Destroy a Post (soft-delete)
Token-authenticated. SOFT-delete via Discard — sets
discarded_at, does not hard-delete. The post is excluded
from every public surface and the company index (kept-scope
filter) but remains in the DB. Fires a posts.deleted
webhook post-commit.
Authorizations
Bearer token authentication. Accepts company-admin tokens with
storefront.view for read operations and storefront.update
for writes and scan triggers (legacy per-resource grants like
categories.update / products.view / etc. are still accepted
during the migration), required on every company operation.
Storefront public operations under /api/v202604/{resource} and
/api/v202604/{resource}/{slug} are unauthenticated
(security: []).
Path Parameters
The unique identifier of the post.
Response
Deleted (soft).