Soft-delete an asset

DELETE

/assets/{id}

• Local development behind nginx (port 8088 by default)

Marks the asset deleted (sets deleted_at). The storage pin is removed; the GC sweeper later collects bytes that are no longer pinned by anyone.

Accepts optional {reason} body captured into deleted_reason for the admin recovery-window audit.

Authorizations

• cookieAuth
• bearerAuth

Parameters

Path Parameters

id

required

string format: uuid

Request Body

Optional body on DELETE endpoints that soft-delete an entity. The reason free-text string is captured verbatim into the entity’s deleted_reason column so admin recovery-window audits carry operator context.

The body itself is optional — a bare DELETE with no body is still valid + writes deleted_reason = NULL. When present, an empty-string reason is treated the same as missing.

object

reason

Free-text explanation of why the entity was deleted. Max 500 characters; validated at the handler.

string

<= 500 characters

Responses

204

Deleted

400

Malformed request

object

error

required

Human-readable error summary

string

Example

the request could not be completed

401

Authentication required, missing, or invalid

object

error

required

Human-readable error summary

string

Example

the request could not be completed

Example

{
  "error": "authentication required: sign in and retry with a valid session or API token"
}

404

Resource not found

object

error

required

Human-readable error summary

string

Example

the request could not be completed