@djangocfg/api 2.1.476 → 2.1.478

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@djangocfg/api",
-  "version": "2.1.476",
+  "version": "2.1.478",
   "description": "Auto-generated TypeScript API client with React hooks, SWR integration, and Zod validation for Django REST Framework backends",
   "keywords": [
     "django",
@@ -84,7 +84,7 @@
     "zod": "^4.3.6"
   },
   "devDependencies": {
-    "@djangocfg/typescript-config": "^2.1.476",
+    "@djangocfg/typescript-config": "^2.1.478",
     "@testing-library/react": "^16.3.2",
     "@types/node": "^25.9.5",
     "@types/react": "19.2.15",

package/src/_api/generated/_cfg_accounts/hooks/index.ts

@@ -10,6 +10,7 @@ export { useCfgAccountsOauthDisconnectCreate } from "./useCfgAccountsOauthDiscon
 export { useCfgAccountsOauthGithubAuthorizeCreate } from "./useCfgAccountsOauthGithubAuthorizeCreate";
 export { useCfgAccountsOauthGithubCallbackCreate } from "./useCfgAccountsOauthGithubCallbackCreate";
 export { useCfgAccountsOauthProvidersRetrieve } from "./useCfgAccountsOauthProvidersRetrieve";
+export { useCfgAccountsOtpConsentPolicyRetrieve } from "./useCfgAccountsOtpConsentPolicyRetrieve";
 export { useCfgAccountsOtpRequestCreate } from "./useCfgAccountsOtpRequestCreate";
 export { useCfgAccountsOtpVerifyCreate } from "./useCfgAccountsOtpVerifyCreate";
 export { useCfgAccountsProfileAvatarCreate } from "./useCfgAccountsProfileAvatarCreate";

package/src/_api/generated/_cfg_accounts/hooks/useCfgAccountsOtpConsentPolicyRetrieve.ts

@@ -0,0 +1,74 @@
+'use client';
+
+// AUTO-GENERATED by openapi_processor / ts.hooks
+// GET /cfg/accounts/otp/consent-policy/
+// DO NOT EDIT — re-run `make gen`.
+
+import useSWR from "swr";
+import type { SWRConfiguration } from "swr";
+import { CfgAccounts } from "../../sdk.gen";
+import type { CfgAccountsOtpConsentPolicyRetrieveData, CfgAccountsOtpConsentPolicyRetrieveResponses } from "../../types.gen";
+import { ConsentPolicySchema } from "../schemas/ConsentPolicy";
+
+type Result = CfgAccountsOtpConsentPolicyRetrieveResponses[keyof CfgAccountsOtpConsentPolicyRetrieveResponses];
+
+/**
+ * Optional `enabled` flag — when `false`, the SWR key becomes `null` and
+ * no request is made. Use for gated endpoints (auth-required, feature
+ * flags, "fetch only when X is selected"). The flag is stripped before
+ * being forwarded to `useSWR` so the underlying SWR config stays pristine.
+ */
+type HookConfig = SWRConfiguration<Result> & { enabled?: boolean };
+
+export function useCfgAccountsOtpConsentPolicyRetrieve(
+  args?: Omit<CfgAccountsOtpConsentPolicyRetrieveData, "url" | "body">,
+  config?: HookConfig,
+) {
+  const { enabled = true, ...swrConfig } = config ?? {};
+  const key = enabled ? ["cfg_accounts_otp_consent_policy_retrieve", args ?? {}] as const : null;
+  return useSWR<Result>(
+    key,
+    async () => {
+      const res = await CfgAccounts.cfgAccountsOtpConsentPolicyRetrieve({ ...(args ?? {}), throwOnError: true } as never);
+      const data = res.data as Result;
+      const parsed = ConsentPolicySchema.safeParse(data);
+      if (!parsed.success) {
+        // Log first so the failure is always visible, even if the
+        // event handler swallows it.
+        console.warn(
+          "[zod] response did not match schema",
+          {
+            operation: "cfg_accounts_otp_consent_policy_retrieve",
+            method: "GET",
+            path: "/cfg/accounts/otp/consent-policy/",
+            issues: parsed.error.issues,
+            data,
+          },
+        );
+        if (typeof window !== "undefined") {
+          try {
+            window.dispatchEvent(
+              new CustomEvent("zod-validation-error", {
+                detail: {
+                  operation: "cfg_accounts_otp_consent_policy_retrieve",
+                  method: "GET",
+                  path: "/cfg/accounts/otp/consent-policy/",
+                  issues: parsed.error.issues,
+                  data,
+                  timestamp: new Date(),
+                },
+                bubbles: true,
+                cancelable: false,
+              }),
+            );
+          } catch {
+            // Event dispatch is best-effort.
+          }
+        }
+        return data;
+      }
+      return parsed.data as unknown as Result;
+    },
+    swrConfig,
+  );
+}

