PROVISIONAL. ``url`` is the handoff into the supplier's own platform.
+ */
+interface ServiceRead {
+  serviceId: number;
+  title: string;
+  url: string;
+}
+//#endregion
+//#region src/models/serviceListRead.d.ts
+/**
+ * The caller's services (E27). Unpaginated.
+ */
+interface ServiceListRead {
+  data: ServiceRead[];
+}
+//#endregion
+//#region src/models/sessionRead.d.ts
+/**
+ * A token pair plus who it belongs to.
+ *
+ * Returned by the code exchange, the refresh and the direct grant. One shape
+ * for all three, so a client has one branch rather than three.
+ */
+interface SessionRead {
+  access_token: string;
+  account: AccountRead;
+  expires_in: number;
+  principal: PrincipalRead;
+  refresh_expires_in?: number | null;
+  refresh_token?: string | null;
+}
+//#endregion
+//#region src/models/staffLicenseRead.d.ts
+/**
+ * Staff diagnostic for one account's licence state (E51).
+ *
+ * **Diagnostics must not provision.** When the account has no licence, report
+ * ``license_number: None`` — do not create one. The legacy route did, which is
+ * why a support lookup could silently consume a seat from the establishment's
+ * pool (defect D18).
+ *
+ * The upstream payload does not appear here. An earlier draft passed
+ * ``subscription`` and ``session`` through as open mappings with a note that
+ * they must be filtered first; concrete fields are the same information without
+ * a filter anybody can forget. ``partner_active`` is ``None`` when the partner
+ * could not be asked — distinct from ``False``, which means it answered.
+ */
+interface StaffLicenseRead {
+  assignedAt?: string | null;
+  isActive: boolean;
+  licenseNumber?: string | null;
+  partnerActive?: boolean | null;
+  provider: PartnerProvider;
+  revokedAt?: string | null;
+  /** @minimum 0 */
+  seatsLimit: number;
+  /** @minimum 0 */
+  seatsUsed: number;
+  user: LicenseUserRead;
+}
+//#endregion
+//#region src/models/streamingSessionRead.d.ts
+/**
+ * A started streaming session: what to play, and how.
+ *
+ * ``document`` is the full sheet because the player renders from it directly;
+ * a list context should use
+ * ``app.datamodels.cvs.documents.DocumentSummaryRead`` instead.
+ */
+interface StreamingSessionRead {
+  chromecast?: ChromecastRead | null;
+  document?: DocumentRead | null;
+  drm?: DrmRead | null;
+  expiresAt?: string | null;
+  streamUrl?: string | null;
+}
+//#endregion
+//#region src/models/streamingStartQuery.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * Begin a streaming session (``/streaming/post-execute``, ``/from-app-execute``).
+ *
+ * ``parental_code`` and ``token`` are secrets in a query string in the legacy;
+ * both belong in a header or the body.
+ */
+interface StreamingStartQuery {
+  /** @minimum 1 */
+  docId: number;
+  hideQuotaMessage?: boolean | null;
+  parentalCode?: string | null;
+  token?: string | null;
+}
+//#endregion
+//#region src/models/subjectRead.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * A school subject, as the request form offers it.
+ *
+ * ``enabledSurfaces`` is deliberately exposed rather than filtered server-side:
+ * one client renders the request form and the chatbot picker from the same
+ * payload, and filtering per call would mean two requests for one list.
+ */
+interface SubjectRead {
+  colour?: string | null;
+  enabledSurfaces?: string[];
+  id: number;
+  isBacSpecialty?: boolean;
+  isBrevetSpecialty?: boolean;
+  languageCode?: string | null;
+  name: string;
+  slug: string;
+}
+//#endregion
+//#region src/models/subjectListRead.d.ts
+/**
+ * Every subject a pupil may ask about.
+ */
+interface SubjectListRead {
+  data: SubjectRead[];
+}
+//#endregion
+//#region src/models/subjectWrite.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * Create or amend a subject. Reference data somebody has to maintain.
