feat(db): mesh data model — meshes, members, invites, audit log

- pgSchema "mesh" with 4 tables isolating the peer mesh domain
- Enums: visibility, transport, tier, role
- audit_log is metadata-only (E2E encryption enforced at broker/client)
- Cascade on mesh delete, soft-delete via archivedAt/revokedAt

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

packages/email/src/providers/env.ts

@@ -0,0 +1 @@
+export * from "./resend/env";

packages/email/src/providers/index.ts

@@ -0,0 +1 @@
+export { send } from "./resend";

packages/email/src/providers/nodemailer/env.ts

@@ -0,0 +1,24 @@
+import { defineEnv } from "envin";
+import * as z from "zod";
+
+import { envConfig } from "@turbostarter/shared/constants";
+
+import { sharedPreset } from "../../utils/env";
+
+import type { Preset } from "envin/types";
+
+export const preset = {
+  id: "nodemailer",
+  server: {
+    NODEMAILER_HOST: z.string(),
+    NODEMAILER_PORT: z.coerce.number(),
+    NODEMAILER_USER: z.string(),
+    NODEMAILER_PASSWORD: z.string(),
+  },
+  extends: [sharedPreset],
+} as const satisfies Preset;
+
+export const env = defineEnv({
+  ...envConfig,
+  ...preset,
+});

packages/email/src/providers/nodemailer/index.ts

@@ -0,0 +1,28 @@
+import nodemailer from "nodemailer";
+
+import { env } from "./env";
+
+import type { EmailProviderStrategy } from "../types";
+
+const from = env.EMAIL_FROM;
+
+export const { send } = {
+  send: async ({ to, subject, html, text }) => {
+    const transporter = nodemailer.createTransport({
+      host: env.NODEMAILER_HOST,
+      port: env.NODEMAILER_PORT,
+      auth: {
+        user: env.NODEMAILER_USER,
+        pass: env.NODEMAILER_PASSWORD,
+      },
+    });
+
+    await transporter.sendMail({
+      from,
+      to,
+      subject,
+      html,
+      text,
+    });
+  },
+} satisfies EmailProviderStrategy;

packages/email/src/providers/plunk/env.ts

@@ -0,0 +1,21 @@
+import { defineEnv } from "envin";
+import * as z from "zod";
+
+import { envConfig } from "@turbostarter/shared/constants";
+
+import { sharedPreset } from "../../utils/env";
+
+import type { Preset } from "envin/types";
+
+export const preset = {
+  id: "plunk",
+  server: {
+    PLUNK_API_KEY: z.string(),
+  },
+  extends: [sharedPreset],
+} as const satisfies Preset;
+
+export const env = defineEnv({
+  ...envConfig,
+  ...preset,
+});

packages/email/src/providers/plunk/index.ts

@@ -0,0 +1,31 @@
+import { logger } from "@turbostarter/shared/logger";
+
+import { env } from "./env";
+
+import type { EmailProviderStrategy } from "../types";
+
+const from = env.EMAIL_FROM;
+
+export const { send } = {
+  send: async ({ to, subject, html, text }) => {
+    const response = await fetch("https://api.useplunk.com/v1/send", {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        Authorization: `Bearer ${env.PLUNK_API_KEY}`,
+      },
+      body: JSON.stringify({
+        to,
+        from,
+        subject,
+        body: html,
+        text,
+      }),
+    });
+
+    if (!response.ok) {
+      logger.error(await response.json());
+      throw new Error("Could not send email!");
+    }
+  },
+} satisfies EmailProviderStrategy;

packages/email/src/providers/postmark/env.ts

@@ -0,0 +1,21 @@
+import { defineEnv } from "envin";
+import * as z from "zod";
+
+import { envConfig } from "@turbostarter/shared/constants";
+
+import { sharedPreset } from "../../utils/env";
+
+import type { Preset } from "envin/types";
+
+export const preset = {
+  id: "postmark",
+  server: {
+    POSTMARK_API_KEY: z.string(),
+  },
+  extends: [sharedPreset],
+} as const satisfies Preset;
+
+export const env = defineEnv({
+  ...envConfig,
+  ...preset,
+});

