# Delete User

Delete a user account. Supports both self-deletion and admin deletion.

**Endpoints**:
- Self-deletion: `DELETE /api/auth/profile`
- Admin deletion: `DELETE /api/auth/profile/:id`

**Auth**: Required

## Self-Deletion

Users can delete their own account. This permanently removes the user and all associated data.

**Endpoint**: `DELETE /api/auth/profile`

## Admin Deletion

Admins can delete any user account by providing the user ID in the URL.

**URL Parameter**: `:id` - Target user's UUID

**Endpoint**: `DELETE /api/auth/profile/:id`

## Response (200 OK)

```json
{
  "message": "account deleted"
}
```

## Error Responses

| Code | Description |
|------|-------------|
| 400 | Cannot delete the last admin |
| 401 | Invalid or expired token |
| 403 | Admin access required (trying to delete another user) |
| 404 | User not found (admin mode only) |

## Safety Rules

- The last remaining admin cannot be deleted
- Self-deletion requires the user to not be the last admin
- Admin deletion is restricted to admin role only