+ */
+interface SubjectWrite {
+  colour?: string | null;
+  /**
+   * @minimum 0
+   * @maximum 999
+   */
+  displayOrder?: number;
+  /** @maxItems 20 */
+  enabledSurfaces?: string[];
+  isActive?: boolean;
+  isBacSpecialty?: boolean;
+  isBrevetSpecialty?: boolean;
+  languageCode?: string | null;
+  /**
+   * @minLength 1
+   * @maxLength 200
+   */
+  name: string;
+  /**
+   * @minLength 1
+   * @maxLength 200
+   * @pattern ^[a-z0-9]+(?:-[a-z0-9]+)*$
+   */
+  slug: string;
+}
+//#endregion
+//#region src/models/supplierGrantRead.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * Authorisation to open one title at the supplier that hosts it.
+ *
+ * Replaces the legacy's ``wstoken``, whose response shape depended on which of
+ * 57 ``switch`` arms produced it — sometimes a ``redirect``, sometimes a
+ * ``paramsapp`` object the mobile client assembled a URL from, sometimes both.
+ * One shape here, for all of them.
+ *
+ * **This is not an access token for us.** It is a signed assertion *to a third
+ * party*: the supplier verifies ``token`` against a secret we share with them,
+ * and it says that this patron, from this library, may open this item until
+ * ``expiresAt``. Nothing in it authenticates anyone to this API.
+ *
+ * ``itemRef`` is the supplier's own reference, taken verbatim from the
+ * catalogue. Its shape is the supplier's business and varies by platform — a
+ * product id for Youscribe, a URL for Cerimes, a JSON document for PNB. A
+ * client that knows the platform knows what to do with it; one that does not
+ * should treat it as opaque.
+ */
+interface SupplierGrantRead {
+  eventId: number;
+  expiresAt: string;
+  itemRef: string;
+  platform: number;
+  publisher?: string | null;
+  token: string;
+}
+//#endregion
+//#region src/models/supportSessionRead.d.ts
+/**
+ * An open support session (E56).
+ *
+ * **No tokens.** The previous shape returned an access/refresh pair from
+ * Keycloak's token exchange, and that could not be made safe: the exchanged
+ * token carried no actor claim, so every request made with it read as the
+ * patron's own, and it carried no assurance claim either — which
+ * ``clamp_assurance`` treats as *unconstrained*, so the operator resolved to
+ * HIGH and could close the account. The one thing the design promised to
+ * prevent.
+ *
+ * So the operator keeps their own token and sends ``X-Acting-As: <id>`` with
+ * it. Three properties follow, all of which the legacy session lacked and the
+ * exchanged token could not provide:
+ *
+ * * **short-lived** — this row owns the deadline, not the realm;
+ * * **distinguishable** — the authenticated subject stays the operator, so logs
+ *   and audit rows name both parties;
+ * * **incapable of privileged operations** — the session is clamped to the
+ *   lowest assurance, so changing a password (E14) or closing the account (E17)
+ *   is refused by the guard that already exists.
+ */
+interface SupportSessionRead {
+  actingAsUserId: number;
+  expiresAt: string;
+  id: number;
+  product: Product;
+}
+//#endregion
+//#region src/models/tenantSettingsReadSettings.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+type TenantSettingsReadSettings = {
+  [key: string]: unknown;
+};
+//#endregion
+//#region src/models/tenantSettingsRead.d.ts
+/**
+ * A tenant's configuration, as the back office sees it.
+ *
+ * ``settings`` is the JSONB blob the 115-column ``bm`` table collapses into.
+ * Anything filtered or joined on across tenants is a promoted column instead and
+ * appears beside it here, which is why this shape is a handful of named fields
+ * plus one bag rather than one bag.
