@djangocfg/api 2.1.476 → 2.1.478

package/dist/auth.d.cts

@@ -72,6 +72,14 @@ type OtpRequestRequest = {
      * Source URL for tracking registration (e.g., https://my.djangocfg.com)
      */
     source_url?: string;
+    /**
+     * Marketing-consent choice made at signup (absent/null = not asked, false = declined)
+     */
+    marketing_consent?: boolean | null;
+    /**
+     * Version of the consent disclosure text shown (e.g. product-updates-reg-v1)
+     */
+    consent_disclosure_version?: string;
 };
 /**
  * OTP request response.
@@ -338,6 +346,16 @@ interface OTPRequestResult {
     /** Webmail deep-link for the recipient's provider, or null if unknown. */
     webmail?: WebmailLink | null;
 }
+/**
+ * Marketing-consent payload attached to an OTP request when the consuming
+ * app enables the opt-in checkbox. Absent ⇒ the request body is unchanged.
+ */
+interface OTPRequestConsent {
+    /** Checkbox value at submit time. */
+    marketingConsent: boolean;
+    /** Version tag of the disclosure copy the user saw (e.g. "product-updates-reg-v1"). */
+    disclosureVersion: string;
+}
 interface AuthFormState {
     /** Email address */
     identifier: string;
@@ -347,6 +365,12 @@ interface AuthFormState {
     isLoading: boolean;
     /** Terms acceptance state */
     acceptedTerms: boolean;
+    /**
+     * Marketing-consent checkbox state. `null` = feature not initialised (no
+     * checkbox rendered, or default not yet resolved); the layout owns the
+     * jurisdiction-aware default on mount.
+     */
+    marketingConsent: boolean | null;
     /** Current form step */
     step: AuthStep;
     /** Error message */
@@ -372,6 +396,7 @@ interface AuthFormStateHandlers {
     setIdentifier: (identifier: string) => void;
     setOtp: (otp: string) => void;
     setAcceptedTerms: (accepted: boolean) => void;
+    setMarketingConsent: (consent: boolean | null) => void;
     setError: (error: string) => void;
     clearError: () => void;
     setStep: (step: AuthStep) => void;
@@ -429,6 +454,15 @@ interface UseAuthFormOptions {
     redirectUrl?: string;
     /** If true, user must accept terms before submitting. Default: false */
     requireTermsAcceptance?: boolean;
+    /**
+     * Enables the marketing-consent opt-in: when set, the checkbox value +
+     * this disclosure version are sent with the OTP request. Absent ⇒ the
+     * request body is unchanged (backward compatible).
+     */
+    marketingConsent?: {
+        /** Version tag of the disclosure copy shown next to the checkbox. */
+        disclosureVersion: string;
+    };
     /** Path to auth page for auto-OTP detection. Default: '/auth' */
     authPath?: string;
 }
@@ -467,7 +501,7 @@ interface AuthContextType {
     getSavedEmail: () => string | null;
     saveEmail: (email: string) => void;
     clearSavedEmail: () => void;
-    requestOTP: (identifier: string, sourceUrl?: string) => Promise<OTPRequestResult>;
+    requestOTP: (identifier: string, sourceUrl?: string, consent?: OTPRequestConsent) => Promise<OTPRequestResult>;
     verifyOTP: (identifier: string, otpCode: string, sourceUrl?: string, redirectUrl?: string, skipRedirect?: boolean) => Promise<{
         success: boolean;
         message: string;
@@ -1114,4 +1148,4 @@ declare const Analytics: {
     setUser(userId: string | null): void;
 };
 