package/src/_api/generated/_cfg_accounts/openapi.json

@@ -450,6 +450,40 @@
         "x-async-capable": false
       }
     },
+    "/cfg/accounts/otp/consent-policy/": {
+      "get": {
+        "operationId": "cfg_accounts_otp_consent_policy_retrieve",
+        "description": "Marketing-consent checkbox policy for the caller's jurisdiction.\n\nDerived from the edge-provided CF-IPCountry — the same signal stored\nas consent evidence at request time. Unknown country fails safe to\n\"unchecked\".",
+        "tags": [
+          "cfg_accounts"
+        ],
+        "security": [
+          {
+            "apiKeyAuth": []
+          },
+          {
+            "jwtAuthWithLastLogin": []
+          },
+          {
+            "tokenAuth": []
+          },
+          {}
+        ],
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ConsentPolicy"
+                }
+              }
+            },
+            "description": ""
+          }
+        },
+        "x-async-capable": false
+      }
+    },
     "/cfg/accounts/otp/request/": {
       "post": {
         "operationId": "cfg_accounts_otp_request_create",
@@ -1362,6 +1396,36 @@
           }
         }
       },
+      "ConsentPolicy": {
+        "type": "object",
+        "description": "Marketing-consent UI policy derived from the request's geo context.",
+        "properties": {
+          "country": {
+            "type": "string",
+            "description": "Country code seen by the edge (CF-IPCountry), '' if unknown"
+          },
+          "marketing_consent_default": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/MarketingConsentDefaultEnum"
+              }
+            ],
+            "description": "Default state for the marketing-consent checkbox\n\n* `checked` - checked\n* `unchecked` - unchecked"
+          }
+        },
+        "required": [
+          "country",
+          "marketing_consent_default"
+        ]
+      },
+      "MarketingConsentDefaultEnum": {
+        "enum": [
+          "checked",
+          "unchecked"
+        ],
+        "type": "string",
+        "description": "* `checked` - checked\n* `unchecked` - unchecked"
+      },
       "OAuthAuthorizeRequestRequest": {
         "type": "object",
         "description": "Request to start OAuth flow.",
@@ -1639,6 +1703,18 @@
             "type": "string",
             "format": "uri",
             "description": "Source URL for tracking registration (e.g., https://my.djangocfg.com)"
+          },
+          "marketing_consent": {
+            "type": [
+              "boolean",
+              "null"
+            ],
+            "description": "Marketing-consent choice made at signup (absent/null = not asked, false = declined)"
+          },
+          "consent_disclosure_version": {
+            "type": "string",
+            "description": "Version of the consent disclosure text shown (e.g. product-updates-reg-v1)",
+            "maxLength": 64
           }
         },
         "required": [

package/src/_api/generated/_cfg_accounts/schemas/ConsentPolicy.ts

@@ -0,0 +1,13 @@
+// AUTO-GENERATED by cmdop_server / devtools.generator.ts_extras
+// Source: OpenAPI 3.1 components.schemas
+// DO NOT EDIT — re-run `make gen-clients`.
+
+import { z } from "zod";
+import { MarketingConsentDefaultEnumSchema } from "./MarketingConsentDefaultEnum";
+
+export const ConsentPolicySchema = z.object({
+  country: z.string(),
+  marketing_consent_default: MarketingConsentDefaultEnumSchema,
+});
+
+export type ConsentPolicy = z.infer<typeof ConsentPolicySchema>;

package/src/_api/generated/_cfg_accounts/schemas/MarketingConsentDefaultEnum.ts

@@ -0,0 +1,9 @@
+// AUTO-GENERATED by cmdop_server / devtools.generator.ts_extras
+// Source: OpenAPI 3.1 components.schemas
+// DO NOT EDIT — re-run `make gen-clients`.
+
+import { z } from "zod";
+
+export const MarketingConsentDefaultEnumSchema = z.enum(["checked", "unchecked"]);
+
+export type MarketingConsentDefaultEnum = z.infer<typeof MarketingConsentDefaultEnumSchema>;

