@exulu/backend 3.5.1 → 3.6.0

package/dist/index.cjs

@@ -11452,6 +11452,52 @@ var usersSchema = {
       // triggered by the key with project_id_ for LiteLLM cost attribution.
       name: "project",
       type: "uuid"
+    },
+    // ── Lead capture (see lead-capture spec §5) ─────────────────────────────
+    // Consent must be *provable* under Art. 7(1) GDPR: who agreed, when, and
+    // to which wording. Hence a timestamp per consent and a version string
+    // pointing at the exact text that was shown.
+    {
+      // Current state of the optional marketing consent.
+      name: "marketing_consent",
+      type: "boolean",
+      default: false
+    },
+    {
+      // When marketing consent was GIVEN.
+      name: "marketing_consent_at",
+      type: "date"
+    },
+    {
+      // When marketing consent was WITHDRAWN. Deliberately a separate column:
+      // overwriting marketing_consent_at on withdrawal would destroy the grant
+      // time, and with it the ability to prove the order of events if someone
+      // later claims they were mailed after withdrawing.
+      name: "marketing_consent_withdrawn_at",
+      type: "date"
+    },
+    {
+      // When the mandatory storage/processing consent was given.
+      name: "processing_consent_at",
+      type: "date"
+    },
+    {
+      // When the user asked for erasure (Art. 17). The row survives so the
+      // one-month deadline stays queryable even if the notification mail fails.
+      name: "erasure_requested_at",
+      type: "date"
+    },
+    {
+      // Where the lead came from, e.g. "eu-ai-act-bot".
+      name: "signup_source",
+      type: "text"
+    },
+    {
+      // Version of the consent wording that was actually displayed, e.g.
+      // "2026-08-18". The wording itself lives in the frontend repo under
+      // version control; this column points at it.
+      name: "consent_version",
+      type: "text"
     }
   ]
 };
@@ -11760,6 +11806,32 @@ var addCoreFields = (schema) => {
   }
   return schema;
 };
+var otpSendAttemptsSchema = {
+  type: "otp_send_attempts",
+  name: {
+    plural: "otp_send_attempts",
+    singular: "otp_send_attempt"
+  },
+  fields: [
+    {
+      name: "key",
+      type: "text",
+      index: true,
+      unique: true,
+      required: true
+    },
+    {
+      name: "count",
+      type: "number",
+      required: true
+    },
+    {
+      name: "window_start",
+      type: "date",
+      required: true
+    }
+  ]
+};
 var coreSchemas = {
   get: () => {
     const license = checkLicense();
@@ -11780,7 +11852,8 @@ var coreSchemas = {
       contextPresetsSchema: () => addCoreFields(contextPresetsSchema),
       sharedArtifactsSchema: () => addCoreFields(sharedArtifactsSchema),
       transcriptionJobsSchema: () => addCoreFields(transcriptionJobsSchema),
-      imageGenerationsSchema: () => addCoreFields(imageGenerationsSchema)
+      imageGenerationsSchema: () => addCoreFields(imageGenerationsSchema),
+      otpSendAttemptsSchema: () => addCoreFields(otpSendAttemptsSchema)
     };
     if (license["agent-feedback"]) {
       schemas.feedbackSchema = () => addCoreFields(feedbackSchema);
@@ -31560,7 +31633,8 @@ var {
   promptFavoritesSchema: promptFavoritesSchema3,
   transcriptionJobsSchema: transcriptionJobsSchema3,
   imageGenerationsSchema: imageGenerationsSchema2,
-  sharedArtifactsSchema: sharedArtifactsSchema2
+  sharedArtifactsSchema: sharedArtifactsSchema2,
+  otpSendAttemptsSchema: otpSendAttemptsSchema2
 } = coreSchemas.get();
 var addMissingFields = async (knex, tableName, fields, skipFields = []) => {
   for (const field of fields) {
@@ -31631,7 +31705,8 @@ var up = async function(knex) {
     variablesSchema3(),
     skillsSchema3(),
     workflowTemplatesSchema3(),
-    workflowTriggersSchema2()
+    workflowTriggersSchema2(),
+    otpSendAttemptsSchema2()
   ];
   const createTable = async (schema) => {
     if (!await knex.schema.hasTable(schema.name.plural)) {

