@palbase/web 7.1.0 → 7.2.1

package/dist/internal.d.cts

@@ -1,7 +1,7 @@
-import { P as PalbeConfig } from './analytics-facade-esr6cOBN.cjs';
-export { d as PalbeRuntime, e as buildRuntime } from './analytics-facade-esr6cOBN.cjs';
+import { P as PalbeConfig } from './analytics-facade-jyXv7Cu4.cjs';
+export { d as PalbeRuntime, e as buildRuntime } from './analytics-facade-jyXv7Cu4.cjs';
 import { B as BackendError } from './errors-fDoNdTrJ.cjs';
-export { P as PB, c as createBoundClient } from './pb-BT-vKA4j.cjs';
+export { P as PB, c as createBoundClient } from './pb-CfYQGEn0.cjs';
 import './storage-BPaeSG8K.cjs';
 import './pooled-flags-4GtDtsiu.js';
 

package/dist/internal.d.ts

@@ -1,7 +1,7 @@
-import { P as PalbeConfig } from './analytics-facade-CZIwbsvG.js';
-export { d as PalbeRuntime, e as buildRuntime } from './analytics-facade-CZIwbsvG.js';
+import { P as PalbeConfig } from './analytics-facade-DLfnVVwL.js';
+export { d as PalbeRuntime, e as buildRuntime } from './analytics-facade-DLfnVVwL.js';
 import { B as BackendError } from './errors-fDoNdTrJ.js';
-export { P as PB, c as createBoundClient } from './pb-AWwslm5m.js';
+export { P as PB, c as createBoundClient } from './pb-DdzpEkPY.js';
 import './storage-BPaeSG8K.js';
 import './pooled-flags-4GtDtsiu.js';
 

package/dist/internal.js

@@ -6,7 +6,7 @@ import {
   createBoundClient,
   getRuntime,
   onConfigured
-} from "./chunk-P6TWUWZC.js";
+} from "./chunk-GITHW5JK.js";
 import "./chunk-ACCJV6FV.js";
 import "./chunk-CFDU23TB.js";
 import "./chunk-PZ5AY32C.js";

package/dist/next/client.cjs

@@ -735,6 +735,20 @@ var AuthClient = class {
       body: params
     });
   }
+  /**
+   * Give a PASSWORDLESS account its first password.
+   *
+   * Separate from `changePassword` because that one cannot serve the case: it
+   * sends a current password and palauth answers an account that has none with
+   * 401. Requires a RECENT sign-in (403 `reauthentication_required` otherwise,
+   * the same gate passkey enrollment carries); an account that already has a
+   * password gets 409 `password_already_set`.
+   */
+  async setPassword(params) {
+    return this.httpClient.request("POST", "/auth/password/set", {
+      body: params
+    });
+  }
   // ── Token ───────────────────────────────────────────────
   async refresh() {
     const refreshToken = this.tokenManager.getRefreshToken();
@@ -1765,6 +1779,26 @@ var PalbeAuth = class {
       })
     );
   }
+  /**
+   * Give a passwordless account its FIRST password, in-app.
+   *
+   * For accounts created with a passkey or a social provider: they have no
+   * current password, so `updatePassword` cannot serve them — it sends one and
+   * the server answers 401. Before this existed the only route was the
+   * password-RESET e-mail, which asks someone already signed in to go find
+   * their inbox.
+   *
+   * Requires a RECENT sign-in, not merely a session: a first password is a
+   * credential that outlives the rest, so the server answers 403
+   * `reauthentication_required` on a stale one — the same gate
+   * `registerPasskey` carries. An account that already has a password gets 409
+   * `password_already_set`; change it with `updatePassword` instead.
+   *
+   * The session stays valid — no re-login.
+   */
+  async setPassword(newPassword) {
+    unwrap(await this.rt.authClient.setPassword({ new_password: newPassword }));
+  }
   async verifyEmail(params) {
     unwrap(await this.rt.authClient.verifyEmail(params));
   }
@@ -9064,7 +9098,7 @@ function defaultSessionStorage(key) {
 }
 
 // src/version.ts
-var VERSION = "7.1.0";
+var VERSION = "7.2.1";
 
 // src/runtime.ts
 function buildRuntime(config) {