-export { AUTH_CONSTANTS, type AccountsContextValue, AccountsProvider, Analytics, AnalyticsCategory, type AnalyticsCategoryType, AnalyticsEvent, type AnalyticsEventType, type AnalyticsSink, type AuthConfig, AuthContext, type AuthContextType, type AuthFormAutoSubmit, type AuthFormReturn, type AuthFormState, type AuthFormStateHandlers, type AuthFormSubmitHandlers, type AuthFormValidation, AuthProvider, type AuthProviderProps, type AuthStep, type DeleteAccountResult, type GuardInput, type OTPRequestResult, type PatchedCfgUserUpdateRequest, PatchedCfgUserUpdateRequestSchema, type ProfileCacheOptions, type SessionSnapshot, type SessionStatus, type TwoFactorDevice, type TwoFactorSetupData, type UseAuthFormOptions, type UseAuthFormStateReturn, type UseAutoAuthOptions, type UseDeleteAccountReturn, type UseGithubAuthOptions, type UseGithubAuthReturn, type UseTwoFactorOptions, type UseTwoFactorReturn, type UseTwoFactorSetupOptions, type UseTwoFactorSetupReturn, type UseTwoFactorStatusReturn, type UseTwoFactorVerifyOptions, type UseTwoFactorVerifyReturn, type UserProfile, type WebmailLink, authLogger, clearProfileCache, consumeSavedRedirect, decodeBase64, encodeBase64, formatAuthError, getCacheMetadata, getCachedProfile, hasValidCache, isAllowedAuthPath, logger, normalizePath, peekSavedRedirect, resolveGuardIsAuthenticated, resolveGuardIsLoading, setAnalyticsSink, setCachedProfile, shouldRedirectToAuth, useAccountsContext, useAuth, useAuthForm, useAuthFormState, useAuthRedirectManager, useAuthValidation, useAutoAuth, useBase64, useCfgRouter, useDeleteAccount, useGithubAuth, useLocalStorage, useQueryParams, useSession, useSessionStorage, useTwoFactor, useTwoFactorSetup, useTwoFactorStatus, useTwoFactorVerify, validateEmail, validateIdentifier };
+export { AUTH_CONSTANTS, type AccountsContextValue, AccountsProvider, Analytics, AnalyticsCategory, type AnalyticsCategoryType, AnalyticsEvent, type AnalyticsEventType, type AnalyticsSink, type AuthConfig, AuthContext, type AuthContextType, type AuthFormAutoSubmit, type AuthFormReturn, type AuthFormState, type AuthFormStateHandlers, type AuthFormSubmitHandlers, type AuthFormValidation, AuthProvider, type AuthProviderProps, type AuthStep, type DeleteAccountResult, type GuardInput, type OTPRequestConsent, type OTPRequestResult, type PatchedCfgUserUpdateRequest, PatchedCfgUserUpdateRequestSchema, type ProfileCacheOptions, type SessionSnapshot, type SessionStatus, type TwoFactorDevice, type TwoFactorSetupData, type UseAuthFormOptions, type UseAuthFormStateReturn, type UseAutoAuthOptions, type UseDeleteAccountReturn, type UseGithubAuthOptions, type UseGithubAuthReturn, type UseTwoFactorOptions, type UseTwoFactorReturn, type UseTwoFactorSetupOptions, type UseTwoFactorSetupReturn, type UseTwoFactorStatusReturn, type UseTwoFactorVerifyOptions, type UseTwoFactorVerifyReturn, type UserProfile, type WebmailLink, authLogger, clearProfileCache, consumeSavedRedirect, decodeBase64, encodeBase64, formatAuthError, getCacheMetadata, getCachedProfile, hasValidCache, isAllowedAuthPath, logger, normalizePath, peekSavedRedirect, resolveGuardIsAuthenticated, resolveGuardIsLoading, setAnalyticsSink, setCachedProfile, shouldRedirectToAuth, useAccountsContext, useAuth, useAuthForm, useAuthFormState, useAuthRedirectManager, useAuthValidation, useAutoAuth, useBase64, useCfgRouter, useDeleteAccount, useGithubAuth, useLocalStorage, useQueryParams, useSession, useSessionStorage, useTwoFactor, useTwoFactorSetup, useTwoFactorStatus, useTwoFactorVerify, validateEmail, validateIdentifier };

