@forgezero/runtime 0.1.13 → 0.1.15

package/README.md

@@ -7,11 +7,11 @@
 
 # @forgezero/runtime
 
-The machinery behind a request handler — jobs, queues, an outbox, a hash-chained audit trail, mail, backups, schema validation and exact money. 44 public modules, each imported on its own.
+The machinery behind a request handler — jobs, queues, an outbox, a hash-chained audit trail, mail, backups, schema validation and exact money. 30 public modules, each imported on its own.
 
 ## Package overview
 
-Anyone running a service, for the work that happens outside a request. Separate from `access` because a Cloudflare Worker wants the request pipeline and cannot run a backup job. Supported runtimes: bun, node. Package root: @forgezero/runtime. The sections below show the actual named imports emitted by each declaration entry point; wildcard imports are intentionally not used in the documentation.
+Anyone running a service, for the work that happens outside a request. Separate from `access` because a Cloudflare Worker wants the request pipeline and cannot run a backup job. Supported runtimes: bun, node. Package root: @forgezero/runtime. Consumer documentation is curated with each module's explicit public flag; the complete internal/export inventory remains in the typed SSOT and declaration files.
 
 ```text
 bun add @forgezero/runtime
@@ -29,9 +29,9 @@ The five packages are installation boundaries. Choose a package by who installs
 | @forgezero/runtime | Portable runtime primitives for queries, jobs, events, schemas and finance. | bun, node | [Open](https://www.forgezero.net/docs/runtime) |
 | @forgezero/agent | Operator CLI and managed-node agent for bootstrap, deploy and lifecycle. | bun, node | [Open](https://www.forgezero.net/docs/agent) |
 
-## @forgezero/runtime public imports and commands
+## @forgezero/runtime supported imports and commands
 
-Every row links to the detailed explanation and named-import/example area below. This table and those details are generated from the package inventory and emitted declarations.
+These are supported consumer entry points, not every internal module shipped for ForgeZero managed installation. Each row links to its task-oriented usage.
 
 | public entry | short description | runtime | details |
 |---|---|---|---|
@@ -44,7 +44,6 @@ Every row links to the detailed explanation and named-import/example area below.
 | @forgezero/runtime/notify | Render a named template to text and HTML, escaped per part, refusing to send with a blank where a value should be. | portable | [Reference + usage](#forgezero-runtime-notify) |
 | @forgezero/runtime/notify/templates | The six transactional messages ForgeZero sends. | portable | [Reference + usage](#forgezero-runtime-notify-templates) |
 | @forgezero/runtime/calendar | Billing periods computed from an anchor, working days, holidays and due dates. | portable | [Reference + usage](#forgezero-runtime-calendar) |
-| @forgezero/runtime/compliance | Screening as a decision record — tiers, rules and lists, failing closed when a list is unreachable. | portable | [Reference + usage](#forgezero-runtime-compliance) |
 | @forgezero/runtime/totp | RFC 6238 TOTP on the existing HMAC — base32, an asymmetric window, and replay left to the caller. | portable | [Reference + usage](#forgezero-runtime-totp) |
 | @forgezero/runtime/passkey | Passkeys for sites that are not us. A vault-held credential is as unphishable as one in a security chip provided the RP ID check never slips — `evil-example.com` ends with `example.com` and is a different site. | portable | [Reference + usage](#forgezero-runtime-passkey) |
 | @forgezero/runtime/phrase | BIP-39 recovery phrases, and the salted verifier that proves one without being able to reconstruct it. | portable | [Reference + usage](#forgezero-runtime-phrase) |
@@ -58,25 +57,12 @@ Every row links to the detailed explanation and named-import/example area below.
 | @forgezero/runtime/schema/typebox | The TypeBox validator behind that interface. | portable | [Reference + usage](#forgezero-runtime-schema-typebox) |
 | @forgezero/runtime/finance/discounts | Promotions as arithmetic over integer minor units. They never stack — one winner — and a percentage rounds down, because rounding a discount up gives away a unit of currency per invoice forever. | portable | [Reference + usage](#forgezero-runtime-finance-discounts) |
 | @forgezero/runtime/finance/money | Exact amounts in minor units with the asset attached, so two currencies cannot be added. | portable | [Reference + usage](#forgezero-runtime-finance-money) |
-| @forgezero/runtime/finance/venues | Trading venues, market types and symbols as data — spot, margin and futures behind one order model. | portable | [Reference + usage](#forgezero-runtime-finance-venues) |
-| @forgezero/runtime/finance/ledger | Double-entry postings and derived balances. A hold is a posting, not a lock — the queue does the ordering. | portable | [Reference + usage](#forgezero-runtime-finance-ledger) |
-| @forgezero/runtime/finance/commission | Profit net of flows, a high-water mark, the tier split and the referral share of our income. | portable | [Reference + usage](#forgezero-runtime-finance-commission) |
-| @forgezero/runtime/finance/rates | What an asset is worth in USD, and how old that answer is. A peg never ages; a quote always does. | portable | [Reference + usage](#forgezero-runtime-finance-rates) |
-| @forgezero/runtime/finance/transfers | Deposits and withdrawals as ordered pipelines, with screening reserved at position zero. | portable | [Reference + usage](#forgezero-runtime-finance-transfers) |
-| @forgezero/runtime/finance/chain | Which chains exist, their confirmation depth by value band, assets and explorers — as data an admin edits. | portable | [Reference + usage](#forgezero-runtime-finance-chain) |
-| @forgezero/runtime/finance/custody | Derive CREATE2 deposit addresses and EIP-712 custody digests — arithmetic over a seed and a salt, needing no credential and no node. | portable | [Reference + usage](#forgezero-runtime-finance-custody) |
-| @forgezero/runtime/finance/derive | Declare a field ForgeZero generates rather than the tenant supplying: BIP-44 path arithmetic, and the choice of who is capable of generating the key. | portable | [Reference + usage](#forgezero-runtime-finance-derive) |
 | @forgezero/runtime/finance/tax | Which jurisdiction may tax a sale, who accounts for it, and the three ways to be zero that report differently. Rates are data. | portable | [Reference + usage](#forgezero-runtime-finance-tax) |
 | @forgezero/runtime/finance/storage | Write an amount so it is both exact and sortable: an authoritative string, and a number that is only an index. | portable | [Reference + usage](#forgezero-runtime-finance-storage) |
 | @forgezero/runtime/realtime | Provider-neutral realtime audience, shard, event and delivery contracts. | portable | [Reference + usage](#forgezero-runtime-realtime) |
 | @forgezero/runtime/passkey-hybrid | Versioned WebAuthn PRF plus ML-DSA companion proof construction and verification. | portable | [Reference + usage](#forgezero-runtime-passkey-hybrid) |
 | @forgezero/runtime/otpauth | Parse and render otpauth URIs without binding enrolment to a UI framework. | portable | [Reference + usage](#forgezero-runtime-otpauth) |
 | @forgezero/runtime/pipeline | Typed ordered application-pipeline execution with explicit evidence. | portable | [Reference + usage](#forgezero-runtime-pipeline) |
-| @forgezero/runtime/finance/chain-addresses | Chain-address derivation records and validation independent of a node provider. | portable | [Reference + usage](#forgezero-runtime-finance-chain-addresses) |
-| @forgezero/runtime/finance/chain-deposits | Provider-neutral deposit observation, confirmation and credit transitions. | portable | [Reference + usage](#forgezero-runtime-finance-chain-deposits) |
-| @forgezero/runtime/finance/chain-withdrawals | Provider-neutral withdrawal approval, broadcast and finality transitions. | portable | [Reference + usage](#forgezero-runtime-finance-chain-withdrawals) |
-| @forgezero/runtime/finance/chain-reconcile | Deterministic reconciliation between chain observations and durable transfer state. | portable | [Reference + usage](#forgezero-runtime-finance-chain-reconcile) |
-| @forgezero/runtime/finance/market | Market order, fill and quote contracts independent of any exchange adapter. | portable | [Reference + usage](#forgezero-runtime-finance-market) |
 | @forgezero/runtime/custody-share | Threshold-share parsing, validation and reconstruction. | portable | [Reference + usage](#forgezero-runtime-custody-share) |
 | @forgezero/runtime/custody-crypto | Hybrid ML-KEM-768 plus X25519 custody-share sealing and opening. | portable | [Reference + usage](#forgezero-runtime-custody-crypto) |
 
@@ -91,24 +77,11 @@ bun add @forgezero/runtime
 <a id="forgezero-runtime-query"></a>
 ## @forgezero/runtime/query
 
-Provider-neutral typed function contracts: decode untrusted input, run with caller-supplied services or storage, and strictly validate the result without coupling business logic to ForgeZero or ArangoDB. This entry exposes 3 named value exports and 8 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
+Provider-neutral typed function contracts: decode untrusted input, run with caller-supplied services or storage, and strictly validate the result without coupling business logic to ForgeZero or ArangoDB. This is a supported entry point. Import only the named values used by the adjacent task example; the declaration file remains the complete API reference.
 
