@bunbase-ae/js 3.3.1-next.420.2c6b78c → 3.3.1-next.421.7803b2a

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bunbase-ae/js",
-  "version": "3.3.1-next.420.2c6b78c",
+  "version": "3.3.1-next.421.7803b2a",
   "type": "module",
   "description": "TypeScript/JavaScript SDK for BunBase",
   "license": "UNLICENSED",

package/src/admin.ts

@@ -56,6 +56,19 @@ export interface UpdateUserParams {
   is_verified?: boolean;
   role?: string | null;
   metadata?: Record<string, unknown>;
+  /**
+   * Link a phone number to this user (issue #700). Stored as a lookup hash (and
+   * encrypted plaintext when field encryption is configured); enables phone-OTP
+   * login for the number. Fails if the number is already linked to another user.
+   */
+  phone?: string;
+}
+
+export interface ProvisionPhoneUserParams {
+  /** Phone number to key the new user by (normalized to E.164 server-side). */
+  phone: string;
+  role?: string | null;
+  metadata?: Record<string, unknown>;
 }
 
 export type AccessRule = "public" | "authenticated" | "owner" | "disabled" | { role: string };
@@ -558,6 +571,24 @@ class AdminUsersClient {
     return this.http.request<AdminUser>("PATCH", `/api/v1/admin/users/${id}`, { body: params });
   }
 
+  /**
+   * Provision a new phone-keyed user (issue #700). Pre-creates an account so
+   * phone-OTP `verify` succeeds for the number under the allowlist login model
+   * (`auth_phone_otp_auto_provision: false`). Throws if the number is already
+   * bound to a user (409).
+   */
+  async provisionPhoneUser(params: ProvisionPhoneUserParams): Promise<AdminUser> {
+    return this.http.request<AdminUser>("POST", "/api/v1/admin/users", { body: params });
+  }
+
+  /**
+   * Link a phone number to an existing user (issue #700). Throws if the number
+   * is already bound to a different user (409).
+   */
+  async setUserPhone(id: string, phone: string): Promise<AdminUser> {
+    return this.http.request<AdminUser>("PATCH", `/api/v1/admin/users/${id}`, { body: { phone } });
+  }
+
   async delete(id: string): Promise<void> {
     await this.http.request<{ ok: boolean }>("DELETE", `/api/v1/admin/users/${id}`);
   }