package/dist/auth.d.ts

@@ -72,6 +72,14 @@ type OtpRequestRequest = {
      * Source URL for tracking registration (e.g., https://my.djangocfg.com)
      */
     source_url?: string;
+    /**
+     * Marketing-consent choice made at signup (absent/null = not asked, false = declined)
+     */
+    marketing_consent?: boolean | null;
+    /**
+     * Version of the consent disclosure text shown (e.g. product-updates-reg-v1)
+     */
+    consent_disclosure_version?: string;
 };
 /**
  * OTP request response.
@@ -338,6 +346,16 @@ interface OTPRequestResult {
     /** Webmail deep-link for the recipient's provider, or null if unknown. */
     webmail?: WebmailLink | null;
 }
+/**
+ * Marketing-consent payload attached to an OTP request when the consuming
+ * app enables the opt-in checkbox. Absent ⇒ the request body is unchanged.
+ */
+interface OTPRequestConsent {
+    /** Checkbox value at submit time. */
+    marketingConsent: boolean;
+    /** Version tag of the disclosure copy the user saw (e.g. "product-updates-reg-v1"). */
+    disclosureVersion: string;
+}
 interface AuthFormState {
     /** Email address */
     identifier: string;
@@ -347,6 +365,12 @@ interface AuthFormState {
     isLoading: boolean;
     /** Terms acceptance state */
     acceptedTerms: boolean;
+    /**
+     * Marketing-consent checkbox state. `null` = feature not initialised (no
+     * checkbox rendered, or default not yet resolved); the layout owns the
+     * jurisdiction-aware default on mount.
+     */
+    marketingConsent: boolean | null;
     /** Current form step */
     step: AuthStep;
     /** Error message */
@@ -372,6 +396,7 @@ interface AuthFormStateHandlers {
     setIdentifier: (identifier: string) => void;
     setOtp: (otp: string) => void;
     setAcceptedTerms: (accepted: boolean) => void;
+    setMarketingConsent: (consent: boolean | null) => void;
     setError: (error: string) => void;
     clearError: () => void;
     setStep: (step: AuthStep) => void;
@@ -429,6 +454,15 @@ interface UseAuthFormOptions {
     redirectUrl?: string;
     /** If true, user must accept terms before submitting. Default: false */
     requireTermsAcceptance?: boolean;
+    /**
+     * Enables the marketing-consent opt-in: when set, the checkbox value +
+     * this disclosure version are sent with the OTP request. Absent ⇒ the
+     * request body is unchanged (backward compatible).
+     */
+    marketingConsent?: {
+        /** Version tag of the disclosure copy shown next to the checkbox. */
+        disclosureVersion: string;
+    };
     /** Path to auth page for auto-OTP detection. Default: '/auth' */
     authPath?: string;
 }
@@ -467,7 +501,7 @@ interface AuthContextType {
     getSavedEmail: () => string | null;
     saveEmail: (email: string) => void;
     clearSavedEmail: () => void;
-    requestOTP: (identifier: string, sourceUrl?: string) => Promise<OTPRequestResult>;
+    requestOTP: (identifier: string, sourceUrl?: string, consent?: OTPRequestConsent) => Promise<OTPRequestResult>;
     verifyOTP: (identifier: string, otpCode: string, sourceUrl?: string, redirectUrl?: string, skipRedirect?: boolean) => Promise<{
         success: boolean;
         message: string;
@@ -1114,4 +1148,4 @@ declare const Analytics: {
     setUser(userId: string | null): void;
 };
 
-export { AUTH_CONSTANTS, type AccountsContextValue, AccountsProvider, Analytics, AnalyticsCategory, type AnalyticsCategoryType, AnalyticsEvent, type AnalyticsEventType, type AnalyticsSink, type AuthConfig, AuthContext, type AuthContextType, type AuthFormAutoSubmit, type AuthFormReturn, type AuthFormState, type AuthFormStateHandlers, type AuthFormSubmitHandlers, type AuthFormValidation, AuthProvider, type AuthProviderProps, type AuthStep, type DeleteAccountResult, type GuardInput, type OTPRequestResult, type PatchedCfgUserUpdateRequest, PatchedCfgUserUpdateRequestSchema, type ProfileCacheOptions, type SessionSnapshot, type SessionStatus, type TwoFactorDevice, type TwoFactorSetupData, type UseAuthFormOptions, type UseAuthFormStateReturn, type UseAutoAuthOptions, type UseDeleteAccountReturn, type UseGithubAuthOptions, type UseGithubAuthReturn, type UseTwoFactorOptions, type UseTwoFactorReturn, type UseTwoFactorSetupOptions, type UseTwoFactorSetupReturn, type UseTwoFactorStatusReturn, type UseTwoFactorVerifyOptions, type UseTwoFactorVerifyReturn, type UserProfile, type WebmailLink, authLogger, clearProfileCache, consumeSavedRedirect, decodeBase64, encodeBase64, formatAuthError, getCacheMetadata, getCachedProfile, hasValidCache, isAllowedAuthPath, logger, normalizePath, peekSavedRedirect, resolveGuardIsAuthenticated, resolveGuardIsLoading, setAnalyticsSink, setCachedProfile, shouldRedirectToAuth, useAccountsContext, useAuth, useAuthForm, useAuthFormState, useAuthRedirectManager, useAuthValidation, useAutoAuth, useBase64, useCfgRouter, useDeleteAccount, useGithubAuth, useLocalStorage, useQueryParams, useSession, useSessionStorage, useTwoFactor, useTwoFactorSetup, useTwoFactorStatus, useTwoFactorVerify, validateEmail, validateIdentifier };
+export { AUTH_CONSTANTS, type AccountsContextValue, AccountsProvider, Analytics, AnalyticsCategory, type AnalyticsCategoryType, AnalyticsEvent, type AnalyticsEventType, type AnalyticsSink, type AuthConfig, AuthContext, type AuthContextType, type AuthFormAutoSubmit, type AuthFormReturn, type AuthFormState, type AuthFormStateHandlers, type AuthFormSubmitHandlers, type AuthFormValidation, AuthProvider, type AuthProviderProps, type AuthStep, type DeleteAccountResult, type GuardInput, type OTPRequestConsent, type OTPRequestResult, type PatchedCfgUserUpdateRequest, PatchedCfgUserUpdateRequestSchema, type ProfileCacheOptions, type SessionSnapshot, type SessionStatus, type TwoFactorDevice, type TwoFactorSetupData, type UseAuthFormOptions, type UseAuthFormStateReturn, type UseAutoAuthOptions, type UseDeleteAccountReturn, type UseGithubAuthOptions, type UseGithubAuthReturn, type UseTwoFactorOptions, type UseTwoFactorReturn, type UseTwoFactorSetupOptions, type UseTwoFactorSetupReturn, type UseTwoFactorStatusReturn, type UseTwoFactorVerifyOptions, type UseTwoFactorVerifyReturn, type UserProfile, type WebmailLink, authLogger, clearProfileCache, consumeSavedRedirect, decodeBase64, encodeBase64, formatAuthError, getCacheMetadata, getCachedProfile, hasValidCache, isAllowedAuthPath, logger, normalizePath, peekSavedRedirect, resolveGuardIsAuthenticated, resolveGuardIsLoading, setAnalyticsSink, setCachedProfile, shouldRedirectToAuth, useAccountsContext, useAuth, useAuthForm, useAuthFormState, useAuthRedirectManager, useAuthValidation, useAutoAuth, useBase64, useCfgRouter, useDeleteAccount, useGithubAuth, useLocalStorage, useQueryParams, useSession, useSessionStorage, useTwoFactor, useTwoFactorSetup, useTwoFactorStatus, useTwoFactorVerify, validateEmail, validateIdentifier };