 ```text
 import {
   QueryContractError,
-  defineQuery,
-  implementQuery,
-} from '@forgezero/runtime/query';
-
-import type {
-  QueryCodec,
-  QueryContract,
-  QueryDecode,
-  QueryExecution,
-  QueryImplementation,
-  QueryInput,
-  QueryIssue,
-  QueryOutput,
 } from '@forgezero/runtime/query';
 ```
 
@@ -148,39 +121,11 @@ const order = await runFindOrder.execute(stores, { orderKey: 'ord_123' });
 <a id="forgezero-runtime-jobs"></a>
 ## @forgezero/runtime/jobs
 
-Background work that never overlaps itself, advances a cursor only on success, and can be paused and inspected. This entry exposes 12 named value exports and 14 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
+Background work that never overlaps itself, advances a cursor only on success, and can be paused and inspected. This is a supported entry point. Import only the named values used by the adjacent task example; the declaration file remains the complete API reference.
 
 ```text
 import {
   JobFenceLostError,
-  VERSION,
-  createScheduler,
-  cursorJob,
-  defineJob,
-  everyMs,
-  forEachFenced,
-  memoryLock,
-  nextWallClockAt,
-  storeLock,
-  systemClock,
-  withJobFence,
-} from '@forgezero/runtime/jobs';
-
-import type {
-  Clock,
-  CursorBatch,
-  CursorJobSpec,
-  CursorStore,
-  JobContext,
-  JobLock,
-  JobReport,
-  JobResult,
-  JobSpec,
-  Lease,
-  LockStore,
-  Scheduler,
-  SchedulerOptions,
-  WallClockSchedule,
 } from '@forgezero/runtime/jobs';
 ```
 
@@ -199,24 +144,11 @@ export const selectedCapability = JobFenceLostError;
 <a id="forgezero-runtime-queue"></a>
 ## @forgezero/runtime/queue
 
-Memory-only keyed work queue — awaited results, parallel across keys and strictly sequential within one; clustered callers atomically claim ownership in their own business store before submitting. This entry exposes 5 named value exports and 6 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
+Memory-only keyed work queue — awaited results, parallel across keys and strictly sequential within one; clustered callers atomically claim ownership in their own business store before submitting. This is a supported entry point. Import only the named values used by the adjacent task example; the declaration file remains the complete API reference.
 
 ```text
 import {
   QueueKeyStoppedError,
-  QueueStoppedError,
-  TaskCancelledError,
-  createQueue,
-  queueWidthFor,
-} from '@forgezero/runtime/queue';
-
-import type {
-  DrainReport,
-  Queue,
-  QueueOptions,
-  QueueResourcePolicy,
-  QueueTask,
-  RetryPolicy,
 } from '@forgezero/runtime/queue';
 ```
 
@@ -235,31 +167,11 @@ export const selectedCapability = QueueKeyStoppedError;
 <a id="forgezero-runtime-outbox"></a>
 ## @forgezero/runtime/outbox
 
-Write the event with the record, deliver it after, in order per key with backoff and a dead-letter queue. This entry exposes 8 named value exports and 10 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
+Write the event with the record, deliver it after, in order per key with backoff and a dead-letter queue. This is a supported entry point. Import only the named values used by the adjacent task example; the declaration file remains the complete API reference.
 
 ```text
 import {
   DEFAULT_POLICY,
-  EVENT_STATES,
-  OutboxError,
-  VERSION,
-  backoffMs,
-  createOutbox,
-  memoryStore,
-  outboxJob,
-} from '@forgezero/runtime/outbox';
-
-import type {
-  DeliveryPolicy,
-  DeliveryResult,
-  DrainReport,
-  EventState,
-  Outbox,
-  OutboxEvent,
-  OutboxOptions,
-  OutboxStore,
-  PublishInput,
-  Transport,
 } from '@forgezero/runtime/outbox';
 ```
 
@@ -278,37 +190,11 @@ export const selectedCapability = DEFAULT_POLICY;
 <a id="forgezero-runtime-audit"></a>
 ## @forgezero/runtime/audit
 
-Append-only records chained by hash, with a verifier that names the first altered entry. This entry exposes 12 named value exports and 12 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
+Append-only records chained by hash, with a verifier that names the first altered entry. This is a supported entry point. Import only the named values used by the adjacent task example; the declaration file remains the complete API reference.
 
 ```text
 import {
   AuditChainError,
-  GENESIS_DIGEST,
-  VERSION,
-  appendRecord,
-  canonicalise,
-  createAuditChain,
-  exportRange,
-  hashDigester,
-  memoryStore,
-  sealedDigester,
-  verifyChain,
-  verifyExport,
-} from '@forgezero/runtime/audit';
-
-import type {
-  AppendOptions,
-  AuditChain,
-  AuditChainOptions,
-  AuditDigesterResolver,
-  AuditEntry,
-  AuditExport,
-  AuditRecord,
-  AuditStore,
-  AuditVerifyOptions,
-  ChainVerdict,
-  Digester,
-  EffectAuditRecord,
 } from '@forgezero/runtime/audit';
 ```
 
@@ -327,34 +213,11 @@ export const selectedCapability = AuditChainError;
 <a id="forgezero-runtime-backup"></a>
 ## @forgezero/runtime/backup
 
-Encrypted, chunked, verified snapshots to object storage — and the restore that reads them back. This entry exposes 11 named value exports and 10 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
+Encrypted, chunked, verified snapshots to object storage — and the restore that reads them back. This is a supported entry point. Import only the named values used by the adjacent task example; the declaration file remains the complete API reference.
 
