Clean prepaid SoT, identity mailbox, public access planes, leaf policy, fleet spawn

Persist account-balance books; edge caches prepaid from books. Add zappier-identity, verae-nats-accounts, verae-jobs-events, verae-access-staff, zapier-decisions. Edge binds loopback; lan-134 stays off; HTTP services prefer local spawn.

docs/modules/zappier-identity/ids.md

@@ -0,0 +1,41 @@
+# `zappier-identity/ids`
+
+**Package:** `zappier-identity`  
+**Source:** `packages/zappier-identity/src/ids.js`  
+**Lines:** 16
+
+## What this module is
+
+Implementation module in `zappier-identity`. The tables below are extracted from the source (signatures + JSDoc).
+
+## Exports
+
+`stableVeraeUserId`, `bindEmail`
+
+## Types / interfaces / classes
+
+_None extracted._
+
+## Functions
+
+| Name | Parameters | Param types (JSDoc) | Returns | Calls (same file / helpers) |
+|------|------------|---------------------|---------|-----------------------------|
+| `stableVeraeUserId` | `username` | — | `unknown` | see Call graph |
+| `bindEmail` | `email` | — | `unknown` | see Call graph |
+
+## What it imports / requires
+
+- `node:crypto`
+
+## Call graph (identifiers invoked)
+
+`stableVeraeUserId`, `trim`, `toLowerCase`, `createHash`, `update`, `digest`, `slice`, `bindEmail`
+
+Each identifier is a call site in this file. Follow the import list to see the defining module; open that module’s MD for parameter and return types.
+
+## Return values (how to read this)
+
+- HTTP route handlers return Express `res.json(...)` bodies (see route docs).
+- Zapier `perform` functions return a **single object** (creates) or an **array** (triggers/searches).
+- Pricing functions return integer **cents** on `Quote.totalCents`.
+

docs/modules/zappier-identity/server.md

@@ -0,0 +1,53 @@
+# `zappier-identity/server`
+
+**Package:** `zappier-identity`  
+**Source:** `packages/zappier-identity/src/server.js`  
+**Lines:** 90
+
+## What this module is
+
+Implementation module in `zappier-identity`. The tables below are extracted from the source (signatures + JSDoc).
+
+## Exports
+
+_No named `export` / `module.exports` keys detected._
+
+## Types / interfaces / classes
+
+_None extracted._
+
+## Functions
+
+| Name | Parameters | Param types (JSDoc) | Returns | Calls (same file / helpers) |
+|------|------------|---------------------|---------|-----------------------------|
+| `handleBind` | `p` | — | `unknown` | see Call graph |
+| `handleLookup` | `p` | — | `unknown` | see Call graph |
+| `startNats` | `(none)` | — | `unknown` | see Call graph |
+| `readBody` | `req` | — | `unknown` | see Call graph |
+| `json` | `code, obj` | — | `unknown` | see Call graph |
+
+## Methods (class / object)
+
+| Name | Parameters |
+|------|------------|
+| `put` | `db, { customerId, ...bound }` |
+
+## What it imports / requires
+
+- `node:http`
+- `./ids.js`
+- `./store.js`
+- `./subjects.js`
+
+## Call graph (identifiers invoked)
+
+`load`, `handleBind`, `bindEmail`, `put`, `handleLookup`, `startNats`, `import`, `connect`, `split`, `async`, `subscribe`, `parse`, `decode`, `respond`, `encode`, `stringify`, `readBody`, `on`, `push`, `resolve`, `concat`, `toString`, `createServer`, `writeHead`, `end`, `json`, `match`, `listen`, `write`
+
+Each identifier is a call site in this file. Follow the import list to see the defining module; open that module’s MD for parameter and return types.
+
+## Return values (how to read this)
+
+- HTTP route handlers return Express `res.json(...)` bodies (see route docs).
+- Zapier `perform` functions return a **single object** (creates) or an **array** (triggers/searches).
+- Pricing functions return integer **cents** on `Quote.totalCents`.
+

docs/modules/zappier-identity/store.md

@@ -0,0 +1,50 @@
+# `zappier-identity/store`
+
+**Package:** `zappier-identity`  
+**Source:** `packages/zappier-identity/src/store.js`  
+**Lines:** 31
+
+## What this module is
+
+Implementation module in `zappier-identity`. The tables below are extracted from the source (signatures + JSDoc).
+
+## Exports
+
+`load`, `save`, `put`
+
+## Types / interfaces / classes
+
+_None extracted._
+
+## Functions
+
+| Name | Parameters | Param types (JSDoc) | Returns | Calls (same file / helpers) |
+|------|------------|---------------------|---------|-----------------------------|
+| `load` | `(none)` | — | `unknown` | see Call graph |
+| `save` | `db` | — | `unknown` | see Call graph |
+| `put` | `db, { customerId, veraeUserId, veraeUsername }` | — | `unknown` | see Call graph |
+| `file` | `(none)` | — | `unknown` | see Call graph |
+
+## Methods (class / object)
+
+| Name | Parameters |
+|------|------------|
+| `save` | `db` |
+
+## What it imports / requires
+
+- `node:fs`
+- `node:path`
+
+## Call graph (identifiers invoked)
+
+`join`, `cwd`, `load`, `file`, `existsSync`, `parse`, `readFileSync`, `save`, `mkdirSync`, `dirname`, `writeFileSync`, `stringify`, `put`
+
+Each identifier is a call site in this file. Follow the import list to see the defining module; open that module’s MD for parameter and return types.
+
+## Return values (how to read this)
+
+- HTTP route handlers return Express `res.json(...)` bodies (see route docs).
+- Zapier `perform` functions return a **single object** (creates) or an **array** (triggers/searches).
+- Pricing functions return integer **cents** on `Quote.totalCents`.
+

docs/modules/zappier-identity/subjects.md

@@ -0,0 +1,36 @@
+# `zappier-identity/subjects`
+
+**Package:** `zappier-identity`  
+**Source:** `packages/zappier-identity/src/subjects.js`  
+**Lines:** 6
+
+## What this module is
+
+Implementation module in `zappier-identity`. The tables below are extracted from the source (signatures + JSDoc).
+
+## Exports
+
+`SUBJECTS`
+
+## Types / interfaces / classes
+
+_None extracted._
+
+## Functions
+
+_No top-level functions extracted._
+
+## What it imports / requires
+
+_No imports detected._
+
+## Call graph (identifiers invoked)
+
+_No local call identifiers extracted._
+
+## Return values (how to read this)
+
+- HTTP route handlers return Express `res.json(...)` bodies (see route docs).
+- Zapier `perform` functions return a **single object** (creates) or an **array** (triggers/searches).
+- Pricing functions return integer **cents** on `Quote.totalCents`.
+