Add NATS account-balance SoT and statement review for customers, CS, and sales

Internal billing now uses verae.billing.* request-reply and pubs. zappier-account-balance tracks prepaid, credits, usage, and payments. Portal, admin, CS, and sales all review the same statement. Independent Forgejo repos stay split via push-module-repos.

packages/docs-master/modules-and-nats.md

@@ -2,14 +2,19 @@
 
 Master map of every service in the Zapier ↔ middleware ↔ chain ↔ WORM-archive path.
 
-Zapier cloud **never** connects to NATS. Only middleware workers and archives do.
+Zapier cloud **never** connects to NATS. Internal services do: middleware workers, archives, account-balance, zappier-edge billing, CS, sales, and accounting.
 
 ## Who talks to whom (HTTPS vs NATS)
 
 ```text
 [Zapier Platform app]  HTTPS  [zappier-edge]  HTTPS  [middleware-http]
-                                                              |
-                         NATS JetStream (NS1 loopback :4222)  |
+        |                     | NATS verae.billing.*          |
+        |                     v                               |
+[customer portal]      [account-balance]                 NATS JetStream
+[CS :3011]             queue account-balance             (NS1 loopback :4222)
+[sales :3012]                 ^                               |
+[accounting :3013]            | request-reply                 |
+                              +-------------------------------+
           +------------------+------------------+-------------+
           |                  |                  |
    [job-poller]      [webhook-deliver]   [archive-aggregator]
@@ -25,7 +30,11 @@ Zapier cloud **never** connects to NATS. Only middleware workers and archives do
 | Module | Repo (Forgejo) | Runtime | Listens | Sends |
 |--------|----------------|---------|---------|-------|
 | zapier-platform-app | `verae-zapier-app` | Zapier cloud | User Zap steps | HTTPS to zappier-edge |
-| zappier-edge | `zappier-edge` | Public HTTPS :3000 | Zapier, portal, admin | HTTPS to middleware |
+| zappier-edge | `zappier-edge` | Public HTTPS :3000 | Zapier, portal, admin | HTTPS to middleware; NATS billing pub |
+| account-balance | `zappier-account-balance` | :3010 + NATS | `verae.billing.*` | statement/adjust replies |
+| customer-service | `zappier-customer-service` | :3011 | CS staff HTTP | NATS balance.adjust / statement.get |
+| sales-pricing | `zappier-sales-pricing` | :3012 | Sales HTTP | NATS statement.get; HTTPS to edge for multipliers |
+| accounting-export | `zappier-accounting-export` | :3013 | Accounting HTTP | reads invoices; NATS statement |
 | middleware-http | `verae-middleware` | Public HTTPS :3100 | zappier-edge | NATS jobs.watch; HTTP to chain; wait on jobs.events |
 | job-poller | `verae-job-poller` | Worker | `verae.zapier.jobs.watch` | `verae.zapier.jobs.events`; HTTP GET chain status |
 | webhook-deliver | `verae-webhook-deliver` | Worker | `verae.zapier.webhooks.deliver` + events | HTTPS POST Zapier REST Hook |
@@ -49,6 +58,11 @@ Zapier cloud **never** connects to NATS. Only middleware workers and archives do
 | `verae.zapier.jobs.events` | JetStream events | `event` (`timestamp.completed\|failed\|timeout`), `tenantId`, `jobId`, `status`, `traceId`, `emittedAt` |
 | `verae.zapier.webhooks.deliver` | JetStream work queue | `hookId`, `tenantId`, `targetUrl`, `event`, `payload`, `attempt`, `traceId` |
 | `verae.zapier.usage` | optional | `tenantId`, `action`, `amount`, `at` |
+| `verae.billing.statement.get` | request-reply | `customerId` → prepaid, credits, usage, payments |
+| `verae.billing.balance.adjust` | request-reply | `customerId`, `cents`, `reason`, `agent` |
+| `verae.billing.usage.recorded` | pub | meter events from zappier-edge |
+| `verae.billing.payment.recorded` | pub | portal reload / invoice paid |
+| `verae.billing.credit.applied` | pub | CS goodwill |
 | `verae.archive.put` | JetStream | `sha256`, `tenantId`, `kind` (`publicMeta\|privateMeta\|file\|tree`), `record`, `traceId` |
 | `verae.archive.query` | pub to **all** archives | `correlationId`, `sha256`, `tenantId`, `kinds[]`, `traceId` |
 | `verae.archive.reply.<correlationId>` | replies | `archiveId`, `sha256`, `records[]`, `traceId` |