feat: encapsulate identity with better-auth

platform/cerbos/cerbos.ts

@@ -0,0 +1,17 @@
+import { HTTP } from "@cerbos/http";
+import { getEnvironmentVariable } from "@platform/config/environment.ts";
+import z from "zod";
+
+export const cerbos = new HTTP(
+  getEnvironmentVariable({
+    key: "CERBOS_URL",
+    type: z.string(),
+    fallback: "http://localhost:3592",
+  }),
+  {
+    adminCredentials: {
+      username: "cerbos",
+      password: "cerbosAdmin",
+    },
+  },
+);

platform/cerbos/mod.ts

@@ -0,0 +1 @@
+export * from "./cerbos.ts";

platform/cerbos/package.json

@@ -0,0 +1,15 @@
+{
+  "name": "@platform/auth",
+  "version": "0.0.0",
+  "private": true,
+  "type": "module",
+  "main": "./mod.ts",
+  "exports": {
+    ".": "./mod.ts"
+  },
+  "dependencies": {
+    "@cerbos/http": "0.23.1",
+    "@platform/logger": "workspace:*",
+    "zod": "4.1.11"
+  }
+}