packages/email/src/providers/postmark/index.ts

@@ -0,0 +1,31 @@
+import { logger } from "@turbostarter/shared/logger";
+
+import { env } from "./env";
+
+import type { EmailProviderStrategy } from "../types";
+
+const from = env.EMAIL_FROM;
+
+export const { send } = {
+  send: async ({ to, subject, html, text }) => {
+    const response = await fetch("https://api.postmarkapp.com/email", {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        "X-Postmark-Server-Token": env.POSTMARK_API_KEY,
+      },
+      body: JSON.stringify({
+        From: from,
+        To: to,
+        Subject: subject,
+        HtmlBody: html,
+        TextBody: text,
+      }),
+    });
+
+    if (!response.ok) {
+      logger.error(await response.json());
+      throw new Error("Could not send email!");
+    }
+  },
+} satisfies EmailProviderStrategy;

packages/email/src/providers/resend/env.ts

@@ -0,0 +1,21 @@
+import { defineEnv } from "envin";
+import * as z from "zod";
+
+import { envConfig } from "@turbostarter/shared/constants";
+
+import { sharedPreset } from "../../utils/env";
+
+import type { Preset } from "envin/types";
+
+export const preset = {
+  id: "resend",
+  server: {
+    RESEND_API_KEY: z.string().optional(),
+  },
+  extends: [sharedPreset],
+} as const satisfies Preset;
+
+export const env = defineEnv({
+  ...envConfig,
+  ...preset,
+});

packages/email/src/providers/resend/index.ts

@@ -0,0 +1,31 @@
+import { logger } from "@turbostarter/shared/logger";
+
+import { env } from "./env";
+
+import type { EmailProviderStrategy } from "../types";
+
+const from = env.EMAIL_FROM;
+
+export const { send } = {
+  send: async ({ to, subject, html, text }) => {
+    const response = await fetch("https://api.resend.com/emails", {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        Authorization: `Bearer ${env.RESEND_API_KEY}`,
+      },
+      body: JSON.stringify({
+        from,
+        to,
+        subject,
+        html,
+        text,
+      }),
+    });
+
+    if (!response.ok) {
+      logger.error(await response.json());
+      throw new Error("Could not send email!");
+    }
+  },
+} satisfies EmailProviderStrategy;

packages/email/src/providers/sendgrid/env.ts

@@ -0,0 +1,21 @@
+import { defineEnv } from "envin";
+import * as z from "zod";
+
+import { envConfig } from "@turbostarter/shared/constants";
+
+import { sharedPreset } from "../../utils/env";
+
+import type { Preset } from "envin/types";
+
+export const preset = {
+  id: "sendgrid",
+  server: {
+    SENDGRID_API_KEY: z.string(),
+  },
+  extends: [sharedPreset],
+} as const satisfies Preset;
+
+export const env = defineEnv({
+  ...envConfig,
+  ...preset,
+});

packages/email/src/providers/sendgrid/index.ts

@@ -0,0 +1,43 @@
+import { logger } from "@turbostarter/shared/logger";
+
+import { env } from "./env";
+
+import type { EmailProviderStrategy } from "../types";
+
+const from = env.EMAIL_FROM;
+
+export const { send } = {
+  send: async ({ to, subject, html, text }) => {
+    const response = await fetch("https://api.sendgrid.com/v3/mail/send", {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        Authorization: `Bearer ${env.SENDGRID_API_KEY}`,
+      },
+      body: JSON.stringify({
+        from: { email: from },
+        personalizations: [
+          {
+            to: [{ email: to }],
+          },
+        ],
+        subject,
+        content: [
+          {
+            type: "text/plain",
+            value: text,
+          },
+          {
+            type: "text/html",
+            value: html,
+          },
+        ],
+      }),
+    });
+
+    if (!response.ok) {
+      logger.error(await response.json());
+      throw new Error("Could not send email!");
+    }
+  },
+} satisfies EmailProviderStrategy;

packages/email/src/providers/types.ts

@@ -0,0 +1,8 @@
+export interface EmailProviderStrategy {
+  send: (args: {
+    to: string;
+    subject: string;
+    text: string;
+    html?: string;
+  }) => Promise<void>;
+}