feat(mosaic): add reverification to password updates

[austincalvelage]

Description

Adds session reverification to the Mosaic password section, wired the same way as delete account.

• When the instance has reverification enabled, the current password field is hidden (matching legacy PasswordForm), and a session_reverification_required response swaps the dialog to the <Reverification> step. A successful verification retries the save.
• updatePassword in the model no longer catches errors, so the reverification error reaches useReverificationFlow. The model exposes formatError instead, and the controller applies it after the reverification wrapper, like useDestructiveController does with toLocalizableError.
• Closing the dialog while verifying cancels verification and saves nothing. A cancelled verification shows no error. A verification that returns incomplete shows "Your password was not saved. Please try verifying again."

Checklist

• pnpm test runs as expected.
• pnpm build runs as expected.
• (If applicable) JSDoc comments have been added or updated for any package exports
• (If applicable) Documentation has been updated

Type of change

• 🐛 Bug fix
• 🌟 New feature
• 🔨 Breaking change
• 📖 Refactoring / dependency upgrade / documentation
• other:

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
clerk-js-sandbox	Ready	Preview	Oct 9, 2026 11:52pm UTC
swingset	Ready	Preview	Oct 9, 2026 11:52pm UTC

[changeset-bot]

🦋 Changeset detected

Latest commit: 3d592b5

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 0 packages

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

_{Comment @coderabbitai help to get the list of available commands.}

[pkg-pr-new]

Open in StackBlitz

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@10194

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@10194

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@10194

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@10194

@clerk/electron

npm i https://pkg.pr.new/@clerk/electron@10194

@clerk/electron-passkeys

npm i https://pkg.pr.new/@clerk/electron-passkeys@10194

@clerk/eslint-plugin

npm i https://pkg.pr.new/@clerk/eslint-plugin@10194

@clerk/expo

npm i https://pkg.pr.new/@clerk/expo@10194

@clerk/expo-biometrics

npm i https://pkg.pr.new/@clerk/expo-biometrics@10194

@clerk/expo-google-signin

npm i https://pkg.pr.new/@clerk/expo-google-signin@10194

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@10194

@clerk/express

npm i https://pkg.pr.new/@clerk/express@10194

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@10194

@clerk/hono

npm i https://pkg.pr.new/@clerk/hono@10194

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@10194

@clerk/mosaic

npm i https://pkg.pr.new/@clerk/mosaic@10194

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@10194

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@10194

@clerk/react

npm i https://pkg.pr.new/@clerk/react@10194

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@10194

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@10194

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@10194

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@10194

@clerk/ui

npm i https://pkg.pr.new/@clerk/ui@10194

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@10194

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@10194

commit: 3d592b5