Initial commit: Port Nimara CRM (Layers 0-4)

Full CRM rebuild with Next.js 15, TypeScript, Tailwind, Drizzle ORM,
PostgreSQL, Redis, BullMQ, MinIO, and Socket.io. Includes 461 source
files covering clients, berths, interests/pipeline, documents/EOI,
expenses/invoices, email, notifications, dashboard, admin, and
client portal. CI/CD via Gitea Actions with Docker builds.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

src/lib/env.ts

@@ -0,0 +1,66 @@
+import { z } from 'zod';
+
+const envSchema = z.object({
+  // Database
+  DATABASE_URL: z.string().url().startsWith('postgresql://'),
+
+  // Redis
+  REDIS_URL: z.string().url().startsWith('redis://'),
+
+  // Auth
+  BETTER_AUTH_SECRET: z.string().min(32),
+  BETTER_AUTH_URL: z.string().url(),
+  CSRF_SECRET: z.string().min(32),
+
+  // MinIO
+  MINIO_ENDPOINT: z.string().min(1),
+  MINIO_PORT: z.coerce.number().int().positive(),
+  MINIO_ACCESS_KEY: z.string().min(1),
+  MINIO_SECRET_KEY: z.string().min(1),
+  MINIO_BUCKET: z.string().min(1),
+  MINIO_USE_SSL: z.enum(['true', 'false']).transform((v) => v === 'true'),
+
+  // Documenso
+  DOCUMENSO_API_URL: z.string().url(),
+  DOCUMENSO_API_KEY: z.string().min(1),
+  DOCUMENSO_WEBHOOK_SECRET: z.string().min(16),
+
+  // Email
+  SMTP_HOST: z.string().min(1),
+  SMTP_PORT: z.coerce.number().int().positive(),
+
+  // Encryption
+  EMAIL_CREDENTIAL_KEY: z
+    .string()
+    .length(64)
+    .regex(/^[0-9a-f]+$/i, 'Must be a 64-character hex string'),
+
+  // Google OAuth (optional)
+  GOOGLE_CLIENT_ID: z.string().optional(),
+  GOOGLE_CLIENT_SECRET: z.string().optional(),
+
+  // OpenAI (optional)
+  OPENAI_API_KEY: z.string().optional(),
+
+  // App
+  APP_URL: z.string().url(),
+  PUBLIC_SITE_URL: z.string().url(),
+  NODE_ENV: z.enum(['development', 'production', 'test']).default('development'),
+  LOG_LEVEL: z.enum(['fatal', 'error', 'warn', 'info', 'debug', 'trace']).default('info'),
+});
+
+export type Env = z.infer<typeof envSchema>;
+
+function validateEnv(): Env {
+  const result = envSchema.safeParse(process.env);
+  if (!result.success) {
+    console.error('Invalid environment variables:');
+    for (const issue of result.error.issues) {
+      console.error(`  ${issue.path.join('.')}: ${issue.message}`);
+    }
+    process.exit(1);
+  }
+  return result.data;
+}
+
+export const env = validateEnv();