@palbase/web 5.0.1 → 7.0.0

package/dist/next/client.js

@@ -6,8 +6,8 @@ import {
 import {
   __configure,
   getRuntime
-} from "../chunk-QKFPPZLF.js";
-import "../chunk-BNAGRUIQ.js";
+} from "../chunk-7SNSLY5M.js";
+import "../chunk-ACCJV6FV.js";
 import "../chunk-CFDU23TB.js";
 import "../chunk-PZ5AY32C.js";
 

package/dist/next/index.cjs

@@ -166,6 +166,27 @@ var PalbaseError = class extends Error {
     this.details = details;
   }
 };
+function detectPlatform() {
+  if (typeof Deno !== "undefined") {
+    return "deno";
+  }
+  if (process?.versions) {
+    if ("bun" in process.versions) {
+      return "bun";
+    }
+    if ("node" in process.versions) {
+      return "node";
+    }
+  }
+  if (typeof navigator !== "undefined" && navigator.product === "ReactNative") {
+    return "react-native";
+  }
+  return "browser";
+}
+function wirePlatform() {
+  const host = detectPlatform();
+  return host === "browser" ? "web" : host;
+}
 var PALBASE_DEFAULT_HOST = "api.palbase.studio";
 var API_KEY_RE2 = /^pb_([a-z0-9]{4,24})_c[A-Za-z0-9]{20}$/;
 function parseEnvironmentRef(apiKey) {
@@ -251,8 +272,17 @@ var HttpClient = class _HttpClient {
   }
   buildHeaders(options) {
     const headers = {
-      "Content-Type": "application/json"
+      "Content-Type": "application/json",
+      // Client identity, the web counterpart of the iOS SDK's
+      // ClientInfo.augment(). The server reads these to resolve flag targeting
+      // conditions and to label telemetry, so an app declares nothing and calls
+      // nothing — whatever the SDK can know, it sends.
+      "X-Platform": wirePlatform()
     };
+    const appVersion = this.options?.appVersion?.trim();
+    if (appVersion) {
+      headers["X-Palbase-Client-Version"] = appVersion;
+    }
     const effectiveKey = this.apiKey;
     if (effectiveKey) {
       headers["apikey"] = effectiveKey;
@@ -1593,6 +1623,23 @@ var PalbeAuth = class {
     const raw = await palbeRequest(this.rt, "GET", "/auth/user");
     return mapWireUser(raw);
   }
+  /**
+   * Which credentials this account actually has.
+   *
+   * An account reached through Google has no password, so showing it a
+   * "current password" field gives the user something they can never fill —
+   * and `getUser()` cannot tell you, because GET /auth/user carries no
+   * credential information. Read this before rendering any re-auth or
+   * change-password form.
+   */
+  async getSignInMethods() {
+    const raw = await palbeRequest(this.rt, "GET", "/auth/me");
+    return {
+      password: raw.has_password,
+      mfa: raw.has_mfa,
+      providers: raw.providers ?? null
+    };
+  }
   async refreshUser() {
     const user = await this.getUser();
     const changed = !usersEqual(user, this.cachedUser);
@@ -9037,7 +9084,7 @@ function defaultSessionStorage(key) {
 }
 
 // src/version.ts
-var VERSION = "5.0.1";
+var VERSION = "7.0.0";
 
 // src/runtime.ts
 function buildRuntime(config) {