core/docs/ICD/profile.md

User Profile & Settings

Profile

GET /profile                        → profileResponse
PUT /profile                        ← { "display_name", "email" }

{
  "id": "uuid",
  "username": "jdoe",
  "email": "jdoe@example.com",
  "display_name": "Jane Doe",
  "role": "user|admin",
  "avatar_url": "...",
  "created_at": "...",
  "last_login": "..."
}

Avatar

POST   /profile/avatar              ← multipart/form-data (field: "avatar")
DELETE /profile/avatar

Password

POST /profile/password

{
  "current_password": "...",
  "new_password": "..."
}

On password change, the UEK is re-wrapped with the new password (BYOK keys remain accessible without re-encryption).

App Settings

GET /settings                       → { "settings": {...} }
PUT /settings                       ← { "theme", "editor_keybindings", ... }

User-level preferences (theme, keybindings, default model, etc.).

---