feat(db): mesh data model — meshes, members, invites, audit log

- pgSchema "mesh" with 4 tables isolating the peer mesh domain
- Enums: visibility, transport, tier, role
- audit_log is metadata-only (E2E encryption enforced at broker/client)
- Cascade on mesh delete, soft-delete via archivedAt/revokedAt

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

packages/billing/src/lib/customer.ts

@@ -0,0 +1,36 @@
+import { eq } from "@turbostarter/db";
+import { customer } from "@turbostarter/db/schema";
+import { db } from "@turbostarter/db/server";
+
+import type { InsertCustomer } from "@turbostarter/db/schema";
+
+export const getCustomerByUserId = async (userId: string) => {
+  const [data] = await db
+    .select()
+    .from(customer)
+    .where(eq(customer.userId, userId));
+
+  return data ?? null;
+};
+
+export const getCustomerByCustomerId = async (customerId: string) => {
+  const [data] = await db
+    .select()
+    .from(customer)
+    .where(eq(customer.customerId, customerId));
+
+  return data ?? null;
+};
+
+export const updateCustomer = (
+  userId: string,
+  data: Partial<InsertCustomer>,
+) => {
+  return db.update(customer).set(data).where(eq(customer.userId, userId));
+};
+export const upsertCustomer = (data: InsertCustomer) => {
+  return db.insert(customer).values(data).onConflictDoUpdate({
+    target: customer.userId,
+    set: data,
+  });
+};

packages/billing/src/lib/schema.ts

@@ -0,0 +1,18 @@
+import * as z from "zod";
+
+export const checkoutSchema = z.object({
+  price: z.object({
+    id: z.string(),
+  }),
+  redirect: z.object({
+    success: z.url(),
+    cancel: z.url(),
+  }),
+});
+
+export const getBillingPortalSchema = z.object({
+  redirectUrl: z.url(),
+});
+
+export type CheckoutPayload = z.infer<typeof checkoutSchema>;
+export type GetBillingPortalPayload = z.infer<typeof getBillingPortalSchema>;