Lexicon Garden

app.tempomusic.actor.deleteAccount

Schedule the requesting viewer's account for deletion. Soft-deletes the profile and cascades soft-delete on every post, reply and like owned by the viewer in a single transaction. The viewer can log back in within 30 days and call restoreAccount to undo. After 30 days the account is hard-deleted irreversibly and the content is anonymised. See ADR-009 for the full retention lifecycle.

Repository @lexicons.tempomusic.fan did:plc:pxsuqmultto34oks44m2lgxm namespace authority
Details · procedure
Kindprocedure
Authorityactor.tempomusic.app
Indexed
Compare Edit in builder → Fork →

Procedure

procedure · POST

Parameters

query string

viewer

requiredstring · did

DID of the requesting viewer whose account is being deleted. Must match the authenticated principal.

Output

application/json

Errors

AlreadyDeleted

The viewer's profile is already in the soft-deleted state. Call restoreAccount first if the intent was to extend the window, or wait for the 30-day hard-delete.

Similar lexicons

semantic match

Lexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.

  • app.tempomusic.actor.restoreAccount

    procedure

    Restore the requesting viewer's previously soft-deleted account. Clears deleted_at on the profile and unconditionally on every post, reply and like owned by the viewer (including content the viewer soft-deleted individually before the account cascade). Moderation-held content stays in moderation hold. Only valid within the 30-day restoration window opened by deleteAccount; outside the window the profile has been hard-deleted and the cascade content is anonymised, so restoration is impossible. Se

  • app.tempomusic.actor.getDeletionState

    query

    Return the requesting viewer's account-deletion state so the client's bootstrap gate can decide between showing the app, the dated restoration screen, or the terminal 'window passed' variant (TEM-492). The viewer DID is read from the service-auth JWT (`iss` claim) — no explicit parameter, matching the appview's `getAnalyticsConsent` convention. When the profile row has been hard-deleted at day 30 the endpoint returns `deleted: false` (indistinguishable from an account that was never deleted — in

  • app.didpic.admin.deleteActor

    procedure

    Delete an account's data.

  • rip.pds.account.deleteAccount

    procedure

    Delete an account the caller minted, ahead of its expiry. The identity is retired as it would have been on expiry.

  • com.atproto.admin.deleteAccount

    procedure

    Delete a user account as an administrator.