Function buildBetterAuth

apps/host-selfhost/src/auth/better-auth.ts:382–414

(client: Client)

 * idempotency reads against the auth tables Better Auth just migrated.
 */
export const buildBetterAuth = async (client: Client): Promise<BetterAuthHandle> => {
  const config = loadConfig();

  // The org id is resolved by the seed below, AFTER this instance is built; the
  // session-pin hook and the gate read it through these late-bound accessors
  // (no session is created during the seed, so the empty initial id is never
  // observed). `getAuth` resolves to this very instance, so the gate's `after`
  // hook can call `auth.api.addMember` once a code is redeemed.
  let auth: Auth | null = null;
  const orgRef = { id: "" };
  const gate: SignupGate = {
    client,
    get organizationId() {
      return orgRef.id;
    },
    getAuth: () => auth,
  };

  auth = createAuthInstance(client, () => orgRef.id, gate);
  // `runMigrations()` flows through the LibsqlDialect and is idempotent.
  await (await auth.$context).runMigrations();
  await ensureInviteCodeTable(client);
  const { organizationId, organizationName } = await seedOrgAndAdmin(auth, client, config);
  orgRef.id = organizationId;

  return {
    auth,
    organizationId,
    organizationName,
    organizationSlug: config.orgSlug,
    handler: auth.handler,
  };
};