chore: initial Vector 2.0 monorepo

Ground-up TypeScript rewrite of the Vector hardware parts inventory
system. Ships the full roadmap (Phases 0-8) in one initial commit:

- pnpm + Turbo monorepo: apps/{api,web,e2e}, packages/{db,shared,ui,config}
- Express 5 + Prisma 5 + zod validation + JWT w/ refresh-token rotation
- React 19 + Vite + shadcn/ui + TanStack Query/Table + nuqs URL state
- Repair/RMA, tags, bulk ops, saved views, CSV audit export
- Analytics dashboard on Recharts + EOL tracking
- Signed webhook subscriptions (HMAC-SHA256) with in-process emitter
- Vitest unit tests (shared schemas, api services/helpers) + Playwright skeleton
- Gitea Actions CI (lint, typecheck, test+coverage, build) + Renovate

Deferred follow-ups: Postgres cutover (data-migration script ready),
BullMQ worker for webhook delivery, @react-pdf PDF export, CSV import wizard.

packages/shared/src/parts.ts

@@ -0,0 +1,70 @@
+import { z } from 'zod';
+import { PartState } from './enums.js';
+import { PaginationQuery } from './pagination.js';
+
+export const CreatePartRequest = z.object({
+  serialNumber: z.string().min(1).max(128),
+  mpn: z.string().min(1).max(128),
+  manufacturerId: z.string().uuid(),
+  price: z.number().nonnegative().optional().nullable(),
+  state: PartState.optional(),
+  binId: z.string().uuid().optional().nullable(),
+  notes: z.string().max(4096).optional().nullable(),
+  categoryId: z.string().uuid().optional().nullable(),
+  replacementPartId: z.string().uuid().optional().nullable(),
+  tagIds: z.array(z.string().uuid()).max(32).optional(),
+});
+export type CreatePartRequest = z.infer<typeof CreatePartRequest>;
+
+export const UpdatePartRequest = z
+  .object({
+    serialNumber: z.string().min(1).max(128).optional(),
+    mpn: z.string().min(1).max(128).optional(),
+    manufacturerId: z.string().uuid().optional(),
+    price: z.number().nonnegative().nullable().optional(),
+    state: PartState.optional(),
+    binId: z.string().uuid().nullable().optional(),
+    notes: z.string().max(4096).nullable().optional(),
+    categoryId: z.string().uuid().nullable().optional(),
+    replacementPartId: z.string().uuid().nullable().optional(),
+    tagIds: z.array(z.string().uuid()).max(32).optional(),
+  })
+  .refine((v) => Object.keys(v).length > 0, { message: 'At least one field required' });
+export type UpdatePartRequest = z.infer<typeof UpdatePartRequest>;
+
+export const PartListQuery = PaginationQuery.extend({
+  state: PartState.optional(),
+  binId: z.string().uuid().optional(),
+  manufacturerId: z.string().uuid().optional(),
+  mpn: z.string().max(128).optional(),
+  serialNumber: z.string().max(128).optional(),
+  q: z.string().max(128).optional(),
+  categoryId: z.string().uuid().optional(),
+  tagId: z.string().uuid().optional(),
+  eolOnly: z
+    .union([z.literal('true'), z.literal('false'), z.boolean()])
+    .transform((v) => v === true || v === 'true')
+    .optional(),
+});
+export type PartListQuery = z.infer<typeof PartListQuery>;
+
+export const PartEventsQuery = PaginationQuery;
+export type PartEventsQuery = z.infer<typeof PartEventsQuery>;
+
+export const BulkPartsRequest = z
+  .object({
+    ids: z.array(z.string().uuid()).min(1).max(500),
+    state: PartState.optional(),
+    binId: z.string().uuid().nullable().optional(),
+    addTagIds: z.array(z.string().uuid()).max(32).optional(),
+    removeTagIds: z.array(z.string().uuid()).max(32).optional(),
+  })
+  .refine(
+    (v) =>
+      v.state !== undefined ||
+      v.binId !== undefined ||
+      (v.addTagIds && v.addTagIds.length > 0) ||
+      (v.removeTagIds && v.removeTagIds.length > 0),
+    { message: 'At least one mutation field is required' },
+  );
+export type BulkPartsRequest = z.infer<typeof BulkPartsRequest>;