 ```text
 import {
   BackupError,
-  DEFAULT_RETENTION,
-  SNAPSHOT_FORMAT,
-  VERSION,
-  backupJob,
-  listSnapshots,
-  prune,
-  restore,
-  selectForDeletion,
-  snapshot,
-  verifySnapshot,
-} from '@forgezero/runtime/backup';
-
-import type {
-  ChunkRecord,
-  ObjectStore,
-  RestoreOptions,
-  RestoreReport,
-  RetentionPolicy,
-  RowSink,
-  RowSource,
-  SnapshotManifest,
-  SnapshotOptions,
-  VerifyReport,
 } from '@forgezero/runtime/backup';
 ```
 
@@ -373,32 +236,11 @@ export const selectedCapability = BackupError;
 <a id="forgezero-runtime-notify"></a>
 ## @forgezero/runtime/notify
 
-Render a named template to text and HTML, escaped per part, refusing to send with a blank where a value should be. This entry exposes 12 named value exports and 7 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
+Render a named template to text and HTML, escaped per part, refusing to send with a blank where a value should be. This is a supported entry point. Import only the named values used by the adjacent task example; the declaration file remains the complete API reference.
 
 ```text
 import {
   CHANNELS,
-  NotifyError,
-  VERSION,
-  assertHeaderSafe,
-  button,
-  codeBlock,
-  createNotifier,
-  defineTemplate,
-  escapeHtml,
-  layout,
-  preview,
-  render,
-} from '@forgezero/runtime/notify';
-
-import type {
-  Channel,
-  Notification,
-  Notifier,
-  NotifierOptions,
-  Rendered,
-  TemplateSpec,
-  Transport,
 } from '@forgezero/runtime/notify';
 ```
 
@@ -417,22 +259,11 @@ export const selectedCapability = CHANNELS;
 <a id="forgezero-runtime-notify-templates"></a>
 ## @forgezero/runtime/notify/templates
 
-The six transactional messages ForgeZero sends. This entry exposes 8 named value exports and 1 named type export. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
+The six transactional messages ForgeZero sends. This is a supported entry point. Import only the named values used by the adjacent task example; the declaration file remains the complete API reference.
 
 ```text
 import {
   TEMPLATES,
-  ceremonyProposed,
-  custodianEnrolment,
-  escapeHtml,
-  invitation,
-  newDevice,
-  signInCode,
-  vaultLocked,
-} from '@forgezero/runtime/notify/templates';
-
-import type {
-  TemplateKey,
 } from '@forgezero/runtime/notify/templates';
 ```
 
@@ -451,32 +282,11 @@ export const selectedCapability = TEMPLATES;
 <a id="forgezero-runtime-calendar"></a>
 ## @forgezero/runtime/calendar
 
-Billing periods computed from an anchor, working days, holidays and due dates. This entry exposes 15 named value exports and 4 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
+Billing periods computed from an anchor, working days, holidays and due dates. This is a supported entry point. Import only the named values used by the adjacent task example; the declaration file remains the complete API reference.
 
 ```text
 import {
   CalendarError,
-  DAY_MS,
-  DEFAULT_WORKING_DAYS,
-  closedPeriods,
-  dayOfWeek,
-  daysOverdue,
-  fromDay,
-  isOverdue,
-  isWorkingDay,
-  nextWorkingDay,
-  periodAt,
-  periodIndexOn,
-  periodOn,
-  toDay,
-  workingDaysBetween,
-} from '@forgezero/runtime/calendar';
-
-import type {
-  BillingSchedule,
-  Calendar,
-  IsoDate,
-  Period,
 } from '@forgezero/runtime/calendar';
 ```
 
@@ -492,78 +302,14 @@ import {
 export const selectedCapability = CalendarError;
 ```
 
-<a id="forgezero-runtime-compliance"></a>
-## @forgezero/runtime/compliance
-
-Screening as a decision record — tiers, rules and lists, failing closed when a list is unreachable. This entry exposes 11 named value exports and 10 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
-
-```text
-import {
-  ComplianceError,
-  RISK_LEVELS,
-  VERIFICATION_TIERS,
-  combineLists,
-  countryRule,
-  newCounterpartyRule,
-  screen,
-  screeningStage,
-  staticList,
-  tierLimitRule,
-  unavailableList,
-} from '@forgezero/runtime/compliance';
-
-import type {
-  ListEntry,
-  RiskLevel,
-  Rule,
-  RuleHit,
-  ScreenOptions,
-  ScreeningList,
-  StageOptions,
-  Subject,
-  Verdict,
-  VerificationTier,
-} from '@forgezero/runtime/compliance';
-```
-
-## @forgezero/runtime/compliance — Use this entry point
-
-This minimal executable use imports one concrete value from this exact entry point without a wildcard or package-root detour. Keep the value or values the application actually needs; the full named inventory remains directly above it.
-
-```text
-import {
-  ComplianceError,
-} from '@forgezero/runtime/compliance';
-
-export const selectedCapability = ComplianceError;
-```
-
 <a id="forgezero-runtime-totp"></a>
 ## @forgezero/runtime/totp
 
-RFC 6238 TOTP on the existing HMAC — base32, an asymmetric window, and replay left to the caller. This entry exposes 13 named value exports and 3 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
+RFC 6238 TOTP on the existing HMAC — base32, an asymmetric window, and replay left to the caller. This is a supported entry point. Import only the named values used by the adjacent task example; the declaration file remains the complete API reference.
 
 ```text
 import {
   DEFAULT_DIGITS,
-  DEFAULT_STEP_SECONDS,
-  TotpError,
-  assertCode,
-  codeAt,
-  codeFor,
-  counterAt,
-  enrolmentUri,
-  fromBase32,
-  generateSecret,
-  secondsRemaining,
-  toBase32,
-  verifyCode,
-} from '@forgezero/runtime/totp';
-
-import type {
-  TotpOptions,
-  VerifyOptions,
-  VerifyResult,
 } from '@forgezero/runtime/totp';
 ```
 
@@ -582,27 +328,11 @@ export const selectedCapability = DEFAULT_DIGITS;
 <a id="forgezero-runtime-passkey"></a>
 ## @forgezero/runtime/passkey
 
-Passkeys for sites that are not us. A vault-held credential is as unphishable as one in a security chip provided the RP ID check never slips — `evil-example.com` ends with `example.com` and is a different site. This entry exposes 11 named value exports and 3 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
+Passkeys for sites that are not us. A vault-held credential is as unphishable as one in a security chip provided the RP ID check never slips — `evil-example.com` ends with `example.com` and is a different site. This is a supported entry point. Import only the named values used by the adjacent task example; the declaration file remains the complete API reference.
 
 ```text
 import {
   FLAG_BE,
-  FLAG_BS,
-  FLAG_UP,
-  FLAG_UV,
-  PasskeyError,
-  assertPasskey,
-  authenticatorData,
-  credentialIdFor,
-  passkeysFor,
-  rpIdMatches,
-  verifyAssertion,
-} from '@forgezero/runtime/passkey';
-
-import type {
-  Assertion,
-  AssertionRequest,
-  StoredPasskey,
 } from '@forgezero/runtime/passkey';
 ```
 
@@ -621,17 +351,11 @@ export const selectedCapability = FLAG_BE;
 <a id="forgezero-runtime-phrase"></a>
 ## @forgezero/runtime/phrase
 