package/dist/auth.mjs

@@ -948,6 +948,7 @@ var useAuthFormState = /* @__PURE__ */ __name((initialIdentifier = "") => {
   const [otp, setOtp] = useState2("");
   const [isLoading, setIsLoading] = useState2(false);
   const [acceptedTerms, setAcceptedTerms] = useState2(true);
+  const [marketingConsent, setMarketingConsent] = useState2(null);
   const [step, setStep] = useState2("identifier");
   const [error, setError] = useState2("");
   const [webmail, setWebmail] = useState2(null);
@@ -981,6 +982,7 @@ var useAuthFormState = /* @__PURE__ */ __name((initialIdentifier = "") => {
     otp,
     isLoading,
     acceptedTerms,
+    marketingConsent,
     step,
     error,
     twoFactorSessionId,
@@ -995,6 +997,7 @@ var useAuthFormState = /* @__PURE__ */ __name((initialIdentifier = "") => {
     setIdentifier,
     setOtp,
     setAcceptedTerms,
+    setMarketingConsent,
     setError,
     clearError,
     setStep,
@@ -1992,6 +1995,24 @@ var CfgAccounts = class {
   static {
     __name(this, "CfgAccounts");
   }
+  /**
+   * Marketing-consent checkbox policy for the caller's jurisdiction.
+   *
+   * Derived from the edge-provided CF-IPCountry — the same signal stored
+   * as consent evidence at request time. Unknown country fails safe to
+   * "unchecked".
+   */
+  static cfgAccountsOtpConsentPolicyRetrieve(options) {
+    return (options?.client ?? client).get({
+      security: [
+        { name: "X-API-Key", type: "apiKey" },
+        { scheme: "bearer", type: "http" },
+        { name: "Authorization", type: "apiKey" }
+      ],
+      url: "/cfg/accounts/otp/consent-policy/",
+      ...options
+    });
+  }
   /**
    * Request OTP code to email.
    */
@@ -2793,6 +2814,7 @@ var useAuthForm = /* @__PURE__ */ __name((options) => {
     sourceUrl,
     redirectUrl,
     requireTermsAcceptance = false,
+    marketingConsent: marketingConsentOption,
     authPath = "/auth"
   } = options;
   const formState = useAuthFormState();
@@ -2810,6 +2832,7 @@ var useAuthForm = /* @__PURE__ */ __name((options) => {
     otp,
     isLoading,
     acceptedTerms,
+    marketingConsent,
     twoFactorSessionId,
     twoFactorCode,
     useBackupCode,
@@ -2873,7 +2896,8 @@ var useAuthForm = /* @__PURE__ */ __name((options) => {
     setIsLoading(true);
     clearError();
     try {
-      const result = await requestOTP(identifier, sourceUrl);
+      const consent = marketingConsentOption ? { marketingConsent: marketingConsent === true, disclosureVersion: marketingConsentOption.disclosureVersion } : void 0;
+      const result = await requestOTP(identifier, sourceUrl, consent);
       if (result.success) {
         saveIdentifierToStorage(identifier);
         setWebmail(result.webmail ?? null);
@@ -2899,6 +2923,8 @@ var useAuthForm = /* @__PURE__ */ __name((options) => {
     identifier,
     acceptedTerms,
     requireTermsAcceptance,
+    marketingConsent,
+    marketingConsentOption,
     validateIdentifier2,
     requestOTP,
     saveIdentifierToStorage,
@@ -2959,7 +2985,8 @@ var useAuthForm = /* @__PURE__ */ __name((options) => {
     setIsLoading(true);
     clearError();
     try {
-      const result = await requestOTP(identifier, sourceUrl);
+      const consent = marketingConsentOption ? { marketingConsent: marketingConsent === true, disclosureVersion: marketingConsentOption.disclosureVersion } : void 0;
+      const result = await requestOTP(identifier, sourceUrl, consent);
       if (result.success) {
         saveIdentifierToStorage(identifier);
         setWebmail(result.webmail ?? null);
@@ -2980,7 +3007,7 @@ var useAuthForm = /* @__PURE__ */ __name((options) => {
     } finally {
       setIsLoading(false);
     }
-  }, [identifier, requestOTP, saveIdentifierToStorage, setOtp, setError, setIsLoading, clearError, startRateLimitCountdown, setWebmail, onError, sourceUrl]);
+  }, [identifier, marketingConsent, marketingConsentOption, requestOTP, saveIdentifierToStorage, setOtp, setError, setIsLoading, clearError, startRateLimitCountdown, setWebmail, onError, sourceUrl]);
   const handleBackToIdentifier = useCallback5(() => {
     setStep("identifier");
     clearError();
@@ -3820,30 +3847,46 @@ var OAuthProvidersResponseSchema = z11.object({
   providers: z11.array(z11.object({}).passthrough())
 });
 