package/src/_api/generated/_cfg_accounts/schemas/OTPRequestRequest.ts

@@ -7,6 +7,8 @@ import { z } from "zod";
 export const OTPRequestRequestSchema = z.object({
   identifier: z.string().min(1),
   source_url: z.string().optional(),
+  marketing_consent: z.boolean().nullable().optional(),
+  consent_disclosure_version: z.string().max(64).optional(),
 });
 
 export type OTPRequestRequest = z.infer<typeof OTPRequestRequestSchema>;

package/src/_api/generated/_cfg_accounts/schemas/index.ts

@@ -10,6 +10,8 @@ export * from "./APIKeyTestResult";
 export * from "./AccountDeleteResponse";
 export * from "./CentrifugoToken";
 export * from "./CfgUserUpdateRequest";
+export * from "./ConsentPolicy";
+export * from "./MarketingConsentDefaultEnum";
 export * from "./OAuthAuthorizeRequestRequest";
 export * from "./OAuthAuthorizeResponse";
 export * from "./OAuthCallbackRequestRequest";

package/src/_api/generated/openapi.json

@@ -442,6 +442,40 @@
         "x-async-capable": false
       }
     },
+    "/cfg/accounts/otp/consent-policy/": {
+      "get": {
+        "operationId": "cfg_accounts_otp_consent_policy_retrieve",
+        "description": "Marketing-consent checkbox policy for the caller's jurisdiction.\n\nDerived from the edge-provided CF-IPCountry — the same signal stored\nas consent evidence at request time. Unknown country fails safe to\n\"unchecked\".",
+        "tags": [
+          "cfg_accounts"
+        ],
+        "security": [
+          {
+            "apiKeyAuth": []
+          },
+          {
+            "jwtAuthWithLastLogin": []
+          },
+          {
+            "tokenAuth": []
+          },
+          {}
+        ],
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ConsentPolicy"
+                }
+              }
+            },
+            "description": ""
+          }
+        },
+        "x-async-capable": false
+      }
+    },
     "/cfg/accounts/otp/request/": {
       "post": {
         "operationId": "cfg_accounts_otp_request_create",
@@ -1983,6 +2017,28 @@
         "title": "ConnectionTokenResponse",
         "type": "object"
       },
+      "ConsentPolicy": {
+        "type": "object",
+        "description": "Marketing-consent UI policy derived from the request's geo context.",
+        "properties": {
+          "country": {
+            "type": "string",
+            "description": "Country code seen by the edge (CF-IPCountry), '' if unknown"
+          },
+          "marketing_consent_default": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/MarketingConsentDefaultEnum"
+              }
+            ],
+            "description": "Default state for the marketing-consent checkbox\n\n* `checked` - checked\n* `unchecked` - unchecked"
+          }
+        },
+        "required": [
+          "country",
+          "marketing_consent_default"
+        ]
+      },
       "DeviceList": {
         "type": "object",
         "description": "Serializer for listing TOTP devices.",
@@ -2087,6 +2143,14 @@
           "code"
         ]
       },
+      "MarketingConsentDefaultEnum": {
+        "enum": [
+          "checked",
+          "unchecked"
+        ],
+        "type": "string",
+        "description": "* `checked` - checked\n* `unchecked` - unchecked"
+      },
       "OAuthAuthorizeRequestRequest": {
         "type": "object",
         "description": "Request to start OAuth flow.",
@@ -2364,6 +2428,18 @@
             "type": "string",
             "format": "uri",
             "description": "Source URL for tracking registration (e.g., https://my.djangocfg.com)"
+          },
+          "marketing_consent": {
+            "type": [
+              "boolean",
+              "null"
+            ],
+            "description": "Marketing-consent choice made at signup (absent/null = not asked, false = declined)"
+          },
+          "consent_disclosure_version": {
+            "type": "string",
+            "description": "Version of the consent disclosure text shown (e.g. product-updates-reg-v1)",
+            "maxLength": 64
           }
         },
         "required": [

