#Authentication

#Get current user

Returns the currently authenticated user.

Response:

{
  "id": "uuid",
  "username": "alice",
  "displayName": "Alice",
  "avatarUrl": "https://...",
  "isBot": false
}

const me = await client.getMe()

me = client.get_me()

#Update profile

const updated = await client.updateProfile({
  displayName: 'New Name',
  avatarUrl: 'https://example.com/avatar.png',
})

updated = client.update_profile(
    display_name="New Name",
    avatar_url="https://example.com/avatar.png",
)

#Get user profile

Returns a public user profile by ID.

const profile = await client.getUserProfile('user-id')

profile = client.get_user_profile("user-id")

#Register

No authentication required.

const { accessToken, refreshToken, user } = await client.register({
  email: 'alice@example.com',
  password: 'secure-password',
  displayName: 'Alice',
})

result = client.register(
    email="alice@example.com",
    password="secure-password",
    display_name="Alice",
)
access_token = result["accessToken"]

#Email code login

Email code verification signs in an existing user or creates a visitor account.

await client.startEmailLogin({ email: 'alice@example.com' })
const { accessToken, refreshToken, user } = await client.verifyEmailLogin({
  email: 'alice@example.com',
  code: '123456',
})

#Password reset by email

start always returns the same success shape so callers cannot discover whether an email address is registered. The reset email contains a single-use link to /app/reset-password; the token expires after 30 minutes and is stored space-side only as a hash. Completing the reset updates the password and revokes existing sessions.

await client.startPasswordReset({ email: 'alice@example.com' })
await client.completePasswordReset({
  token: 'token-from-email-link',
  newPassword: 'new-secure-password',
  confirmPassword: 'new-secure-password',
})

#Login

No authentication required.

const { accessToken, refreshToken, user } = await client.login({
  email: 'alice@example.com',
  password: 'secret',
})

result = client.login(email="alice@example.com", password="secret")

#Refresh token

Returns a new JWT token.

Authentication failures return 401 with a stable code when the service can identify the cause:

const tokens = await client.refreshToken(refreshToken)

result = client.refresh_token(refresh_token)

#Membership

Invite codes are not required to register. Use membership APIs to unlock advanced capabilities:

Membership responses include status, tier, level, isMember, and effective capabilities. Treat capabilities as the source of truth for advanced actions; new tiers can be added later without changing this response shape.

Common advanced capabilities include cloud:deploy, server:create, invite:create, and oauth_app:create. A missing capability should be rendered as an upgrade or invite redemption path, not as a failed login.

Fast auth endpoints are rate limited. A 429 response includes RATE_LIMITED and Retry-After.

#Disconnect

Notifies the service that the client is disconnecting (used for presence tracking).

await client.disconnect()

client.disconnect()

#List linked OAuth accounts

const accounts = await client.listOAuthAccounts()

accounts = client.list_oauth_accounts()

#Unlink OAuth account

await client.unlinkOAuthAccount('account-id')

client.unlink_oauth_account("account-id")

#Change password

await client.changePassword({
  oldPassword: 'old-pass',
  newPassword: 'new-pass',
  confirmPassword: 'new-pass',
})

client.change_password(
    current_password="old-pass",
    new_password="new-pass",
)

#Google ID token login

Sign in or register using a Google ID token.

const { accessToken, refreshToken, user } = await client.loginWithGoogleIdToken('google-id-token')

result = client.login_with_google_id_token("google-id-token")

#Dashboard

Returns the current user's dashboard summary.

const dashboard = await client.getDashboard()

dashboard = client.get_dashboard()