+// src/_api/generated/_cfg_accounts/hooks/useCfgAccountsOtpConsentPolicyRetrieve.ts
+import useSWR4 from "swr";
+
+// src/_api/generated/_cfg_accounts/schemas/ConsentPolicy.ts
+import { z as z13 } from "zod";
+
+// src/_api/generated/_cfg_accounts/schemas/MarketingConsentDefaultEnum.ts
+import { z as z12 } from "zod";
+var MarketingConsentDefaultEnumSchema = z12.enum(["checked", "unchecked"]);
+
+// src/_api/generated/_cfg_accounts/schemas/ConsentPolicy.ts
+var ConsentPolicySchema = z13.object({
+  country: z13.string(),
+  marketing_consent_default: MarketingConsentDefaultEnumSchema
+});
+
 // src/_api/generated/_cfg_accounts/hooks/useCfgAccountsOtpRequestCreate.ts
 import useSWRMutation7 from "swr/mutation";
 
 // src/_api/generated/_cfg_accounts/schemas/OTPRequestResponse.ts
-import { z as z14 } from "zod";
+import { z as z16 } from "zod";
 
 // src/_api/generated/_cfg_accounts/schemas/WebmailLink.ts
-import { z as z13 } from "zod";
+import { z as z15 } from "zod";
 
 // src/_api/generated/_cfg_accounts/schemas/WebmailLinkProviderEnum.ts
-import { z as z12 } from "zod";
-var WebmailLinkProviderEnumSchema = z12.enum(["gmail", "outlook", "yahoo", "icloud", "proton", "zoho", "aol", "fastmail", "gmx", "mailcom", "mail_ru", "yandex", "rambler", "qq", "netease", "sina", "aliyun", "naver", "daum", "web_de", "tonline", "seznam", "wp_pl", "o2_pl", "interia", "libero", "virgilio", "orange", "laposte", "free_fr", "sfr"]);
+import { z as z14 } from "zod";
+var WebmailLinkProviderEnumSchema = z14.enum(["gmail", "outlook", "yahoo", "icloud", "proton", "zoho", "aol", "fastmail", "gmx", "mailcom", "mail_ru", "yandex", "rambler", "qq", "netease", "sina", "aliyun", "naver", "daum", "web_de", "tonline", "seznam", "wp_pl", "o2_pl", "interia", "libero", "virgilio", "orange", "laposte", "free_fr", "sfr"]);
 
 // src/_api/generated/_cfg_accounts/schemas/WebmailLink.ts
-var WebmailLinkSchema = z13.object({
+var WebmailLinkSchema = z15.object({
   provider: WebmailLinkProviderEnumSchema,
-  provider_name: z13.string(),
-  url: z13.string(),
-  is_search: z13.boolean()
+  provider_name: z15.string(),
+  url: z15.string(),
+  is_search: z15.boolean()
 });
 
 // src/_api/generated/_cfg_accounts/schemas/OTPRequestResponse.ts
-var OTPRequestResponseSchema = z14.object({
-  message: z14.string(),
+var OTPRequestResponseSchema = z16.object({
+  message: z16.string(),
   webmail: WebmailLinkSchema.nullable().optional()
 });
 