-BIP-39 recovery phrases, and the salted verifier that proves one without being able to reconstruct it. This entry exposes 7 named value exports and 0 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
+BIP-39 recovery phrases, and the salted verifier that proves one without being able to reconstruct it. This is a supported entry point. Import only the named values used by the adjacent task example; the declaration file remains the complete API reference.
 
 ```text
 import {
   PHRASE_SALT_BYTES,
-  PHRASE_WORDS,
-  generatePhrase,
-  newSalt,
-  phraseToKey,
-  phraseVerifier,
-  validatePhrase,
 } from '@forgezero/runtime/phrase';
 ```
 
@@ -650,21 +374,11 @@ export const selectedCapability = PHRASE_SALT_BYTES;
 <a id="forgezero-runtime-snp"></a>
 ## @forgezero/runtime/snp
 
-Parse an AMD SEV-SNP attestation report at the firmware ABI offsets, and compare a TCB component by component so a microcode bump cannot mask a firmware downgrade. This entry exposes 5 named value exports and 3 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
+Parse an AMD SEV-SNP attestation report at the firmware ABI offsets, and compare a TCB component by component so a microcode bump cannot mask a firmware downgrade. This is a supported entry point. Import only the named values used by the adjacent task example; the declaration file remains the complete API reference.
 
 ```text
 import {
   REPORT_BYTES,
-  SnpError,
-  bindsNonce,
-  parseSnpReport,
-  tcbAtLeast,
-} from '@forgezero/runtime/snp';
-
-import type {
-  GuestPolicy,
-  SnpReport,
-  TcbVersion,
 } from '@forgezero/runtime/snp';
 ```
 
@@ -683,24 +397,11 @@ export const selectedCapability = REPORT_BYTES;
 <a id="forgezero-runtime-importers"></a>
 ## @forgezero/runtime/importers
 
-Read secrets out of a .env, a CSV, or a Bitwarden or 1Password export — skipping what cannot be understood rather than guessing, and never putting a value in an error. This entry exposes 7 named value exports and 4 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
+Read secrets out of a .env, a CSV, or a Bitwarden or 1Password export — skipping what cannot be understood rather than guessing, and never putting a value in an error. This is a supported entry point. Import only the named values used by the adjacent task example; the declaration file remains the complete API reference.
 
 ```text
 import {
   IMPORT_FORMATS,
-  normaliseName,
-  parseBitwarden,
-  parseCsv,
-  parseEnv,
-  parseImport,
-  parseOnePassword,
-} from '@forgezero/runtime/importers';
-
-import type {
-  ImportFormat,
-  ImportResult,
-  ImportedSecret,
-  Skipped,
 } from '@forgezero/runtime/importers';
 ```
 
@@ -719,16 +420,11 @@ export const selectedCapability = IMPORT_FORMATS;
 <a id="forgezero-runtime-openssh"></a>
 ## @forgezero/runtime/openssh
 
-OpenSSH wire encoding, so a derived ed25519 key becomes a line that pastes into authorized_keys. This entry exposes 6 named value exports and 0 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
+OpenSSH wire encoding, so a derived ed25519 key becomes a line that pastes into authorized_keys. This is a supported entry point. Import only the named values used by the adjacent task example; the declaration file remains the complete API reference.
 
 ```text
 import {
   OpenSshError,
-  authorizedKey,
-  fingerprint,
-  parseAuthorizedKey,
-  publicKeyBlob,
-  signatureBlob,
 } from '@forgezero/runtime/openssh';
 ```
 
@@ -747,24 +443,11 @@ export const selectedCapability = OpenSshError;
 <a id="forgezero-runtime-ssh-cert"></a>
 ## @forgezero/runtime/ssh-cert
 
-OpenSSH certificates, so access expires instead of having to be hunted down. Takes a signing FUNCTION rather than a secret key, which is what lets the CA live in a vault that never hands it out. This entry exposes 9 named value exports and 2 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
+OpenSSH certificates, so access expires instead of having to be hunted down. Takes a signing FUNCTION rather than a secret key, which is what lets the CA live in a vault that never hands it out. This is a supported entry point. Import only the named values used by the adjacent task example; the declaration file remains the complete API reference.
 
 ```text
 import {
   CERT_TYPE_HOST,
-  CERT_TYPE_USER,
-  DEFAULT_EXTENSIONS,
-  SshCertError,
-  caFingerprint,
-  caFromSecretKey,
-  caPublicKeyLine,
-  isCurrentlyValid,
-  signCertificate,
-} from '@forgezero/runtime/ssh-cert';
-
-import type {
-  CertificateAuthority,
-  CertificateRequest,
 } from '@forgezero/runtime/ssh-cert';
 ```
 
@@ -783,19 +466,11 @@ export const selectedCapability = CERT_TYPE_HOST;
 <a id="forgezero-runtime-slip10"></a>
 ## @forgezero/runtime/slip10
 
-SLIP-0010 derivation for ed25519, hardened-only — BIP-32 does not work on this curve and produces halves that do not correspond. This entry exposes 5 named value exports and 1 named type export. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
+SLIP-0010 derivation for ed25519, hardened-only — BIP-32 does not work on this curve and produces halves that do not correspond. This is a supported entry point. Import only the named values used by the adjacent task example; the declaration file remains the complete API reference.
 
 ```text
 import {
   HARDENED_OFFSET,
-  Slip10Error,
-  deriveChild,
-  derivePath,
-  masterFromSeed,
-} from '@forgezero/runtime/slip10';
-
-import type {
-  Slip10Node,
 } from '@forgezero/runtime/slip10';
 ```
 
@@ -814,35 +489,11 @@ export const selectedCapability = HARDENED_OFFSET;
 <a id="forgezero-runtime-identity"></a>
 ## @forgezero/runtime/identity
 
-Hybrid Ed25519 + ML-DSA-65 request signing. One canonical string, so the compute agent that signs inside a guest and the API that verifies cannot drift — which two implementations of it certainly would. This entry exposes 16 named value exports and 6 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
+Hybrid Ed25519 + ML-DSA-65 request signing. One canonical string, so the compute agent that signs inside a guest and the API that verifies cannot drift — which two implementations of it certainly would. This is a supported entry point. Import only the named values used by the adjacent task example; the declaration file remains the complete API reference.
 
 ```text
 import {
   CLOCK_SKEW_SECONDS,
-  REQUEST_SIGNATURE_SUITE,
-  RESPONSE_KEY_HEADER,
-  RESPONSE_SEALING_SUITE,
-  canonicalString,
-  decodeSignatureHeader,
-  deriveKeysFromSeed,
-  derivePublicKeysFromSeed,
-  encodeSignatureHeader,
-  generateNodeKeys,
-  generateResponseRecipient,
-  openResponse,
-  sealResponse,
-  signRequest,
-  validResponsePublicKey,
-  verifyRequest,
-} from '@forgezero/runtime/identity';
-
-import type {
-  NodeKeyPair,
-  NodePublicKeys,
-  ResponseRecipient,
-  SealedResponse,
-  SignedEnvelope,
-  VerifyFailure,
 } from '@forgezero/runtime/identity';
 ```
 
@@ -861,26 +512,11 @@ export const selectedCapability = CLOCK_SKEW_SECONDS;
 <a id="forgezero-runtime-schema"></a>
 ## @forgezero/runtime/schema
 