package/src/_api/generated/sdk.gen.ts

@@ -2,7 +2,7 @@
 
 import { type Client, type ClientMeta, formDataBodySerializer, type Options as Options2, type RequestResult, type TDataShape } from './client';
 import { client } from './client.gen';
-import type { CfgAccountsApiKeyRegenerateCreateData, CfgAccountsApiKeyRegenerateCreateErrors, CfgAccountsApiKeyRegenerateCreateResponses, CfgAccountsApiKeyRetrieveData, CfgAccountsApiKeyRetrieveErrors, CfgAccountsApiKeyRetrieveResponses, CfgAccountsApiKeyRevealCreateData, CfgAccountsApiKeyRevealCreateErrors, CfgAccountsApiKeyRevealCreateResponses, CfgAccountsApiKeyTestCreateData, CfgAccountsApiKeyTestCreateResponses, CfgAccountsOauthConnectionsListData, CfgAccountsOauthConnectionsListResponses, CfgAccountsOauthDisconnectCreateData, CfgAccountsOauthDisconnectCreateErrors, CfgAccountsOauthDisconnectCreateResponses, CfgAccountsOauthGithubAuthorizeCreateData, CfgAccountsOauthGithubAuthorizeCreateErrors, CfgAccountsOauthGithubAuthorizeCreateResponses, CfgAccountsOauthGithubCallbackCreateData, CfgAccountsOauthGithubCallbackCreateErrors, CfgAccountsOauthGithubCallbackCreateResponses, CfgAccountsOauthProvidersRetrieveData, CfgAccountsOauthProvidersRetrieveResponses, CfgAccountsOtpRequestCreateData, CfgAccountsOtpRequestCreateErrors, CfgAccountsOtpRequestCreateResponses, CfgAccountsOtpVerifyCreateData, CfgAccountsOtpVerifyCreateErrors, CfgAccountsOtpVerifyCreateResponses, CfgAccountsProfileAvatarCreateData, CfgAccountsProfileAvatarCreateErrors, CfgAccountsProfileAvatarCreateResponses, CfgAccountsProfileDeleteCreateData, CfgAccountsProfileDeleteCreateErrors, CfgAccountsProfileDeleteCreateResponses, CfgAccountsProfilePartialPartialUpdateData, CfgAccountsProfilePartialPartialUpdateErrors, CfgAccountsProfilePartialPartialUpdateResponses, CfgAccountsProfilePartialUpdateData, CfgAccountsProfilePartialUpdateErrors, CfgAccountsProfilePartialUpdateResponses, CfgAccountsProfileRetrieveData, CfgAccountsProfileRetrieveErrors, CfgAccountsProfileRetrieveResponses, CfgAccountsProfileUpdatePartialUpdateData, CfgAccountsProfileUpdatePartialUpdateErrors, CfgAccountsProfileUpdatePartialUpdateResponses, CfgAccountsProfileUpdateUpdateData, CfgAccountsProfileUpdateUpdateErrors, CfgAccountsProfileUpdateUpdateResponses, CfgAccountsTokenBlacklistCreateData, CfgAccountsTokenBlacklistCreateResponses, CfgAccountsTokenRefreshCreateData, CfgAccountsTokenRefreshCreateResponses, CfgCentrifugoAuthTokenRetrieveData, CfgCentrifugoAuthTokenRetrieveErrors, CfgCentrifugoAuthTokenRetrieveResponses, CfgTotpBackupCodesRegenerateCreateData, CfgTotpBackupCodesRegenerateCreateErrors, CfgTotpBackupCodesRegenerateCreateResponses, CfgTotpBackupCodesRetrieveData, CfgTotpBackupCodesRetrieveResponses, CfgTotpDevicesDestroyData, CfgTotpDevicesDestroyResponses, CfgTotpDevicesRetrieveData, CfgTotpDevicesRetrieveResponses, CfgTotpDisableCreateData, CfgTotpDisableCreateErrors, CfgTotpDisableCreateResponses, CfgTotpSetupConfirmCreateData, CfgTotpSetupConfirmCreateErrors, CfgTotpSetupConfirmCreateResponses, CfgTotpSetupCreateData, CfgTotpSetupCreateErrors, CfgTotpSetupCreateResponses, CfgTotpVerifyBackupCreateData, CfgTotpVerifyBackupCreateErrors, CfgTotpVerifyBackupCreateResponses, CfgTotpVerifyCreateData, CfgTotpVerifyCreateErrors, CfgTotpVerifyCreateResponses } from './types.gen';
+import type { CfgAccountsApiKeyRegenerateCreateData, CfgAccountsApiKeyRegenerateCreateErrors, CfgAccountsApiKeyRegenerateCreateResponses, CfgAccountsApiKeyRetrieveData, CfgAccountsApiKeyRetrieveErrors, CfgAccountsApiKeyRetrieveResponses, CfgAccountsApiKeyRevealCreateData, CfgAccountsApiKeyRevealCreateErrors, CfgAccountsApiKeyRevealCreateResponses, CfgAccountsApiKeyTestCreateData, CfgAccountsApiKeyTestCreateResponses, CfgAccountsOauthConnectionsListData, CfgAccountsOauthConnectionsListResponses, CfgAccountsOauthDisconnectCreateData, CfgAccountsOauthDisconnectCreateErrors, CfgAccountsOauthDisconnectCreateResponses, CfgAccountsOauthGithubAuthorizeCreateData, CfgAccountsOauthGithubAuthorizeCreateErrors, CfgAccountsOauthGithubAuthorizeCreateResponses, CfgAccountsOauthGithubCallbackCreateData, CfgAccountsOauthGithubCallbackCreateErrors, CfgAccountsOauthGithubCallbackCreateResponses, CfgAccountsOauthProvidersRetrieveData, CfgAccountsOauthProvidersRetrieveResponses, CfgAccountsOtpConsentPolicyRetrieveData, CfgAccountsOtpConsentPolicyRetrieveResponses, CfgAccountsOtpRequestCreateData, CfgAccountsOtpRequestCreateErrors, CfgAccountsOtpRequestCreateResponses, CfgAccountsOtpVerifyCreateData, CfgAccountsOtpVerifyCreateErrors, CfgAccountsOtpVerifyCreateResponses, CfgAccountsProfileAvatarCreateData, CfgAccountsProfileAvatarCreateErrors, CfgAccountsProfileAvatarCreateResponses, CfgAccountsProfileDeleteCreateData, CfgAccountsProfileDeleteCreateErrors, CfgAccountsProfileDeleteCreateResponses, CfgAccountsProfilePartialPartialUpdateData, CfgAccountsProfilePartialPartialUpdateErrors, CfgAccountsProfilePartialPartialUpdateResponses, CfgAccountsProfilePartialUpdateData, CfgAccountsProfilePartialUpdateErrors, CfgAccountsProfilePartialUpdateResponses, CfgAccountsProfileRetrieveData, CfgAccountsProfileRetrieveErrors, CfgAccountsProfileRetrieveResponses, CfgAccountsProfileUpdatePartialUpdateData, CfgAccountsProfileUpdatePartialUpdateErrors, CfgAccountsProfileUpdatePartialUpdateResponses, CfgAccountsProfileUpdateUpdateData, CfgAccountsProfileUpdateUpdateErrors, CfgAccountsProfileUpdateUpdateResponses, CfgAccountsTokenBlacklistCreateData, CfgAccountsTokenBlacklistCreateResponses, CfgAccountsTokenRefreshCreateData, CfgAccountsTokenRefreshCreateResponses, CfgCentrifugoAuthTokenRetrieveData, CfgCentrifugoAuthTokenRetrieveErrors, CfgCentrifugoAuthTokenRetrieveResponses, CfgTotpBackupCodesRegenerateCreateData, CfgTotpBackupCodesRegenerateCreateErrors, CfgTotpBackupCodesRegenerateCreateResponses, CfgTotpBackupCodesRetrieveData, CfgTotpBackupCodesRetrieveResponses, CfgTotpDevicesDestroyData, CfgTotpDevicesDestroyResponses, CfgTotpDevicesRetrieveData, CfgTotpDevicesRetrieveResponses, CfgTotpDisableCreateData, CfgTotpDisableCreateErrors, CfgTotpDisableCreateResponses, CfgTotpSetupConfirmCreateData, CfgTotpSetupConfirmCreateErrors, CfgTotpSetupConfirmCreateResponses, CfgTotpSetupCreateData, CfgTotpSetupCreateErrors, CfgTotpSetupCreateResponses, CfgTotpVerifyBackupCreateData, CfgTotpVerifyBackupCreateErrors, CfgTotpVerifyBackupCreateResponses, CfgTotpVerifyCreateData, CfgTotpVerifyCreateErrors, CfgTotpVerifyCreateResponses } from './types.gen';
 