@@ -3898,52 +3941,52 @@ __name(useCfgAccountsOtpRequestCreate, "useCfgAccountsOtpRequestCreate");
 import useSWRMutation8 from "swr/mutation";
 
 // src/_api/generated/_cfg_accounts/schemas/OTPVerifyResponse.ts
-import { z as z17 } from "zod";
+import { z as z19 } from "zod";
 
 // src/_api/generated/_cfg_accounts/schemas/User.ts
-import { z as z16 } from "zod";
+import { z as z18 } from "zod";
 
 // src/_api/generated/_cfg_accounts/schemas/CentrifugoToken.ts
-import { z as z15 } from "zod";
-var CentrifugoTokenSchema = z15.object({
-  token: z15.string(),
-  centrifugo_url: z15.string(),
-  expires_at: z15.string().datetime({ offset: true }),
-  channels: z15.array(z15.string())
+import { z as z17 } from "zod";
+var CentrifugoTokenSchema = z17.object({
+  token: z17.string(),
+  centrifugo_url: z17.string(),
+  expires_at: z17.string().datetime({ offset: true }),
+  channels: z17.array(z17.string())
 });
 
 // src/_api/generated/_cfg_accounts/schemas/User.ts
-var UserSchema = z16.object({
-  id: z16.number().int(),
-  email: z16.email(),
-  first_name: z16.string().max(50).nullable().optional(),
-  last_name: z16.string().max(50).nullable().optional(),
-  full_name: z16.string(),
-  initials: z16.string(),
-  display_username: z16.string(),
-  company: z16.string().max(100).nullable().optional(),
-  phone: z16.string().max(20).nullable().optional(),
-  position: z16.string().max(100).nullable().optional(),
-  language: z16.string().max(10).nullable().optional(),
-  timezone: z16.string().max(64).nullable().optional(),
-  avatar: z16.string().nullable(),
-  is_staff: z16.boolean(),
-  is_superuser: z16.boolean(),
-  date_joined: z16.string().datetime({ offset: true }),
-  last_login: z16.string().datetime({ offset: true }).nullable(),
-  unanswered_messages_count: z16.number().int().default(0),
+var UserSchema = z18.object({
+  id: z18.number().int(),
+  email: z18.email(),
+  first_name: z18.string().max(50).nullable().optional(),
+  last_name: z18.string().max(50).nullable().optional(),
+  full_name: z18.string(),
+  initials: z18.string(),
+  display_username: z18.string(),
+  company: z18.string().max(100).nullable().optional(),
+  phone: z18.string().max(20).nullable().optional(),
+  position: z18.string().max(100).nullable().optional(),
+  language: z18.string().max(10).nullable().optional(),
+  timezone: z18.string().max(64).nullable().optional(),
+  avatar: z18.string().nullable(),
+  is_staff: z18.boolean(),
+  is_superuser: z18.boolean(),
+  date_joined: z18.string().datetime({ offset: true }),
+  last_login: z18.string().datetime({ offset: true }).nullable(),
+  unanswered_messages_count: z18.number().int().default(0),
   centrifugo: CentrifugoTokenSchema.nullable(),
-  api_key: z16.string().nullable()
+  api_key: z18.string().nullable()
 });
 
 // src/_api/generated/_cfg_accounts/schemas/OTPVerifyResponse.ts
-var OTPVerifyResponseSchema = z17.object({
-  requires_2fa: z17.boolean().default(false).optional(),
-  session_id: z17.string().regex(/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i).nullable().optional(),
-  refresh: z17.string().nullable().optional(),
-  access: z17.string().nullable().optional(),
+var OTPVerifyResponseSchema = z19.object({
+  requires_2fa: z19.boolean().default(false).optional(),
+  session_id: z19.string().regex(/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i).nullable().optional(),
+  refresh: z19.string().nullable().optional(),
+  access: z19.string().nullable().optional(),
   user: UserSchema.nullable().optional(),
-  should_prompt_2fa: z17.boolean().optional()
+  should_prompt_2fa: z19.boolean().optional()
 });
 
 // src/_api/generated/_cfg_accounts/hooks/useCfgAccountsOtpVerifyCreate.ts
@@ -4045,10 +4088,10 @@ __name(useCfgAccountsProfileAvatarCreate, "useCfgAccountsProfileAvatarCreate");
 import useSWRMutation10 from "swr/mutation";
 
 // src/_api/generated/_cfg_accounts/schemas/AccountDeleteResponse.ts
-import { z as z18 } from "zod";
-var AccountDeleteResponseSchema = z18.object({
-  success: z18.boolean(),
-  message: z18.string()
+import { z as z20 } from "zod";
+var AccountDeleteResponseSchema = z20.object({
+  success: z20.boolean(),
+  message: z20.string()
 });
 
