@palbase/web 7.1.0 → 7.2.0

package/dist/next/client.js

@@ -6,7 +6,7 @@ import {
 import {
   __configure,
   getRuntime
-} from "../chunk-P6TWUWZC.js";
+} from "../chunk-VXQUBBHG.js";
 import "../chunk-ACCJV6FV.js";
 import "../chunk-CFDU23TB.js";
 import "../chunk-PZ5AY32C.js";

package/dist/next/index.cjs

@@ -964,6 +964,20 @@ var AuthClient = class {
       body: params
     });
   }
+  /**
+   * Give a PASSWORDLESS account its first password.
+   *
+   * Separate from `changePassword` because that one cannot serve the case: it
+   * sends a current password and palauth answers an account that has none with
+   * 401. Requires a RECENT sign-in (403 `reauthentication_required` otherwise,
+   * the same gate passkey enrollment carries); an account that already has a
+   * password gets 409 `password_already_set`.
+   */
+  async setPassword(params) {
+    return this.httpClient.request("POST", "/auth/password/set", {
+      body: params
+    });
+  }
   // ── Token ───────────────────────────────────────────────
   async refresh() {
     const refreshToken = this.tokenManager.getRefreshToken();
@@ -1974,6 +1988,26 @@ var PalbeAuth = class {
       })
     );
   }
+  /**
+   * Give a passwordless account its FIRST password, in-app.
+   *
+   * For accounts created with a passkey or a social provider: they have no
+   * current password, so `updatePassword` cannot serve them — it sends one and
+   * the server answers 401. Before this existed the only route was the
+   * password-RESET e-mail, which asks someone already signed in to go find
+   * their inbox.
+   *
+   * Requires a RECENT sign-in, not merely a session: a first password is a
+   * credential that outlives the rest, so the server answers 403
+   * `reauthentication_required` on a stale one — the same gate
+   * `registerPasskey` carries. An account that already has a password gets 409
+   * `password_already_set`; change it with `updatePassword` instead.
+   *
+   * The session stays valid — no re-login.
+   */
+  async setPassword(newPassword) {
+    unwrap(await this.rt.authClient.setPassword({ new_password: newPassword }));
+  }
   async verifyEmail(params) {
     unwrap(await this.rt.authClient.verifyEmail(params));
   }
@@ -9273,7 +9307,7 @@ function defaultSessionStorage(key) {
 }
 
 // src/version.ts
-var VERSION = "7.1.0";
+var VERSION = "7.2.0";
 
 // src/runtime.ts
 function buildRuntime(config) {