AIR Account
Self-service account management for the signed-in user: update display name, change or set a password, and change email. Changing email is a confirmed two-step flow — request a one-time code (sent to the current email to prove mailbox control, which works for OTP-only users) then verify it; the change cascades to credentials and invalidates existing sessions (forces re-login). OTP-only invited users may set a first password without supplying a current password.
Update account profile
Updates the signed-in user display name. Requires a human user session; service-account API keys receive 403.
Request email change verification
Starts a confirmed email-change flow by sending a one-time code to the current mailbox. Returns 409 when the target email is already in use.
Verify email change
Completes the email-change flow with the code from `requestEmailChange`. Updates credentials and invalidates existing sessions, forcing re-login.
Change account password
Sets or rotates the signed-in user password. OTP-only invited users may set a first password without supplying a current password.