-Validate against JSON Schema, restrict what a caller may declare, and describe a schema as a form. This entry exposes 8 named value exports and 5 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
+Validate against JSON Schema, restrict what a caller may declare, and describe a schema as a form. This is a supported entry point. Import only the named values used by the adjacent task example; the declaration file remains the complete API reference.
 
 ```text
 import {
   DEFAULT_RESTRICTIONS,
-  SCHEMA_VERSION,
-  SchemaError,
-  VERSION,
-  describeJsonSchema,
-  readableFields,
-  restrictJsonSchema,
-  writeOnlyPaths,
-} from '@forgezero/runtime/schema';
-
-import type {
-  FieldKind,
-  FormField,
-  Restrictions,
-  SchemaValidator,
-  ValidationResult,
 } from '@forgezero/runtime/schema';
 ```
 
@@ -910,19 +546,11 @@ const secretFields = writeOnlyPaths(fields);
 <a id="forgezero-runtime-schema-typebox"></a>
 ## @forgezero/runtime/schema/typebox
 
-The TypeBox validator behind that interface. This entry exposes 4 named value exports and 2 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
+The TypeBox validator behind that interface. This is a supported entry point. Import only the named values used by the adjacent task example; the declaration file remains the complete API reference.
 
 ```text
 import {
   T,
-  parse,
-  typebox,
-  typeboxQueryCodec,
-} from '@forgezero/runtime/schema/typebox';
-
-import type {
-  Static,
-  TSchema,
 } from '@forgezero/runtime/schema/typebox';
 ```
 
@@ -950,24 +578,11 @@ const codec = typeboxQueryCodec(User);
 <a id="forgezero-runtime-finance-discounts"></a>
 ## @forgezero/runtime/finance/discounts
 
-Promotions as arithmetic over integer minor units. They never stack — one winner — and a percentage rounds down, because rounding a discount up gives away a unit of currency per invoice forever. This entry exposes 7 named value exports and 4 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
+Promotions as arithmetic over integer minor units. They never stack — one winner — and a percentage rounds down, because rounding a discount up gives away a unit of currency per invoice forever. This is a supported entry point. Import only the named values used by the adjacent task example; the declaration file remains the complete API reference.
 
 ```text
 import {
   DiscountError,
-  assertCode,
-  assertWindow,
-  bestDiscount,
-  discountFor,
-  ineligibility,
-  normaliseCode,
-} from '@forgezero/runtime/finance/discounts';
-
-import type {
-  AppliedDiscount,
-  DiscountKind,
-  Ineligibility,
-  Promotion,
 } from '@forgezero/runtime/finance/discounts';
 ```
 
@@ -986,38 +601,11 @@ export const selectedCapability = DiscountError;
 <a id="forgezero-runtime-finance-money"></a>
 ## @forgezero/runtime/finance/money
 
-Exact amounts in minor units with the asset attached, so two currencies cannot be added. This entry exposes 22 named value exports and 3 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
+Exact amounts in minor units with the asset attached, so two currencies cannot be added. This is a supported entry point. Import only the named values used by the adjacent task example; the declaration file remains the complete API reference.
 
 ```text
 import {
   ASSETS,
-  MoneyError,
-  ROUNDING,
-  VERSION,
-  abs,
-  add,
-  allocate,
-  assetSpec,
-  compare,
-  convert,
-  defineAsset,
-  equals,
-  formatAmount,
-  isNegative,
-  isZero,
-  money,
-  mulRate,
-  negate,
-  parseAmount,
-  subtract,
-  toStep,
-  zero,
-} from '@forgezero/runtime/finance/money';
-
-import type {
-  AssetSpec,
-  Money,
-  Rounding,
 } from '@forgezero/runtime/finance/money';
 ```
 
