[harlan-zw]

Rebased onto main now that #241 has landed. The old base branch was merged, so the diff read against a dead ref.

❓ Type of change

• ✨ New feature

📚 Description

Nobody could delete a skilld account, and nothing on skilld.dev said what the site stores. This adds both.

Account deletion. /me gets a Delete account section. The confirm dialog asks for the GitHub login. DELETE /api/me also needs the sign-in cookie: a CLI token alone gets a 403, so a token copied off a laptop cannot delete the account. One D1 batch removes every row that names the account. Then the Worker asks GitHub to revoke the OAuth grant and clears the session. If GitHub refuses or times out, the account is still gone and the toast links to GitHub settings.

Decisions I made:

• Skills from the person's public Repositories stay. GitHub is their source, and discovery would index them again anyway. owners and skill_revisions.author_login stay for the same reason.
• Collections, likes, watches, and imported stars go. Likes and collection entries feed Skill counters, so the affected Skills join skill_dirty for a recount.
• Every account table gets its own delete, cascade or not. email_preference_events has no foreign key, so deleting the users row alone would leave rows behind.
• GitHub App rows are only deleted locally. The App installation and its user authorization stay on GitHub, and private Artifact ciphertext stays in R2 without its account keys. Private delivery is off in production, so GitHub-side cleanup waits for when it ships.

/privacy is a Markdown article like /verify, linked from the footer and from the delete section. It now describes the site as it actually works, including the parts that exist to grow it:

• Anonymous usage counts. A copied command records the surface, the grammar, the Skill, and the country in Cloudflare Analytics Engine for 90 days. No IP address, no cookie, no account ID, and no record of an individual copy.
• Cloudflare Web Analytics through the same-origin proxy, and timing traces on 1 request in 100.
• Aggregate email click counts, including the links to GitHub, which are counted by Repository.
• The defaults for liked Skills and Repository indexing, both on with a switch in /me.

Merge this last, after #240, #243, and #244. /privacy describes the site once they land.

Loose ends:

• The CLI README link points at #privacy, which exists only on chore(protocol): remove the unused CLI telemetry contract skilld#148 so far.
• Other browsers that are still signed in keep a dead session cookie until they sign out. Their account requests return 401.
• /privacy says D1 Time Travel can keep deleted rows for up to 30 days, the Workers Paid window.
• Deletion skips weekly_click_events, because chore(analytics): keep anonymous usage aggregates, drop the visitor trail #240's migration drops it and a delete against it would then fail. feat(identity): count email clicks as daily aggregates #243's email_click_counts names no account, so it needs no delete.

🤖 AI disclosure: Harlan Agent Kit modified this description. My AI open-source policy.

[harlan-zw]

Checked by hand, since CI cannot cover it:

• Deleted a seeded account through the dashboard on nuxi dev with a local D1. DELETE /api/me returned 200 with github_access_revoked: false, because the account had no stored token. Its user, like, watch, collection, collection entry, CLI token, and email preference rows were gone. skill_dirty gained acme/skills/diagnose (like) and acme/skills/tdd (curator). The browser lost its session cookie and landed on the home page with the GitHub settings toast.
• The confirm button stayed disabled for demo-de and turned on for Demo-Dev.
• A production build preview set __nkpv with Max-Age=604800 on a document request, and nuxt-session with no expiry, HttpOnly, and SameSite=Lax. Those match the cookie list on /privacy.
• Production wide events carry cf.country and cf.colo, so /privacy says request logs hold your country and the data center.

Delete account section	Confirm dialog

/privacy, desktop	/privacy, mobile

[harlan-github-agent]

🤖 MERGED

Harlan Agent Kit posted this automated review. It is not Harlan's personal review or approval. AI open source policy. Last updated: 2026-09-22 07:02 UTC.

GitHub merged this pull request.

No material findings were recorded.

22de60c4-00c2-45fa-ad70-eb09cd953593