 // src/_api/generated/_cfg_accounts/hooks/useCfgAccountsProfilePartialPartialUpdate.ts
@@ -4103,7 +4146,7 @@ function useCfgAccountsProfilePartialUpdate(config) {
 __name(useCfgAccountsProfilePartialUpdate, "useCfgAccountsProfilePartialUpdate");
 
 // src/_api/generated/_cfg_accounts/hooks/useCfgAccountsProfileRetrieve.ts
-import useSWR4 from "swr";
+import useSWR5 from "swr";
 
 // src/_api/generated/_cfg_accounts/hooks/useCfgAccountsProfileUpdatePartialUpdate.ts
 import useSWRMutation13 from "swr/mutation";
@@ -4163,111 +4206,113 @@ import useSWRMutation15 from "swr/mutation";
 import useSWRMutation16 from "swr/mutation";
 
 // src/_api/generated/_cfg_accounts/schemas/TokenRefresh.ts
-import { z as z19 } from "zod";
-var TokenRefreshSchema = z19.object({
-  access: z19.string(),
-  refresh: z19.string()
+import { z as z21 } from "zod";
+var TokenRefreshSchema = z21.object({
+  access: z21.string(),
+  refresh: z21.string()
 });
 
 // src/_api/generated/_cfg_accounts/schemas/APIKeyRequest.ts
-import { z as z20 } from "zod";
-var APIKeyRequestSchema = z20.object({
-  key: z20.string().min(1),
-  reissued_at: z20.string().datetime({ offset: true }).nullable(),
-  created_at: z20.string().datetime({ offset: true })
+import { z as z22 } from "zod";
+var APIKeyRequestSchema = z22.object({
+  key: z22.string().min(1),
+  reissued_at: z22.string().datetime({ offset: true }).nullable(),
+  created_at: z22.string().datetime({ offset: true })
 });
 
 // src/_api/generated/_cfg_accounts/schemas/APIKeyTestRequest.ts
-import { z as z21 } from "zod";
-var APIKeyTestRequestSchema = z21.object({
-  key: z21.string().min(1)
+import { z as z23 } from "zod";
+var APIKeyTestRequestSchema = z23.object({
+  key: z23.string().min(1)
 });
 
 // src/_api/generated/_cfg_accounts/schemas/CfgUserUpdateRequest.ts
-import { z as z22 } from "zod";
-var CfgUserUpdateRequestSchema = z22.object({
-  first_name: z22.string().max(50).optional(),
-  last_name: z22.string().max(50).optional(),
-  company: z22.string().max(100).optional(),
-  phone: z22.string().max(20).optional(),
-  position: z22.string().max(100).optional(),
-  language: z22.string().max(10).optional(),
-  timezone: z22.string().max(64).optional()
+import { z as z24 } from "zod";
+var CfgUserUpdateRequestSchema = z24.object({
+  first_name: z24.string().max(50).optional(),
+  last_name: z24.string().max(50).optional(),
+  company: z24.string().max(100).optional(),
+  phone: z24.string().max(20).optional(),
+  position: z24.string().max(100).optional(),
+  language: z24.string().max(10).optional(),
+  timezone: z24.string().max(64).optional()
 });
 
 // src/_api/generated/_cfg_accounts/schemas/OAuthAuthorizeRequestRequest.ts
-import { z as z23 } from "zod";
-var OAuthAuthorizeRequestRequestSchema = z23.object({
-  redirect_uri: z23.string().optional(),
-  source_url: z23.string().optional()
+import { z as z25 } from "zod";
+var OAuthAuthorizeRequestRequestSchema = z25.object({
+  redirect_uri: z25.string().optional(),
+  source_url: z25.string().optional()
 });
 
 // src/_api/generated/_cfg_accounts/schemas/OAuthCallbackRequestRequest.ts
-import { z as z24 } from "zod";
-var OAuthCallbackRequestRequestSchema = z24.object({
-  code: z24.string().min(10).max(500),
-  state: z24.string().min(20).max(100),
-  redirect_uri: z24.string().optional()
+import { z as z26 } from "zod";
+var OAuthCallbackRequestRequestSchema = z26.object({
+  code: z26.string().min(10).max(500),
+  state: z26.string().min(20).max(100),
+  redirect_uri: z26.string().optional()
 });
 
 // src/_api/generated/_cfg_accounts/schemas/OAuthDisconnectRequestRequest.ts
-import { z as z25 } from "zod";
-var OAuthDisconnectRequestRequestSchema = z25.object({
+import { z as z27 } from "zod";
+var OAuthDisconnectRequestRequestSchema = z27.object({
   provider: OAuthProviderEnumSchema
 });
 
