{"service":"consent-onamerica","version":"1.0.0","mesh_role":"Fleet Consent Service — the north star of *.onamerica.org","base_url":"https://consent-onamerica.ron-helms.workers.dev","fleet_auth":"https://auth-onamerica.ron-helms.workers.dev","fleet_auth_spec":"https://auth-onamerica.ron-helms.workers.dev/.well-known/fleet-auth.json","pairs_with":"comms-onamerica — consent governs what comms is allowed to send","principle":"Consent is the root. Everything flows from it. DECLINED is a clean state, not an error.","consent_types":["auth","biometric","comms_email","comms_sms","comms_push","data_sharing","data_processing","payment","location","analytics","terms","marketing","soc2_audit"],"consent_states":["OFFERED","ACCEPTED","IN_PROGRESS","GATE_PENDING","VERIFIED","COMPLETE","DECLINED","WITHDRAWN"],"endpoints":[{"method":"GET","path":"/api/consent/status/:email","description":"All consent states for a user across all ventures"},{"method":"GET","path":"/api/consent/status/:email/:venture","description":"Consent states for a user on a specific venture"},{"method":"POST","path":"/api/consent/grant","description":"Record a consent grant","body":"{ email, consent_type, venture?, context? }"},{"method":"POST","path":"/api/consent/withdraw","description":"Withdraw a previously granted consent","body":"{ email, consent_type, venture? }"},{"method":"GET","path":"/api/consent/check/:email/:type","description":"Quick boolean check: has this user consented to this type?","query":"?venture=X"},{"method":"GET","path":"/api/consent/export/:email","description":"GDPR export of all consent records"},{"method":"GET","path":"/.well-known/consent-spec.json","description":"This spec"}],"integration":{"for_comms":"Before sending, call GET /api/consent/check/:email/comms_email?venture=X. If false, do not send.","for_auth":"auth-onamerica records auth consent on successful magic code verification.","for_ventures":"Each venture records its own consent types via POST /api/consent/grant."}}