diff --git a/.phase6-state.json b/.phase6-state.json
index 9c91d7a..a4af4ba 100644
--- a/.phase6-state.json
+++ b/.phase6-state.json
@@ -2,10 +2,11 @@
   "completed_features": [
     "password-change"
   ],
-  "current_feature": "keyboard-shortcuts",
+  "current_feature": "api-client-phase6",
   "started_at": "2026-05-23T05:30:16.203066",
   "attempted_features": [
     "audit-log",
-    "calendar-week-view"
+    "calendar-week-view",
+    "keyboard-shortcuts"
   ]
 }
\ No newline at end of file
diff --git a/GENERATION_LOG.md b/GENERATION_LOG.md
index ebc9d06..23625cf 100644
--- a/GENERATION_LOG.md
+++ b/GENERATION_LOG.md
@@ -706,3 +706,17 @@ src/routes/audit-log.ts(3,10): error TS2724: '"../db/schema"' has no exported me
 undefined
 /home/dark/Developer/EmberClone/apps/api:
  ERR_PNPM_RECURSIVE_EXEC_FIRST_FAIL  Command failed with exit code 2: tsc --noEmit -p tsconfig.json
+- `05:34:31` **INFO**   Committed feature keyboard-shortcuts
+- `05:34:32` **INFO**   Pushed: rc=0
+
+## Phase-3 Feature: api-client-phase6 (2026-05-23 05:34:32)
+
+- `05:34:32` **INFO** Description: API um password + audit-log erweitert
+- `05:34:32` **INFO**   Generating apps/web/src/lib/api.ts (ERWEITERT — behalte ALLES. Füge: changePassword({oldPassword, newPassw…)
+- `05:35:11` **INFO**     wrote 4438 chars in 38.9s (attempt 1)
+- `05:35:11` **INFO** Running tsc --noEmit on api…
+- `05:35:12` **WARN**   tsc errors:
+src/routes/audit-log.ts(3,10): error TS2724: '"../db/schema"' has no exported member named 'auditLogs'. Did you mean 'auditLog'?
+undefined
+/home/dark/Developer/EmberClone/apps/api:
+ ERR_PNPM_RECURSIVE_EXEC_FIRST_FAIL  Command failed with exit code 2: tsc --noEmit -p tsconfig.json
diff --git a/apps/web/src/lib/api.ts b/apps/web/src/lib/api.ts
index 18b86e3..8f39d8a 100644
--- a/apps/web/src/lib/api.ts
+++ b/apps/web/src/lib/api.ts
@@ -49,6 +49,13 @@ export const api = {
     return request<{ id: string; email: string; name: string; role: "admin" | "user" }>("/auth/me")
   },
 
+  async changePassword(data: { oldPassword: string; newPassword: string }) {
+    return request("/auth/change-password", {
+      method: "POST",
+      body: JSON.stringify(data)
+    })
+  },
+
   async updateProfile(data: { name: string }) {
     return request("/users/me", {
       method: "PATCH",
@@ -161,20 +168,8 @@ export const api = {
     })
   },
 
-  async deleteUser(id: string) {
-    return request(`/users/${id}`, {
-      method: "DELETE"
-    })
-  },
-
-  async getSettings() {
-    return request<any>("/settings")
-  },
-
-  async updateSettings(data: { workspaceName?: string; defaultBillable?: boolean; weekStart?: number }) {
-    return request("/settings", {
-      method: "PATCH",
-      body: JSON.stringify(data)
-    })
+  async listAuditLog(opts?: Record<string, string>) {
+    const query = opts ? `?${new URLSearchParams(opts).toString()}` : ""
+    return request<any[]>(`/audit-log${query}`)
   }
 }
\ No newline at end of file