package/dist/index.js

@@ -2568,6 +2568,52 @@ var usersSchema = {
       // triggered by the key with project_id_ for LiteLLM cost attribution.
       name: "project",
       type: "uuid"
+    },
+    // ── Lead capture (see lead-capture spec §5) ─────────────────────────────
+    // Consent must be *provable* under Art. 7(1) GDPR: who agreed, when, and
+    // to which wording. Hence a timestamp per consent and a version string
+    // pointing at the exact text that was shown.
+    {
+      // Current state of the optional marketing consent.
+      name: "marketing_consent",
+      type: "boolean",
+      default: false
+    },
+    {
+      // When marketing consent was GIVEN.
+      name: "marketing_consent_at",
+      type: "date"
+    },
+    {
+      // When marketing consent was WITHDRAWN. Deliberately a separate column:
+      // overwriting marketing_consent_at on withdrawal would destroy the grant
+      // time, and with it the ability to prove the order of events if someone
+      // later claims they were mailed after withdrawing.
+      name: "marketing_consent_withdrawn_at",
+      type: "date"
+    },
+    {
+      // When the mandatory storage/processing consent was given.
+      name: "processing_consent_at",
+      type: "date"
+    },
+    {
+      // When the user asked for erasure (Art. 17). The row survives so the
+      // one-month deadline stays queryable even if the notification mail fails.
+      name: "erasure_requested_at",
+      type: "date"
+    },
+    {
+      // Where the lead came from, e.g. "eu-ai-act-bot".
+      name: "signup_source",
+      type: "text"
+    },
+    {
+      // Version of the consent wording that was actually displayed, e.g.
+      // "2026-08-18". The wording itself lives in the frontend repo under
+      // version control; this column points at it.
+      name: "consent_version",
+      type: "text"
     }
   ]
 };
@@ -2876,6 +2922,32 @@ var addCoreFields = (schema) => {
   }
   return schema;
 };
+var otpSendAttemptsSchema = {
+  type: "otp_send_attempts",
+  name: {
+    plural: "otp_send_attempts",
+    singular: "otp_send_attempt"
+  },
+  fields: [
+    {
+      name: "key",
+      type: "text",
+      index: true,
+      unique: true,
+      required: true
+    },
+    {
+      name: "count",
+      type: "number",
+      required: true
+    },
+    {
+      name: "window_start",
+      type: "date",
+      required: true
+    }
+  ]
+};
 var coreSchemas = {
   get: () => {
     const license = checkLicense();
@@ -2896,7 +2968,8 @@ var coreSchemas = {
       contextPresetsSchema: () => addCoreFields(contextPresetsSchema),
       sharedArtifactsSchema: () => addCoreFields(sharedArtifactsSchema),
       transcriptionJobsSchema: () => addCoreFields(transcriptionJobsSchema),
-      imageGenerationsSchema: () => addCoreFields(imageGenerationsSchema)
+      imageGenerationsSchema: () => addCoreFields(imageGenerationsSchema),
+      otpSendAttemptsSchema: () => addCoreFields(otpSendAttemptsSchema)
     };
     if (license["agent-feedback"]) {
       schemas.feedbackSchema = () => addCoreFields(feedbackSchema);
@@ -22174,7 +22247,8 @@ var {
   promptFavoritesSchema: promptFavoritesSchema3,
   transcriptionJobsSchema: transcriptionJobsSchema3,
   imageGenerationsSchema: imageGenerationsSchema2,
-  sharedArtifactsSchema: sharedArtifactsSchema2
+  sharedArtifactsSchema: sharedArtifactsSchema2,
+  otpSendAttemptsSchema: otpSendAttemptsSchema2
 } = coreSchemas.get();
 var addMissingFields = async (knex, tableName, fields, skipFields = []) => {
   for (const field of fields) {
@@ -22245,7 +22319,8 @@ var up = async function(knex) {
     variablesSchema3(),
     skillsSchema3(),
     workflowTemplatesSchema3(),
-    workflowTriggersSchema2()
+    workflowTriggersSchema2(),
+    otpSendAttemptsSchema2()
   ];
   const createTable = async (schema) => {
     if (!await knex.schema.hasTable(schema.name.plural)) {

package/ee/python/requirements.txt

@@ -24,17 +24,26 @@ pyannote.audio>=3.3.0
 # Belt-and-suspenders: keep huggingface_hub on the 0.x line so pyannote 3.x's
 # `use_auth_token=` calls keep working (1.x removed that kwarg → diarization off).
 huggingface_hub<1.0
-fastapi
 uvicorn
 python-multipart
 requests
 # LiteLLM proxy — only used when EXULU_USE_LITELLM=true. Always installed so
 # the dep is ready when the env var is flipped. Pinned to a tested version;
 # upgrade deliberately.
-litellm[proxy]==1.85.1
+litellm[proxy]==1.97.0
+# FastAPI ceiling — NOT cosmetic. litellm 1.97.0 declares fastapi>=0.136.3,<1.0
+# but imports the private `get_flat_dependant` from fastapi.dependencies.utils
+# (proxy/management_endpoints/management_v1/common.py:7), which FastAPI deleted
+# in 0.140.7. Any resolve that picks 0.140.7+ yields a proxy that cannot start:
+# "ImportError: cannot import name 'get_flat_dependant'". 0.140.6 is the last
+# version that still has it. NOTE: fastapi is also a first-party dependency of
+# ee/python/transcription/server.py (not just a litellm transitive). Once
+# litellm ships its own ceiling, replace this constrained pin with a bare
+# `fastapi` line — do not delete it entirely.
+fastapi>=0.136.3,<0.140.7  # to confirm this pin is still needed: grep -r get_flat_dependant $(pip show litellm | awk '/Location/{print $2}')/litellm/proxy/
 # Prisma Python client — required by LiteLLM proxy whenever a `database_url`
 # is set in config.litellm.yaml (used for user/budget tracking, key
-# management, etc.). NOT included in litellm[proxy] in 1.85.1, hence the
+# management, etc.). NOT included in litellm[proxy] in 1.97.0, hence the
 # separate pin. setup.sh runs `prisma generate` against LiteLLM's bundled
 # schema after pip install so the Python client module is materialized.
 prisma==0.15.0

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@exulu/backend",
   "author": "Qventu Bv.",
-  "version": "3.5.1",
+  "version": "3.6.0",
   "main": "./dist/index.js",
   "private": false,
   "publishConfig": {