 export type Options<TData extends TDataShape = TDataShape, ThrowOnError extends boolean = boolean, TResponse = unknown> = Options2<TData, ThrowOnError, TResponse> & {
     /**
@@ -39,7 +39,7 @@ export class CfgAccountsApiKey {
             ...options
         });
     }
-    
+
     /**
      * Regenerate API key
      *
@@ -64,7 +64,7 @@ export class CfgAccountsApiKey {
             }
         });
     }
-    
+
     /**
      * Reveal API key
      *
@@ -89,7 +89,7 @@ export class CfgAccountsApiKey {
             }
         });
     }
-    
+
     /**
      * Test API key
      *
@@ -133,7 +133,7 @@ export class CfgAccountsOauth {
             ...options
         });
     }
-    
+
     /**
      * Disconnect OAuth provider
      *
@@ -154,7 +154,7 @@ export class CfgAccountsOauth {
             }
         });
     }
-    
+
     /**
      * Start GitHub OAuth
      *
@@ -170,7 +170,7 @@ export class CfgAccountsOauth {
             }
         });
     }
-    
+
     /**
      * Complete GitHub OAuth
      *
@@ -186,7 +186,7 @@ export class CfgAccountsOauth {
             }
         });
     }
-    
+
     /**
      * List OAuth providers
      *
@@ -198,6 +198,25 @@ export class CfgAccountsOauth {
 }
 
