- pgSchema "mesh" with 4 tables isolating the peer mesh domain - Enums: visibility, transport, tier, role - audit_log is metadata-only (E2E encryption enforced at broker/client) - Cascade on mesh delete, soft-delete via archivedAt/revokedAt Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
35 lines
1.0 KiB
TypeScript
35 lines
1.0 KiB
TypeScript
import { defineEnv } from "envin";
|
|
import * as z from "zod";
|
|
|
|
import { envConfig, NodeEnv } from "@turbostarter/shared/constants";
|
|
|
|
import type { Preset } from "envin/types";
|
|
|
|
export const preset = {
|
|
id: "auth",
|
|
server: {
|
|
BETTER_AUTH_SECRET: z.string().optional(),
|
|
|
|
APPLE_CLIENT_ID: z.string().optional().default(""),
|
|
APPLE_CLIENT_SECRET: z.string().optional().default(""),
|
|
APPLE_APP_BUNDLE_IDENTIFIER: z.string().optional().default(""),
|
|
GOOGLE_CLIENT_ID: z.string().optional().default(""),
|
|
GOOGLE_CLIENT_SECRET: z.string().optional().default(""),
|
|
GITHUB_CLIENT_ID: z.string().optional().default(""),
|
|
GITHUB_CLIENT_SECRET: z.string().optional().default(""),
|
|
|
|
FREE_TIER_CREDITS: z.coerce.number().optional().default(100),
|
|
|
|
SEED_EMAIL: z.email().optional().default("me@turbostarter.dev"),
|
|
SEED_PASSWORD: z.string().optional().default("Pa$$w0rd"),
|
|
},
|
|
} as const satisfies Preset;
|
|
|
|
export const env = defineEnv({
|
|
...envConfig,
|
|
...preset,
|
|
shared: {
|
|
NODE_ENV: z.enum(NodeEnv).default(NodeEnv.DEVELOPMENT),
|
|
},
|
|
});
|