wtclaude
6be83fe70a
All checks were successful
PR Checks / android-build (pull_request) Successful in 14m55s
ACCOUNT_DELETION.md §4.3 (step 4). My account gains a Delete my account row, last and set apart, which opens its own screen: what goes, what stays, the staff note, then the typed username, the password and, when two-factor is on, an authenticator or recovery code. Delete stays off until the name matches. MeApi.deleteAccount sends DELETE /auth/me/account and reads the raw response, so each refusal's code becomes its own sentence (the website's words). A wrong password is a 400 (AD12), so the authenticator never replays it. On success AuthRepository.forgetDeletedAccount does what a sign-out does without its server calls: the inbox snapshot, the trust token (which a sign-out keeps, but the account is gone) and the session, whose teardown also drops the push registration. It is not cancellable. The route holds the view model, so it tells a deletion from any other sign-out, and opens sign-in with "Your account has been deleted." on the shell's snackbar. Tests: the refusal mapping per code, 429, unknown codes, no answer, the request body; the confirm rule, the staff rule, each refusal's sentence. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01E14m6SuuY6i1vASFeGDBeY