 export class CfgAccounts {
+    /**
+     * Marketing-consent checkbox policy for the caller's jurisdiction.
+     *
+     * Derived from the edge-provided CF-IPCountry — the same signal stored
+     * as consent evidence at request time. Unknown country fails safe to
+     * "unchecked".
+     */
+    public static cfgAccountsOtpConsentPolicyRetrieve<ThrowOnError extends boolean = false>(options?: Options<CfgAccountsOtpConsentPolicyRetrieveData, ThrowOnError>): RequestResult<CfgAccountsOtpConsentPolicyRetrieveResponses, unknown, ThrowOnError> {
+        return (options?.client ?? client).get<CfgAccountsOtpConsentPolicyRetrieveResponses, unknown, ThrowOnError>({
+            security: [
+                { name: 'X-API-Key', type: 'apiKey' },
+                { scheme: 'bearer', type: 'http' },
+                { name: 'Authorization', type: 'apiKey' }
+            ],
+            url: '/cfg/accounts/otp/consent-policy/',
+            ...options
+        });
+    }
+
     /**
      * Request OTP code to email.
      */
@@ -216,7 +235,7 @@ export class CfgAccounts {
             }
         });
     }
-    
+
     /**
      * Verify OTP code and return JWT tokens or 2FA session.
      *
@@ -261,7 +280,7 @@ export class CfgAccountsProfile {
             ...options
         });
     }
-    
+
     /**
      * Upload user avatar
      *
@@ -283,7 +302,7 @@ export class CfgAccountsProfile {
             }
         });
     }
-    
+
     /**
      * Delete user account
      *
@@ -310,7 +329,7 @@ export class CfgAccountsProfile {
             ...options
         });
     }
-    
+
     /**
      * Partial update user profile
      *
@@ -331,7 +350,7 @@ export class CfgAccountsProfile {
             }
         });
     }
-    
+
     /**
      * Partial update user profile
      *
@@ -352,7 +371,7 @@ export class CfgAccountsProfile {
             }
         });
     }
-    
+
     /**
      * Update user profile
      *
@@ -373,7 +392,7 @@ export class CfgAccountsProfile {
             }
         });
     }
-    
+
     /**
      * Update user profile
      *
@@ -414,7 +433,7 @@ export class CfgAccountsAuth {
             }
         });
     }
-    
+
     /**
      * Refresh JWT token.
      *
@@ -470,7 +489,7 @@ export class CfgTotpBackupCodes {
             ...options
         });
     }
-    
+
     /**
      * Regenerate backup codes.
      *
@@ -509,7 +528,7 @@ export class CfgTotp {
             ...options
         });
     }
-    
+
     /**
      * Delete a TOTP device.
      *
@@ -526,7 +545,7 @@ export class CfgTotp {
             ...options
         });
     }
-    
+
     /**
      * Completely disable 2FA for account.
      *
@@ -570,7 +589,7 @@ export class CfgTotpSetup {
             }
         });
     }
-    
+
     /**
      * Confirm 2FA setup with first valid code.
      *
@@ -614,7 +633,7 @@ export class CfgTotpVerify {
             }
         });
     }
-    
+
     /**
      * Verify backup recovery code for 2FA session.
      *

package/src/_api/generated/types.gen.ts

@@ -251,6 +251,23 @@ export type ConnectionTokenResponse = {
     channels: Array<string>;
 };
 
