@palbase/web 7.1.0 → 7.2.0

package/dist/index.cjs

@@ -936,6 +936,26 @@ var PalbeAuth = class {
       })
     );
   }
+  /**
+   * Give a passwordless account its FIRST password, in-app.
+   *
+   * For accounts created with a passkey or a social provider: they have no
+   * current password, so `updatePassword` cannot serve them — it sends one and
+   * the server answers 401. Before this existed the only route was the
+   * password-RESET e-mail, which asks someone already signed in to go find
+   * their inbox.
+   *
+   * Requires a RECENT sign-in, not merely a session: a first password is a
+   * credential that outlives the rest, so the server answers 403
+   * `reauthentication_required` on a stale one — the same gate
+   * `registerPasskey` carries. An account that already has a password gets 409
+   * `password_already_set`; change it with `updatePassword` instead.
+   *
+   * The session stays valid — no re-login.
+   */
+  async setPassword(newPassword) {
+    unwrap(await this.rt.authClient.setPassword({ new_password: newPassword }));
+  }
   async verifyEmail(params) {
     unwrap(await this.rt.authClient.verifyEmail(params));
   }
@@ -7891,7 +7911,7 @@ function localStorageSessionStorage(key = DEFAULT_KEY) {
 }
 
 // src/version.ts
-var VERSION = "7.1.0";
+var VERSION = "7.2.0";
 
 // src/internal.ts
 function getRuntime() {