 // src/_api/generated/_cfg_accounts/schemas/OAuthError.ts
-import { z as z26 } from "zod";
-var OAuthErrorSchema = z26.object({
-  error: z26.string(),
-  error_description: z26.string().optional()
+import { z as z28 } from "zod";
+var OAuthErrorSchema = z28.object({
+  error: z28.string(),
+  error_description: z28.string().optional()
 });
 
 // src/_api/generated/_cfg_accounts/schemas/OTPErrorResponse.ts
-import { z as z27 } from "zod";
-var OTPErrorResponseSchema = z27.object({
-  error: z27.string(),
-  error_code: z27.string().nullable().optional(),
-  retry_after: z27.number().int().nullable().optional()
+import { z as z29 } from "zod";
+var OTPErrorResponseSchema = z29.object({
+  error: z29.string(),
+  error_code: z29.string().nullable().optional(),
+  retry_after: z29.number().int().nullable().optional()
 });
 
 // src/_api/generated/_cfg_accounts/schemas/OTPRequestRequest.ts
-import { z as z28 } from "zod";
-var OTPRequestRequestSchema = z28.object({
-  identifier: z28.string().min(1),
-  source_url: z28.string().optional()
+import { z as z30 } from "zod";
+var OTPRequestRequestSchema = z30.object({
+  identifier: z30.string().min(1),
+  source_url: z30.string().optional(),
+  marketing_consent: z30.boolean().nullable().optional(),
+  consent_disclosure_version: z30.string().max(64).optional()
 });
 
 // src/_api/generated/_cfg_accounts/schemas/OTPVerifyRequest.ts
-import { z as z29 } from "zod";
-var OTPVerifyRequestSchema = z29.object({
-  identifier: z29.string().min(1),
-  otp: z29.string().min(4).max(4),
-  source_url: z29.string().optional()
+import { z as z31 } from "zod";
+var OTPVerifyRequestSchema = z31.object({
+  identifier: z31.string().min(1),
+  otp: z31.string().min(4).max(4),
+  source_url: z31.string().optional()
 });
 
 // src/_api/generated/_cfg_accounts/schemas/PatchedCfgUserUpdateRequest.ts
-import { z as z30 } from "zod";
-var PatchedCfgUserUpdateRequestSchema = z30.object({
-  first_name: z30.string().max(50).optional(),
-  last_name: z30.string().max(50).optional(),
-  company: z30.string().max(100).optional(),
-  phone: z30.string().max(20).optional(),
-  position: z30.string().max(100).optional(),
-  language: z30.string().max(10).optional(),
-  timezone: z30.string().max(64).optional()
+import { z as z32 } from "zod";
+var PatchedCfgUserUpdateRequestSchema = z32.object({
+  first_name: z32.string().max(50).optional(),
+  last_name: z32.string().max(50).optional(),
+  company: z32.string().max(100).optional(),
+  phone: z32.string().max(20).optional(),
+  position: z32.string().max(100).optional(),
+  language: z32.string().max(10).optional(),
+  timezone: z32.string().max(64).optional()
 });
 
 // src/_api/generated/_cfg_accounts/schemas/TokenBlacklistRequest.ts
-import { z as z31 } from "zod";
-var TokenBlacklistRequestSchema = z31.object({
-  refresh: z31.string().min(1)
+import { z as z33 } from "zod";
+var TokenBlacklistRequestSchema = z33.object({
+  refresh: z33.string().min(1)
 });
 
 // src/_api/generated/_cfg_accounts/schemas/TokenRefreshRequest.ts
-import { z as z32 } from "zod";
-var TokenRefreshRequestSchema = z32.object({
-  refresh: z32.string().min(1)
+import { z as z34 } from "zod";
+var TokenRefreshRequestSchema = z34.object({
+  refresh: z34.string().min(1)
 });
 
 // src/auth/context/AccountsContext.tsx
@@ -4522,13 +4567,20 @@ var AuthProviderInternal = /* @__PURE__ */ __name(({ children, config }) => {
     }
   }, [loadCurrentProfile, router]);
   const requestOTP = useCallback11(
-    async (identifier, sourceUrl) => {
+    async (identifier, sourceUrl, consent) => {
       auth.clearSession();
       try {
-        const result = await accountsRef.current.requestOTP({
+        const body = {
           identifier,
-          source_url: sourceUrl
-        });
+          source_url: sourceUrl,
+          // Absent when the consuming app didn't enable the opt-in checkbox —
+          // the backend treats absent/null as "not asked".
+          ...consent && {
+            marketing_consent: consent.marketingConsent,
+            consent_disclosure_version: consent.disclosureVersion
+          }
+        };
+        const result = await accountsRef.current.requestOTP(body);
         Analytics.event("auth_otp_request" /* AUTH_OTP_REQUEST */, {
           category: "auth" /* AUTH */,
           label: "email"