+/**
+ * Marketing-consent UI policy derived from the request's geo context.
+ */
+export type ConsentPolicy = {
+    /**
+     * Country code seen by the edge (CF-IPCountry), '' if unknown
+     */
+    country: string;
+    /**
+     * Default state for the marketing-consent checkbox
+     *
+     * * `checked` - checked
+     * * `unchecked` - unchecked
+     */
+    marketing_consent_default: MarketingConsentDefaultEnum;
+};
+
 /**
  * Serializer for listing TOTP devices.
  */
@@ -305,6 +322,15 @@ export type DisableRequest = {
     code: string;
 };
 
+/**
+ * * `checked` - checked
+ * * `unchecked` - unchecked
+ */
+export enum MarketingConsentDefaultEnum {
+    CHECKED = 'checked',
+    UNCHECKED = 'unchecked'
+}
+
 /**
  * Request to start OAuth flow.
  */
@@ -520,6 +546,14 @@ export type OtpRequestRequest = {
      * Source URL for tracking registration (e.g., https://my.djangocfg.com)
      */
     source_url?: string;
+    /**
+     * Marketing-consent choice made at signup (absent/null = not asked, false = declined)
+     */
+    marketing_consent?: boolean | null;
+    /**
+     * Version of the consent disclosure text shown (e.g. product-updates-reg-v1)
+     */
+    consent_disclosure_version?: string;
 };
 
 /**
@@ -1198,6 +1232,19 @@ export type CfgAccountsOauthProvidersRetrieveResponses = {
 
 export type CfgAccountsOauthProvidersRetrieveResponse = CfgAccountsOauthProvidersRetrieveResponses[keyof CfgAccountsOauthProvidersRetrieveResponses];
 
+export type CfgAccountsOtpConsentPolicyRetrieveData = {
+    body?: never;
+    path?: never;
+    query?: never;
+    url: '/cfg/accounts/otp/consent-policy/';
+};
+
+export type CfgAccountsOtpConsentPolicyRetrieveResponses = {
+    200: ConsentPolicy;
+};
+
+export type CfgAccountsOtpConsentPolicyRetrieveResponse = CfgAccountsOtpConsentPolicyRetrieveResponses[keyof CfgAccountsOtpConsentPolicyRetrieveResponses];
+
 export type CfgAccountsOtpRequestCreateData = {
     body: OtpRequestRequest;
     path?: never;

package/src/auth/context/AuthContext.tsx

@@ -40,7 +40,8 @@ import { authLogger } from '../utils/logger';
 import { AccountsProvider, useAccountsContext } from './AccountsContext';
 
 import type { AuthContextType, AuthProviderProps, UserProfile } from './types';
-import type { OTPRequestResult } from '../types';
+import type { OTPRequestConsent, OTPRequestResult } from '../types';
+import type { OtpRequestRequest } from '../../_api/generated/_cfg_accounts/types.gen';
 
 // The ONLY place route conventions are declared. '/auth' is the sign-in page
 // convention; the framework has no opinion about where an app's "home" is, so
@@ -232,15 +233,22 @@ const AuthProviderInternal: React.FC<AuthProviderProps> = ({ children, config })
   // ── OTP login flow ─────────────────────────────────────────────────────────
 
   const requestOTP = useCallback(
-    async (identifier: string, sourceUrl?: string): Promise<OTPRequestResult> => {
+    async (identifier: string, sourceUrl?: string, consent?: OTPRequestConsent): Promise<OTPRequestResult> => {
       // A login attempt invalidates whatever session was lying around.
       auth.clearSession();
 
       try {
-        const result = await accountsRef.current.requestOTP({
+        const body: OtpRequestRequest = {
           identifier,
           source_url: sourceUrl,
-        });
+          // Absent when the consuming app didn't enable the opt-in checkbox —
+          // the backend treats absent/null as "not asked".
+          ...(consent && {
+            marketing_consent: consent.marketingConsent,
+            consent_disclosure_version: consent.disclosureVersion,
+          }),
+        };
+        const result = await accountsRef.current.requestOTP(body);
 
         Analytics.event(AnalyticsEvent.AUTH_OTP_REQUEST, {
           category: AnalyticsCategory.AUTH,