feat: establish core identity foundation

Adds Core-owned identity contracts, a Core-owned Better Auth database schema (ekklesia_core_user/session/account/verification), a first-class Core-owned migration source that coexists with module-owned migrations under the exact existing migration system, and an explicit Better Auth construction boundary. No authentication endpoint or sign-in UI is exposed yet (ADR 0010). Co-Authored-By: Claude Sonnet 5 <[email protected]>
2026-07-21 16:39:15 -05:00
parent df0f20d8af
commit 679a5d225c
43 changed files with 4259 additions and 64 deletions
@@ -26,12 +26,15 @@
  },
  "scripts": {
    "build": "tsc --project tsconfig.build.json",
+    "identity:migration:generate": "drizzle-kit generate --config=drizzle.config.ts",
+    "identity:schema:generate": "auth generate --config=identity-schema-generator.config.ts --output=.identity-schema-reference.ts -y",
    "lint": "biome lint .",
    "test": "vitest run",
    "typecheck": "tsc --noEmit --project tsconfig.json"
  },
  "dependencies": {
    "@ekklesia/contracts": "workspace:*",
+    "better-auth": "1.6.23",
    "drizzle-orm": "0.45.2",
    "pg": "8.22.0"
  },
@@ -39,6 +42,8 @@
    "@biomejs/biome": "2.5.3",
    "@types/node": "24.13.3",
    "@types/pg": "8.20.0",
+    "auth": "1.6.23",
+    "drizzle-kit": "0.31.10",
    "typescript": "7.0.2",
    "vitest": "4.1.10"
  },