+ */
+interface TenantSettingsRead {
+  blocksIndividualAccounts: boolean;
+  forcesIndividualAccounts: boolean;
+  isActive: boolean;
+  isInMaintenance: boolean;
+  kind: string;
+  name: string;
+  parentId?: number | null;
+  settings?: TenantSettingsReadSettings;
+  tenantId: number;
+}
+//#endregion
+//#region src/models/tenantSettingsUpdateWriteSettings.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+type TenantSettingsUpdateWriteSettings = {
+  [key: string]: unknown;
+} | null;
+//#endregion
+//#region src/models/tenantSettingsUpdateWrite.d.ts
+/**
+ * What an operator may change.
+ *
+ * ``settings`` replaces the whole blob when present. That is blunt, and it is
+ * the honest shape for a client that read the object, edited a field and is
+ * sending it back — a merge would silently drop a key the client meant to
+ * remove, and there is no way to tell the two apart in JSON.
+ *
+ * ``kind`` and ``parent_id`` are absent: moving a tenant in the tree changes who
+ * can administer it, which is not a settings edit.
+ */
+interface TenantSettingsUpdateWrite {
+  blocksIndividualAccounts?: boolean | null;
+  forcesIndividualAccounts?: boolean | null;
+  isActive?: boolean | null;
+  isInMaintenance?: boolean | null;
+  name?: string | null;
+  settings?: TenantSettingsUpdateWriteSettings;
+}
+//#endregion
+//#region src/models/themeRead.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * One catalogue theme. Legacy ``themes`` / ``ThemeController``.
+ *
+ * ``pillar`` is the médiathèque's top-level division (video, music, press…).
+ * It is part of the natural key — ``(pillar, title)`` is unique — so two
+ * pillars may each have a "Documentaires" and they are different themes.
+ */
+interface ThemeRead {
+  id: number;
+  isDewey?: boolean;
+  physicalCode?: string | null;
+  pillar: number;
+  sortOrder: number;
+  title: string;
+  updatedAt?: string | null;
+  workCount?: number;
+}
+//#endregion
+//#region src/models/themeListRead.d.ts
+/**
+ * Every theme in one pillar, in display order.
+ */
+interface ThemeListRead {
+  data?: ThemeRead[];
+  total: number;
+}
+//#endregion
+//#region src/models/themeOrderWrite.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * Reorder a pillar's themes in one call.
+ *
+ * The legacy has a ``renumber`` route per theme, so moving one item was one
+ * request per item and a half-applied order was reachable by closing the tab.
+ * Here the whole pillar's order is one body and one transaction.
+ *
+ * Ids not named keep their relative order after the ones that are, so a client
+ * may send only what moved.
+ */
+interface ThemeOrderWrite {
+  /**
+   * @minItems 1
+   * @maxItems 500
+   */
+  orderedIds: number[];
+}
+//#endregion
+//#region src/models/themeWrite.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * Create or amend a theme.
+ *
+ * ``sortOrder`` is optional on create: a theme with no stated position goes
+ * last, which is what the legacy's form does by defaulting the field to the
+ * current maximum plus one.
+ */
+interface ThemeWrite {
+  isDewey?: boolean;
+  physicalCode?: string | null;
+  /**
+   * @minimum 0
+   * @maximum 32767
+   */
+  pillar: number;
+  sortOrder?: number | null;
+  /**
+   * @minLength 1
+   * @maxLength 248
+   */
+  title: string;
+}
+//#endregion
+//#region src/models/tutoringAnswerWrite.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * A practitioner delivering an answer.
+ *
+ * ``attachmentIds`` names files already uploaded against this request, rather
+ * than carrying bytes: an answer with a 20 MB PDF should not be one request
+ * that either succeeds or has to be retyped.
+ */
+interface TutoringAnswerWrite {
+  /** @maxItems 20 */
+  attachmentIds?: number[];
+  /**
+   * @minLength 1
+   * @maxLength 20000
+   */
+  body: string;
+}
+//#endregion
+//#region src/models/tutoringAttachmentRead.d.ts
+/**
+ * One file on a request.
+ *
+ * ``url`` is a short-lived signed link, minted per response. There is no
+ * endpoint that takes a storage key from a client: the legacy stores paths in a
+ * serialised list and serves them by path, which is a traversal waiting to
+ * happen.