@@ -1033,364 +621,14 @@ import {
 export const selectedCapability = ASSETS;
 ```
 
-<a id="forgezero-runtime-finance-venues"></a>
-## @forgezero/runtime/finance/venues
-
-Trading venues, market types and symbols as data — spot, margin and futures behind one order model. This entry exposes 14 named value exports and 10 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
-
-```text
-import {
-  MARKET_TYPES,
-  ORDER_SIDES,
-  ORDER_TYPES,
-  TIME_IN_FORCE,
-  VENUES,
-  VERSION,
-  VenueError,
-  notionalOf,
-  parseSymbol,
-  submitOrder,
-  symbolOf,
-  validateOrder,
-  venue,
-  venuesFor,
-} from '@forgezero/runtime/finance/venues';
-
-import type {
-  MarketSpec,
-  MarketType,
-  OrderRequest,
-  OrderResult,
-  OrderSide,
-  OrderStatus,
-  OrderType,
-  TimeInForce,
-  VenueAdapter,
-  VenueSpec,
-} from '@forgezero/runtime/finance/venues';
-```
-
-## @forgezero/runtime/finance/venues — Use this entry point
-
-This minimal executable use imports one concrete value from this exact entry point without a wildcard or package-root detour. Keep the value or values the application actually needs; the full named inventory remains directly above it.
-
-```text
-import {
-  MARKET_TYPES,
-} from '@forgezero/runtime/finance/venues';
-
-export const selectedCapability = MARKET_TYPES;
-```
-
-<a id="forgezero-runtime-finance-ledger"></a>
-## @forgezero/runtime/finance/ledger
-
-Double-entry postings and derived balances. A hold is a posting, not a lock — the queue does the ordering. This entry exposes 21 named value exports and 6 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
-
-```text
-import {
-  ACCOUNT_KINDS,
-  BUCKETS,
-  LedgerError,
-  MAX_LEDGER_ENTRIES,
-  VERSION,
-  accountId,
-  assertAvailable,
-  assertBalanced,
-  availableOf,
-  balanceOf,
-  balancesFrom,
-  captureHold,
-  heldOf,
-  parseAccount,
-  placeHold,
-  queueKeyFor,
-  releaseHold,
-  statement,
-  totalOf,
-  transfer,
-  trialBalance,
-} from '@forgezero/runtime/finance/ledger';
-
-import type {
-  AccountKind,
-  AccountRef,
-  Bucket,
-  Entry,
-  Transaction,
-  TrialBalance,
-} from '@forgezero/runtime/finance/ledger';
-```
-
-## @forgezero/runtime/finance/ledger — Use this entry point
-
-This minimal executable use imports one concrete value from this exact entry point without a wildcard or package-root detour. Keep the value or values the application actually needs; the full named inventory remains directly above it.
-
-```text
-import {
-  ACCOUNT_KINDS,
-} from '@forgezero/runtime/finance/ledger';
-
-export const selectedCapability = ACCOUNT_KINDS;
-```
-
-<a id="forgezero-runtime-finance-commission"></a>
-## @forgezero/runtime/finance/commission
-
-Profit net of flows, a high-water mark, the tier split and the referral share of our income. This entry exposes 9 named value exports and 6 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
-
-```text
-import {
-  CommissionError,
-  allocate,
-  chargeableProfit,
-  commissionTransaction,
-  nextHighWaterMark,
-  periodProfit,
-  projectPrepay,
-  splitCommission,
-  splitReferrals,
-} from '@forgezero/runtime/finance/commission';
-
-import type {
-  CommissionInput,
-  CommissionSplit,
-  PeriodPerformance,
-  Prepay,
-  PrepayInput,
-  ReferralShare,
-} from '@forgezero/runtime/finance/commission';
-```
-
-## @forgezero/runtime/finance/commission — Use this entry point
-
-This minimal executable use imports one concrete value from this exact entry point without a wildcard or package-root detour. Keep the value or values the application actually needs; the full named inventory remains directly above it.
-
-```text
-import {
-  CommissionError,
-} from '@forgezero/runtime/finance/commission';
-
-export const selectedCapability = CommissionError;
-```
-
-<a id="forgezero-runtime-finance-rates"></a>
-## @forgezero/runtime/finance/rates
-
-What an asset is worth in USD, and how old that answer is. A peg never ages; a quote always does. This entry exposes 11 named value exports and 7 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
-
-```text
-import {
-  BASE_ASSET,
-  RATE_SOURCES,
-  RateError,
-  assertRate,
-  createRateTable,
-  describeRate,
-  isRegistered,
-  peg,
-  rateRefreshJob,
-  refreshRates,
-  registerAsset,
-} from '@forgezero/runtime/finance/rates';
-
-import type {
-  AssetEntry,
-  AssetRate,
-  RateFetcher,
-  RateSource,
-  RateTable,
-  RateTableOptions,
-  RefreshReport,
-} from '@forgezero/runtime/finance/rates';
-```
-
-## @forgezero/runtime/finance/rates — Use this entry point
-
-This minimal executable use imports one concrete value from this exact entry point without a wildcard or package-root detour. Keep the value or values the application actually needs; the full named inventory remains directly above it.
-
-```text
-import {
-  BASE_ASSET,
-} from '@forgezero/runtime/finance/rates';
-
-export const selectedCapability = BASE_ASSET;
-```
-
-<a id="forgezero-runtime-finance-transfers"></a>
-## @forgezero/runtime/finance/transfers
-
-Deposits and withdrawals as ordered pipelines, with screening reserved at position zero. This entry exposes 9 named value exports and 6 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
-
-```text
-import {
-  DIRECTIONS,
-  PipelineError,
-  SCREENING_ORDER,
-  approvalStage,
-  balanceStage,
-  createTransferPipeline,
-  limitsStage,
-  notFrozenStage,
-  screeningStage,
-} from '@forgezero/runtime/finance/transfers';
-
-import type {
-  Direction,
-  PipelineResult,
-  Stage,
-  StageOutcome,
-  Transfer,
-  TransferPipeline,
-} from '@forgezero/runtime/finance/transfers';
-```
-
-## @forgezero/runtime/finance/transfers — Use this entry point
-
-This minimal executable use imports one concrete value from this exact entry point without a wildcard or package-root detour. Keep the value or values the application actually needs; the full named inventory remains directly above it.
-
-```text
-import {
-  DIRECTIONS,
-} from '@forgezero/runtime/finance/transfers';
-
-export const selectedCapability = DIRECTIONS;
-```
-
-<a id="forgezero-runtime-finance-chain"></a>
-## @forgezero/runtime/finance/chain
-
-Which chains exist, their confirmation depth by value band, assets and explorers — as data an admin edits. This entry exposes 9 named value exports and 5 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
-
-```text
-import {
-  ADDRESS_SCHEMES,
-  ChainError,
-  SEED_CHAINS,
-  SEED_CHAIN_ASSETS,
-  assertChain,
-  confirmationsFor,
-  createChainRegistry,
-  estimatedSeconds,
-  validateAddress,
-} from '@forgezero/runtime/finance/chain';
-
-import type {
-  AddressScheme,
-  ChainAsset,
-  ChainRegistry,
-  ChainSpec,
-  ConfirmationBand,
-} from '@forgezero/runtime/finance/chain';
-```
-
-## @forgezero/runtime/finance/chain — Use this entry point
-
-This minimal executable use imports one concrete value from this exact entry point without a wildcard or package-root detour. Keep the value or values the application actually needs; the full named inventory remains directly above it.
-
-```text
-import {
-  ADDRESS_SCHEMES,
-} from '@forgezero/runtime/finance/chain';
-
-export const selectedCapability = ADDRESS_SCHEMES;
-```
-
-<a id="forgezero-runtime-finance-custody"></a>
-## @forgezero/runtime/finance/custody
-
-Derive CREATE2 deposit addresses and EIP-712 custody digests — arithmetic over a seed and a salt, needing no credential and no node. This entry exposes 8 named value exports and 0 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
-
-```text
-import {
-  CustodyError,
-  VERSION,
-  depositAddress,
-  domainSeparator,
-  orderSignatures,
-  saltFor,
-  toChecksumAddress,
-  withdrawDigest,
-} from '@forgezero/runtime/finance/custody';
-```
-
-## @forgezero/runtime/finance/custody — Use this entry point
-
-This minimal executable use imports one concrete value from this exact entry point without a wildcard or package-root detour. Keep the value or values the application actually needs; the full named inventory remains directly above it.
-
-```text
-import {
-  CustodyError,
-} from '@forgezero/runtime/finance/custody';
-
-export const selectedCapability = CustodyError;
-```
-
-<a id="forgezero-runtime-finance-derive"></a>
-## @forgezero/runtime/finance/derive
-
-Declare a field ForgeZero generates rather than the tenant supplying: BIP-44 path arithmetic, and the choice of who is capable of generating the key. This entry exposes 11 named value exports and 4 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
-
-```text
-import {
-  CUSTODY,
-  DERIVE_KEYWORD,
-  DeriveError,
-  SCHEMES,
-  assertDeriveSpec,
-  custodyOf,
-  deriveSpecOf,
-  derivedFields,
-  derivedPaths,
-  pathFor,
-  suppliedPaths,
-} from '@forgezero/runtime/finance/derive';
-
-import type {
-  Custody,
-  DeriveSpec,
-  DerivedField,
-  Scheme,
-} from '@forgezero/runtime/finance/derive';
-```
-
-## @forgezero/runtime/finance/derive — Use this entry point
-
-This minimal executable use imports one concrete value from this exact entry point without a wildcard or package-root detour. Keep the value or values the application actually needs; the full named inventory remains directly above it.
-
-```text
-import {
-  CUSTODY,
-} from '@forgezero/runtime/finance/derive';
-
-export const selectedCapability = CUSTODY;
-```
-
 <a id="forgezero-runtime-finance-tax"></a>
 ## @forgezero/runtime/finance/tax
 
-Which jurisdiction may tax a sale, who accounts for it, and the three ways to be zero that report differently. Rates are data. This entry exposes 9 named value exports and 6 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
+Which jurisdiction may tax a sale, who accounts for it, and the three ways to be zero that report differently. Rates are data. This is a supported entry point. Import only the named values used by the adjacent task example; the declaration file remains the complete API reference.
 
