Dozor
User

Regenerate the DiceBear avatar seed

Rolls the avatar seed to a fresh UUID. The `image` URL changes; everything else stays. Returns the new URL so the client updates its avatar slot without a full profile refetch.

POST/api/user/avatar

Rolls the avatar seed to a fresh UUID. The image URL changes; everything else stays. Returns the new URL so the client updates its avatar slot without a full profile refetch.

Response Body

application/json

curl -X POST "https://loading/api/user/avatar"
{
  "image": "https://api.dicebear.com/9.x/shapes/svg?seed=cf3a7b2e9d1c4f5a"
}
Empty

Hard-delete the signed-in user's account DELETE

Destructive. Confirmation phrase enforced server-side via `deleteAccountSchema` so a misclick can't wipe the account. One transaction: solo-member orgs are deleted outright (cascades invites + full data hierarchy); shared orgs get ownership transfer so an ownerless org is impossible after the cascade. The user row deletes last — cascades accounts, authenticators, memberships.

Update the user's UI locale preference PATCH

Validates against the canonical `LOCALES` tuple. The session refresh + URL prefix swap happen client-side: on `204` the client calls `session.update({})` to force a JWT refresh, then `router.replace(pathname, { locale })` to swap the URL. All three steps are sequenced inside `useUpdateLocaleMutation.onSuccess`.