+ */
+interface TutoringAttachmentRead {
+  byteSize?: number | null;
+  filename?: string | null;
+  id: number;
+  mimeType?: string | null;
+  role: AttachmentRole;
+  url?: string | null;
+}
+//#endregion
+//#region src/models/tutoringCloseReason.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * Why a request closed without succeeding.
+ *
+ * Collapses ``inquiry_status_reasons`` and ``inquiry_status_fail_reasons`` —
+ * two tables, four columns between them, joined through two more nullable
+ * sentinel-zero columns on every inquiry. The values here are the ones the
+ * rebuilt flow can actually produce; the legacy tables' contents come back
+ * from the probe and any distinct reason with volume earns a member.
+ */
+type TutoringCloseReason = typeof TutoringCloseReason[keyof typeof TutoringCloseReason];
+declare const TutoringCloseReason: {
+  readonly no_teacher_available: 'no_teacher_available';
+  readonly out_of_hours: 'out_of_hours';
+  readonly pupil_unreachable: 'pupil_unreachable';
+  readonly out_of_scope: 'out_of_scope';
+  readonly duplicate: 'duplicate';
+  readonly withdrawn: 'withdrawn';
+  readonly technical: 'technical';
+  readonly no_show: 'no_show';
+  readonly account_problem: 'account_problem';
+  readonly password_problem: 'password_problem';
+};
+//#endregion
+//#region src/models/tutoringCloseWrite.d.ts
+/**
+ * Closing a request without an answer.
+ *
+ * The reason is fixed rather than free text, for the same reason the lease's
+ * is: the legacy stored a sentinel-zero id into one of two reason tables, so
+ * "why did this fail" was answerable only by joining two tables that might
+ * both say nothing.
+ */
+interface TutoringCloseWrite {
+  note?: string | null;
+  reason: TutoringCloseReason;
+}
+//#endregion
+//#region src/models/tutoringDeliveryRead.d.ts
+/**
+ * One attempt to deliver an answer.
+ *
+ * ``joinUrl`` is the pupil's link and is the only one of the supplier's two
+ * URLs a pupil may see — ``hostUrl`` admits its holder as the session's host.
+ */
+interface TutoringDeliveryRead {
+  channel: TutoringChannel;
+  endedAt?: string | null;
+  id: number;
+  joinUrl?: string | null;
+  provider?: string | null;
+  startedAt?: string | null;
+}
+//#endregion
+//#region src/models/tutoringDispatchWrite.d.ts
+/**
+ * A dispatcher routing a request.
+ *
+ * Either to a named practitioner, or to the open pool by leaving
+ * ``practitionerId`` null — which is what the legacy's "diff" queue is. The
+ * dispatcher may also correct the channel, because pupils choose one and then
+ * turn out not to have a working microphone.
+ */
+interface TutoringDispatchWrite {
+  channel?: TutoringChannel | null;
+  note?: string | null;
+  practitionerId?: number | null;
+}
+//#endregion
+//#region src/models/tutoringFeedbackModerationWrite.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * Clear a rating for the public showcase, or withhold it.
+ */
+interface TutoringFeedbackModerationWrite {
+  isPublishable: boolean;
+}
+//#endregion
+//#region src/models/tutoringFeedbackRead.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * A rating, as the back office reviews it.
+ *
+ * Mirrors ``/admin/reviews``: the same moderation shape for the same reason —
+ * a free-text comment written by a child, considered before it is shown.
+ */
+interface TutoringFeedbackRead {
+  comment?: string | null;
+  createdAt: string;
+  id: number;
+  isPublishable?: boolean;
+  rating: number;
+  requestId: number;
+}
+//#endregion
+//#region src/models/tutoringFeedbackPage.d.ts
+/**
+ * A page of ratings awaiting or past moderation.
+ */
+interface TutoringFeedbackPage {
+  data: TutoringFeedbackRead[];
+  meta: PageMeta;
+}
+//#endregion
+//#region src/models/tutoringFeedbackWrite.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * What the pupil thought of the answer.