 ```text
 import {
   TREATMENTS,
-  TaxError,
-  applyTax,
-  assertTaxRate,
-  decideTax,
-  describeTax,
-  parseRate,
-  percent,
-  totalWithTax,
-} from '@forgezero/runtime/finance/tax';
-
-import type {
-  Customer,
-  Supplier,
-  TaxAmounts,
-  TaxDecision,
-  TaxRate,
-  Treatment,
 } from '@forgezero/runtime/finance/tax';
 ```
 
@@ -1409,22 +647,11 @@ export const selectedCapability = TREATMENTS;
 <a id="forgezero-runtime-finance-storage"></a>
 ## @forgezero/runtime/finance/storage
 
-Write an amount so it is both exact and sortable: an authoritative string, and a number that is only an index. This entry exposes 8 named value exports and 1 named type export. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
+Write an amount so it is both exact and sortable: an authoritative string, and a number that is only an index. This is a supported entry point. Import only the named values used by the adjacent task example; the declaration file remains the complete API reference.
 
 ```text
 import {
   SORT_FIELD,
-  fromStored,
-  rangeBounds,
-  sortExact,
-  sortKey,
-  storeAmount,
-  toStored,
-  withinRange,
-} from '@forgezero/runtime/finance/storage';
-
-import type {
-  StoredMoney,
 } from '@forgezero/runtime/finance/storage';
 ```
 
@@ -1443,33 +670,11 @@ export const selectedCapability = SORT_FIELD;
 <a id="forgezero-runtime-realtime"></a>
 ## @forgezero/runtime/realtime
 
-Provider-neutral realtime audience, shard, event and delivery contracts. This entry exposes 15 named value exports and 5 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
+Provider-neutral realtime audience, shard, event and delivery contracts. This is a supported entry point. Import only the named values used by the adjacent task example; the declaration file remains the complete API reference.
 
 ```text
 import {
   REALTIME_MAX_BATCH_BYTES,
-  REALTIME_MAX_EVENTS,
-  REALTIME_MAX_EVENT_BYTES,
-  REALTIME_MAX_SHARDS_PER_TOPIC,
-  REALTIME_MAX_SOCKETS_PER_SHARD,
-  canReceiveRealtimeAudience,
-  issueRealtimeSubscriptionTicket,
-  realtimeBatchBytes,
-  realtimeHmac,
-  realtimeShardKey,
-  validateRealtimeAudience,
-  validateRealtimeBatch,
-  validateRealtimeSubscriptionTicket,
-  verifyRealtimeHmac,
-  verifyRealtimeSubscriptionToken,
-} from '@forgezero/runtime/realtime';
-
-import type {
-  RealtimeAudience,
-  RealtimeBatch,
-  RealtimeEvent,
-  RealtimePrincipalKind,
-  RealtimeSubscriptionTicket,
 } from '@forgezero/runtime/realtime';
 ```
 
@@ -1488,25 +693,11 @@ export const selectedCapability = REALTIME_MAX_BATCH_BYTES;
 <a id="forgezero-runtime-passkey-hybrid"></a>
 ## @forgezero/runtime/passkey-hybrid
 
-Versioned WebAuthn PRF plus ML-DSA companion proof construction and verification. This entry exposes 8 named value exports and 4 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
+Versioned WebAuthn PRF plus ML-DSA companion proof construction and verification. This is a supported entry point. Import only the named values used by the adjacent task example; the declaration file remains the complete API reference.
 
 ```text
 import {
   PASSKEY_HYBRID_SUITE,
-  PASSKEY_HYBRID_VERSION,
-  PASSKEY_ML_DSA_PUBLIC_KEY_BYTES,
-  PASSKEY_ML_DSA_SIGNATURE_BYTES,
-  PASSKEY_PRF_SALT,
-  createPasskeyHybridProof,
-  passkeyHybridMessage,
-  verifyPasskeyHybridProof,
-} from '@forgezero/runtime/passkey-hybrid';
-
-import type {
-  PasskeyHybridBinding,
-  PasskeyHybridProof,
-  PasskeyHybridPurpose,
-  PasskeyHybridRegistrationProof,
 } from '@forgezero/runtime/passkey-hybrid';
 ```
 
@@ -1525,18 +716,11 @@ export const selectedCapability = PASSKEY_HYBRID_SUITE;
 <a id="forgezero-runtime-otpauth"></a>
 ## @forgezero/runtime/otpauth
 
-Parse and render otpauth URIs without binding enrolment to a UI framework. This entry exposes 4 named value exports and 1 named type export. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
+Parse and render otpauth URIs without binding enrolment to a UI framework. This is a supported entry point. Import only the named values used by the adjacent task example; the declaration file remains the complete API reference.
 
 ```text
 import {
   formatOtpAuth,
-  fromManualSecret,
-  newOtpAuth,
-  parseOtpAuth,
-} from '@forgezero/runtime/otpauth';
-
-import type {
-  OtpAuth,
 } from '@forgezero/runtime/otpauth';
 ```
 
@@ -1555,22 +739,11 @@ export const selectedCapability = formatOtpAuth;
 <a id="forgezero-runtime-pipeline"></a>
 ## @forgezero/runtime/pipeline
 
-Typed ordered application-pipeline execution with explicit evidence. This entry exposes 6 named value exports and 3 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
+Typed ordered application-pipeline execution with explicit evidence. This is a supported entry point. Import only the named values used by the adjacent task example; the declaration file remains the complete API reference.
 
 ```text
 import {
   GIT_PROVIDERS,
-  PipelineError,
-  parsePush,
-  shouldDeploy,
-  verifyWebhook,
-  webhookPath,
-} from '@forgezero/runtime/pipeline';
-
-import type {
-  DeployTrigger,
-  GitProvider,
-  PushEvent,
 } from '@forgezero/runtime/pipeline';
 ```
 
@@ -1586,225 +759,14 @@ import {
 export const selectedCapability = GIT_PROVIDERS;
 ```
 