+ */
+interface TutoringFeedbackWrite {
+  comment?: string | null;
+  /**
+   * @minimum 1
+   * @maximum 5
+   */
+  rating: number;
+}
+//#endregion
+//#region src/models/tutoringQueueItemRead.d.ts
+/**
+ * One waiting request, as a dispatcher sees the queue.
+ *
+ * Carries what routing needs and nothing more. No attachments, no contact
+ * numbers, and ``statementExcerpt`` rather than the full text: a dispatcher
+ * triaging forty requests a minute needs the gist, and the full statement is
+ * one click away on the detail route.
+ */
+interface TutoringQueueItemRead {
+  /** @minimum 0 */
+  attachmentCount: number;
+  channel: TutoringChannel;
+  id: number;
+  kind: TutoringKind;
+  levelId: number;
+  practitionerId?: number | null;
+  statementExcerpt: string;
+  status: TutoringStatus;
+  subjectId: number;
+  submittedAt: string;
+  /** @minimum 0 */
+  waitingSeconds: number;
+}
+//#endregion
+//#region src/models/tutoringQueuePage.d.ts
+/**
+ * A page of the dispatch queue, oldest first.
+ */
+interface TutoringQueuePage {
+  data: TutoringQueueItemRead[];
+  meta: PageMeta;
+}
+//#endregion
+//#region src/models/tutoringRequestAdminCloseWrite.d.ts
+/**
+ * Closing a request from the back office, with a reason.
+ */
+interface TutoringRequestAdminCloseWrite {
+  note?: string | null;
+  reason: TutoringCloseReason;
+}
+//#endregion
+//#region src/models/tutoringRequestAdminWrite.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+/**
+ * Staff corrections to a request in flight.
+ *
+ * Reassignment and a note in one call, because that is how the work actually
+ * happens: an operator moves a stalled request and says why in the same
+ * breath. The legacy needs two screens and two routes.
+ *
+ * Every field is optional and only what is present is applied — a partial
+ * update, so a client that knows about one field cannot blank the others.
+ */
+interface TutoringRequestAdminWrite {
+  dispatcherId?: number | null;
+  practitionerId?: number | null;
+  staffNote?: string | null;
+}
+//#endregion
+//#region src/models/tutoringRequestRead.d.ts
+/**
+ * A request as the pupil who asked it sees it.
+ */
+interface TutoringRequestRead {
+  answeredAt?: string | null;
+  attachments?: TutoringAttachmentRead[];
+  channel: TutoringChannel;
+  chapter?: string | null;
+  closeReason?: TutoringCloseReason | null;
+  closedAt?: string | null;
+  deliveries?: TutoringDeliveryRead[];
+  goalId?: number | null;
+  hasFeedback?: boolean;
+  id: number;
+  kind: TutoringKind;
+  levelId: number;
+  practitionerName?: string | null;
+  scheduledAt?: string | null;
+  statement: string;
+  status: TutoringStatus;
+  subjectId: number;
+  submittedAt: string;
+}
+//#endregion
+//#region src/models/tutoringRequestPage.d.ts
+/**
+ * A page of requests.
+ */
+interface TutoringRequestPage {
+  data: TutoringRequestRead[];
+  meta: PageMeta;
+}
+//#endregion
+//#region src/models/tutoringRequestStaffRead.d.ts
+/**
+ * The admin and support view: everything, plus where it came from.
+ *
+ * Extends the pupil's shape rather than redeclaring it, so a field added for
+ * pupils cannot be silently missing for staff.
+ */
+interface TutoringRequestStaffRead {
+  answeredAt?: string | null;
+  attachments?: TutoringAttachmentRead[];
+  channel: TutoringChannel;
+  chapter?: string | null;
+  claimedAt?: string | null;
+  closeReason?: TutoringCloseReason | null;
+  closedAt?: string | null;
+  consumptionEventId?: number | null;
+  deliveries?: TutoringDeliveryRead[];
+  dispatchedAt?: string | null;
+  dispatcherId?: number | null;
+  goalId?: number | null;
+  hasFeedback?: boolean;
+  id: number;
+  isFirstRequest?: boolean;
+  kind: TutoringKind;
+  legacyPartition?: string | null;
+  levelId: number;
+  practitionerId?: number | null;
+  practitionerName?: string | null;
+  requestedById?: number | null;
+  scheduledAt?: string | null;
+  staffNote?: string | null;
+  statement: string;
+  status: TutoringStatus;
+  studentId: number;
+  subjectId: number;
+  submittedAt: string;
+  tenantId: number;
+  triagedAt?: string | null;
+}
+//#endregion
+//#region src/models/tutoringRequestWrite.d.ts
+/**
+ * A pupil (or their parent) asking for help.
+ *
+ * ``channel`` is a request, not a decision: a tenant that has not enabled
+ * classroom delivery gets ``409``, and a dispatcher may move it anyway. The
+ * client sends what the pupil chose and the server decides what is possible.
+ *
+ * Notably absent: ``studentId``. The pupil is the authenticated caller, or a
+ * profile of theirs named by ``onBehalfOfId``. The legacy accepts a
+ * ``user_id`` on writes, and accepting one here would be an authorisation bug
+ * with a request body.
+ */
+interface TutoringRequestWrite {
+  channel: TutoringChannel;
+  chapter?: string | null;
+  contactMobile?: string | null;
+  goalId?: number | null;
+  kind: TutoringKind;
+  /** @minimum 1 */
+  levelId: number;
+  onBehalfOfId?: number | null;
+  preferredCallEnd?: string | null;
+  preferredCallStart?: string | null;
+  scheduledAt?: string | null;
+  /**
+   * @minLength 1
+   * @maxLength 20000
+   */
+  statement: string;
+  /** @minimum 1 */
+  subjectId: number;
+}
+//#endregion
+//#region src/models/tutoringRoomRead.d.ts
+/**
+ * The room a practitioner just opened, as they see it.
+ *
+ * Carries ``hostUrl``, which :class:`TutoringDeliveryRead` deliberately does
+ * not: whoever holds it is admitted as the session's host. Returned only to the
+ * practitioner the request is assigned to.
+ *
+ * With Meet the two URLs are the same string — it issues one link and decides
+ * what you get from who you are, admitting the owner and holding everybody else
+ * in the lobby. Vedamo issued two genuinely different links, so both fields
+ * stay, and a provider that distinguishes them again needs no change here.
+ */
+interface TutoringRoomRead {
+  channel: TutoringChannel;
+  hostUrl?: string | null;
+  id: number;
+  joinUrl?: string | null;
+  provider?: string | null;
+  startedAt?: string | null;
+}
+//#endregion
+//#region src/models/validationErrorDetailCtx.d.ts
+/**
+ * Generated by orval 🍺
+ * Do not edit manually.
+ * Mozaik backend
+ * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.
+ * OpenAPI spec version: 0.1.0
+ */
+type ValidationErrorDetailCtx = {
+  [key: string]: unknown;
+} | null;
+//#endregion
+//#region src/models/validationErrorDetail.d.ts
+/**
+ * One rejected field, as Pydantic reports it.
+ *
+ * ``loc`` is the path to the offending value — ``["query", "limit"]``,
+ * ``["body", "profiles", 0, "birth_date"]`` — which is what lets a client point
+ * at the field that failed instead of showing the whole message somewhere
+ * generic. ``type`` is the machine-readable reason (``string_too_long``,
+ * ``less_than_equal``), stable enough to branch on where a message is not.
+ *
+ * ``input`` and ``ctx`` are echoed back by Pydantic and genuinely sent, so they
+ * are declared: a field a client can see but the schema denies is the same
+ * class of bug this module exists to fix. ``input`` carries whatever the caller
+ * submitted, so it is typed loosely on purpose.
+ */
+interface ValidationErrorDetail {
+  ctx?: ValidationErrorDetailCtx;
+  input?: unknown | null;
+  loc: (string | number)[];
+  msg: string;
+  type: string;
+}
+//#endregion
+//#region src/models/validationErrorResponse.d.ts
+/**
+ * Body of a 422, either way it was produced.
+ *
+ * ``detail`` is a **list** when Pydantic rejected the request — the ordinary
+ * case, and the useful one. It is a plain string when a handler raised
+ * ``HTTPException(422, ...)`` for something structurally valid but semantically
+ * refused: a sort key outside its whitelist, a category the account cannot
+ * reach.
+ *
+ * The union is a description of what this API sends today, not an endorsement.
+ * One status carrying two shapes forces every client to type-test ``detail``
+ * before reading it. The tidier contract is 422 for Pydantic's shape alone with
+ * semantic refusals moved to 400, which is a change to the responses those
+ * handlers send — worth doing deliberately, not as a side effect of correcting
+ * the schema.
+ */
+interface ValidationErrorResponse {
+  detail: ValidationErrorDetail[] | string;
+}
+//#endregion
+export { ReadPatronLicenseParams as $, FavoritePage as $n, AccountDetailRead as $r, MeRead as $t, TenantSettingsReadSettings as A, LikeRead as An, ConsumptionCloseReason as Ar, PlaybackReportWrite as At, ServiceListRead as B, LearningPathRefRead as Bn, PageMeta as Br, PartnerCategoryListRead as Bt, ThemeWrite as C, ListExpiringDocumentsParams as Cn, DemoUserWrite as Cr, PreferencesRead as Ct, TenantSettingsUpdateWrite as D, TutoringStatus as Dn, CredentialsWrite as Dr, PractitionerDocumentListRead as Dt, ThemeRead as E, ListAllRequestsParams as En, CurrentReadingRead as Er, PractitionerRead as Et, SubjectRead as F, LevelListRead as Fn, CategoryListRead as Fr, PatronDetailRead as Ft, ReviewUpdateWrite as G, HTTPExceptionResponse as Gn, BodyUploadAttachment as Gr, PackDetailReadFilters as Gt, SearchResultsRead as H, LearningPathStepRead as Hn, ContentType as Hr, PackListRead as Ht, StreamingStartQuery as I, LevelRead as In, CategoryRead as Ir, PartnerMediaRead as It, ReviewModerationRead as J, PressReviewSectionRead as Jn, AttachmentRole as Jr, ModerationWrite as Jt, ReviewRead as K, HomeFeedRead as Kn, AuthorizationRead as Kr, NotificationListRead as Kt, StreamingSessionRead as L, SchoolCycle as Ln, CatalogRefRead as Lr, PartnerMediaPage as Lt, SupplierGrantRead as M, LicenseRead as Mn, ChromecastRead as Mr, PatronUpdateWrite as Mt, SubjectWrite as N, PartnerProvider as Nn, ChatTicketRead as Nr, PatronPage as Nt, TenantSettingsUpdateWriteSettings as O, TutoringKind as On, ContentRead as Or, PractitionerDocumentRead as Ot, SubjectListRead as P, LevelWrite as Pn, CategoryPreferencesWrite as Pr, PatronSummaryRead as Pt, ReadPressReviewParams as Q, HistoryEntryRead as Qn, AccountRead as Qr, MessageKind as Qt, StaffLicenseRead as R, LeaseRead as Rn, CatalogRead as Rr, PartnerFavoriteListRead as Rt, TutoringAnswerWrite as S, ListFeedbackParams as Sn, DocumentInformationRead as Sr, PressArticleListReadFilters as St, ThemeListRead as T, ListBiblioFavoritesParams as Tn, CurrentReadingListRead as Tr, PractitionerPage as Tt, SearchParams as U, LastPositionWrite as Un, BorrowWrite as Ur, PackRead as Ut, ServiceRead as V, LearningPathDetailRead as Vn, ContentSummaryRead as Vr, PartnerCategoryRead as Vt, SearchNavigationRead as W, ImpersonationWrite as Wn, EntitlementAct as Wr, PackDetailRead as Wt, RecommendationsRead as X, HomeFeedSectionRead as Xn, AiDraftRead as Xr, MessagePage as Xt, RefreshWrite as Y, PressArticleSummaryRead as Yn, AiDraftReviewWrite as Yr, MessageWrite as Yt, ReadRecommendationsParams as Z, HistoryPage as Zn, AccountUpdateWrite as Zr, MessageRead as Zt, TutoringDispatchWrite as _, ListMediaParams as _n, LayerRead as _r, ProductGrantWrite as _t, TutoringRequestWrite as a, LiveLeaseRead as an, FavoriteKind as ar, ReadingPositionWriteUsageBlocks as at, TutoringCloseReason as b, ListHistoryParams as bn, Pillar as br, PressArticleRead as bt, TutoringRequestRead as c, ListReviewsParams as cn, EducationalGoalRead as cr, ReaderPackageRead as ct, TutoringQueuePage as d, ListPressArticlesParams as dn, EditorialSlideRead as dr, ReadCatalogParams as dt, ProductRoleRead as ei, PrincipalRead as en, FavoriteRead as er, ReadPackParams as et, TutoringQueueItemRead as f, ListPractitionersParams as fn, EditorDetailRead as fr, RatingUpdateWrite as ft, TutoringFeedbackModerationWrite as g, ListMessagesParams as gn, TrackRead as gr, ProfileCreateWrite as gt, TutoringFeedbackRead as h, ListMyRequestsParams as hn, DocumentRead as hr, ProfileRead as ht, TutoringRoomRead as i, LiveLeaseListRead as in, FavoriteAddWrite as ir, ReadingPositionWrite as it, SupportSessionRead as j, LicenseUserRead as jn, CodeExchangeWrite as jr, PlaybackReportRead as jt, TenantSettingsRead as k, TutoringChannel as kn, ContentPage as kr, PractitionerDocumentKind as kt, TutoringRequestAdminWrite as l, ReviewState as ln, EditorListRead as lr, ReadEditorParams as lt, TutoringFeedbackPage as m, ListNotificationsParams as mn, DocumentSearchWrite as mr, ProfileListRead as mt, ValidationErrorDetail as n, Product as ni, LoanPage as nn, FavoriteEntryRead as nr, ReadingSessionWrite as nt, TutoringRequestStaffRead as o, SubjectKind as on, EducationalGoalWrite as or, ReadingPositionRead as ot, TutoringFeedbackWrite as p, ListPatronsParams as pn, DrmRead as pr, ProfileUpdateWrite as pt, ReviewPage as q, PressReviewRead as qn, AuthorizationParams as qr, NotificationRead as qt, ValidationErrorDetailCtx as r, LoanRead as rn, SelectionRead as rr, ReadingSessionRead as rt, TutoringRequestPage as s, ListThemesParams as sn, EducationalGoalListRead as sr, ReadHomeFeedParams as st, ValidationErrorResponse as t, ProductRole as ti, LogoutWrite as tn, FavoriteListRead as tr, ReadPackageParams as tt, TutoringRequestAdminCloseWrite as u, ListQueueParams as un, EditorRead as ur, ReadCatalogThemeParams as ut, TutoringDeliveryRead as v, PartnerMediaType as vn, DocumentPage as vr, ProductGrantListRead as vt, ThemeOrderWrite as w, ListEditorsParams as wn, DemoUserRead as wr, PractitionerWrite as wt, TutoringAttachmentRead as x, ListGoalsParams as xn, DocumentLinkRead as xr, PressArticleListRead as xt, TutoringCloseWrite as y, ListLoansParams as yn, DocumentSummaryRead as yr, ProductGrantRead as yt, SessionRead as z, LeaseCloseWrite as zn, ThemeRefRead as zr, PartnerMediaSummaryRead as zt };
+//# sourceMappingURL=index-wL_20vR8.d.ts.map