-<a id="forgezero-runtime-finance-chain-addresses"></a>
-## @forgezero/runtime/finance/chain-addresses
-
-Chain-address derivation records and validation independent of a node provider. This entry exposes 10 named value exports and 2 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
-
-```text
-import {
-  AddressError,
-  COUNTERFACTUAL_SCHEMES,
-  assertDerivationMatches,
-  create2Address,
-  depositAddressBook,
-  depositSaltFor,
-  deriveDepositAddress,
-  ownerOfAddress,
-  toChecksumAddress,
-  validateAddress,
-} from '@forgezero/runtime/finance/chain-addresses';
-
-import type {
-  AddressScheme,
-  ChainDeployment,
-} from '@forgezero/runtime/finance/chain-addresses';
-```
-
-## @forgezero/runtime/finance/chain-addresses — Use this entry point
-
-This minimal executable use imports one concrete value from this exact entry point without a wildcard or package-root detour. Keep the value or values the application actually needs; the full named inventory remains directly above it.
-
-```text
-import {
-  AddressError,
-} from '@forgezero/runtime/finance/chain-addresses';
-
-export const selectedCapability = AddressError;
-```
-
-<a id="forgezero-runtime-finance-chain-deposits"></a>
-## @forgezero/runtime/finance/chain-deposits
-
-Provider-neutral deposit observation, confirmation and credit transitions. This entry exposes 8 named value exports and 5 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
-
-```text
-import {
-  DepositError,
-  creditDeposit,
-  cursorFrom,
-  depositReference,
-  describeScan,
-  isConfirmed,
-  rescanRange,
-  scanOnce,
-} from '@forgezero/runtime/finance/chain-deposits';
-
-import type {
-  ChainReader,
-  ChainTransfer,
-  DepositCursor,
-  ScanContext,
-  ScanReport,
-} from '@forgezero/runtime/finance/chain-deposits';
-```
-
-## @forgezero/runtime/finance/chain-deposits — Use this entry point
-
-This minimal executable use imports one concrete value from this exact entry point without a wildcard or package-root detour. Keep the value or values the application actually needs; the full named inventory remains directly above it.
-
-```text
-import {
-  DepositError,
-} from '@forgezero/runtime/finance/chain-deposits';
-
-export const selectedCapability = DepositError;
-```
-
-<a id="forgezero-runtime-finance-chain-withdrawals"></a>
-## @forgezero/runtime/finance/chain-withdrawals
-
-Provider-neutral withdrawal approval, broadcast and finality transitions. This entry exposes 14 named value exports and 5 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
-
-```text
-import {
-  WITHDRAWAL_STATES,
-  WithdrawalError,
-  approveWithdrawal,
-  broadcastKeyFor,
-  canTransition,
-  confirmWithdrawal,
-  describeSweep,
-  holdReference,
-  markFailed,
-  processOnce,
-  refundFailed,
-  rejectWithdrawal,
-  requestWithdrawal,
-  sweepForPayout,
-} from '@forgezero/runtime/finance/chain-withdrawals';
-
-import type {
-  Broadcaster,
-  SweepCandidate,
-  SweepPlan,
-  Withdrawal,
-  WithdrawalState,
-} from '@forgezero/runtime/finance/chain-withdrawals';
-```
-
-## @forgezero/runtime/finance/chain-withdrawals — Use this entry point
-
-This minimal executable use imports one concrete value from this exact entry point without a wildcard or package-root detour. Keep the value or values the application actually needs; the full named inventory remains directly above it.
-
-```text
-import {
-  WITHDRAWAL_STATES,
-} from '@forgezero/runtime/finance/chain-withdrawals';
-
-export const selectedCapability = WITHDRAWAL_STATES;
-```
-
-<a id="forgezero-runtime-finance-chain-reconcile"></a>
-## @forgezero/runtime/finance/chain-reconcile
-
-Deterministic reconciliation between chain observations and durable transfer state. This entry exposes 5 named value exports and 5 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
-
-```text
-import {
-  DISCREPANCY_KINDS,
-  ReconcileError,
-  reconcileOnce,
-  reconcileReport,
-  shortfallUsd,
-} from '@forgezero/runtime/finance/chain-reconcile';
-
-import type {
-  Discrepancy,
-  DiscrepancyKind,
-  LedgerLiability,
-  OnChainHolding,
-  ReconcileReport,
-} from '@forgezero/runtime/finance/chain-reconcile';
-```
-
-## @forgezero/runtime/finance/chain-reconcile — Use this entry point
-
-This minimal executable use imports one concrete value from this exact entry point without a wildcard or package-root detour. Keep the value or values the application actually needs; the full named inventory remains directly above it.
-
-```text
-import {
-  DISCREPANCY_KINDS,
-} from '@forgezero/runtime/finance/chain-reconcile';
-
-export const selectedCapability = DISCREPANCY_KINDS;
-```
-
-<a id="forgezero-runtime-finance-market"></a>
-## @forgezero/runtime/finance/market
-
-Market order, fill and quote contracts independent of any exchange adapter. This entry exposes 8 named value exports and 7 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
-
-```text
-import {
-  MarketError,
-  createFeed,
-  disagreementOf,
-  isStale,
-  lastPrice,
-  limitFor,
-  stalenessOf,
-  subscribe,
-} from '@forgezero/runtime/finance/market';
-
-import type {
-  Feed,
-  FeedEvent,
-  FeedOptions,
-  PriceResult,
-  Quote,
-  StalenessPolicy,
-  VenueSource,
-} from '@forgezero/runtime/finance/market';
-```
-
-## @forgezero/runtime/finance/market — Use this entry point
-
-This minimal executable use imports one concrete value from this exact entry point without a wildcard or package-root detour. Keep the value or values the application actually needs; the full named inventory remains directly above it.
-
-```text
-import {
-  MarketError,
-} from '@forgezero/runtime/finance/market';
-
-export const selectedCapability = MarketError;
-```
-
 <a id="forgezero-runtime-custody-share"></a>
 ## @forgezero/runtime/custody-share
 
-Threshold-share parsing, validation and reconstruction. This entry exposes 13 named value exports and 2 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
+Threshold-share parsing, validation and reconstruction. This is a supported entry point. Import only the named values used by the adjacent task example; the declaration file remains the complete API reference.
 
 ```text
 import {
   PROBE_BYTES,
-  factorWrapAad,
-  joinProbeAndShare,
-  openFactorEnvelope,
-  openSealedToFactor,
-  openShareWithPasskey,
-  openShareWithPhrase,
-  passkeyWrappingKey,
-  phraseWrappingKey,
-  sealShare,
-  shareIndexOf,
-  splitProbeAndShare,
-  wrappingKeysFor,
-} from '@forgezero/runtime/custody-share';
-
-import type {
-  SealedShare,
-  WrappingKeys,
 } from '@forgezero/runtime/custody-share';
 ```
 
@@ -1823,21 +785,11 @@ export const selectedCapability = PROBE_BYTES;
 <a id="forgezero-runtime-custody-crypto"></a>
 ## @forgezero/runtime/custody-crypto
 
-Hybrid ML-KEM-768 plus X25519 custody-share sealing and opening. This entry exposes 6 named value exports and 2 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
+Hybrid ML-KEM-768 plus X25519 custody-share sealing and opening. This is a supported entry point. Import only the named values used by the adjacent task example; the declaration file remains the complete API reference.
 
 ```text
 import {
   deriveKey,
-  openFromKey,
-  openWithKey,
-  sealToKey,
-  sealWithKey,
-  wrappingKeyPair,
-} from '@forgezero/runtime/custody-crypto';
-
-import type {
-  CipherBox,
-  SealedToKey,
 } from '@forgezero/runtime/custody-crypto';
 ```
 
@@ -1873,51 +825,38 @@ import {
 
 ## What is in it
 
-Four groups. The service spine is what a process needs to keep working after the response is sent; the record keeps evidence; the finance modules are the ones that must never be approximated. Nothing here knows what your product does — a tenant binds its own business rules to these, it does not fork them.
+Four groups. The service spine keeps work ordered after a response; record modules preserve evidence and recovery; identity modules provide portable security primitives; finance modules provide exact USD and multi-currency representation without importing a trading product.
 
 ```text
-SPINE      jobs        scheduled work submitted through the common queue
-           queue       awaited result; parallel keys, sequential within one
-           outbox      business-owned durability, drained through handlers
+SPINE      jobs        fenced scheduled work
+           queue       parallel keys, sequential within one key
+           outbox      transactional intent, bounded draining
 
-RECORD     audit       append-only, hash-chained, names the first altered row
-           backup      encrypted, chunked, verified snapshots + the restore
-           compliance  screening as a decision record, failing closed
-           calendar    billing periods, working days, holidays, due dates
+RECORD     audit       append-only hash-chain verification
+           backup      encrypted snapshots and verified restore
+           calendar    periods, working days and due dates
 
-IDENTITY   identity    hybrid Ed25519 + ML-DSA-65 request signing
-           totp        RFC 6238, asymmetric window, replay rejected
-           notify      named templates to text and HTML, escaped per part
-           schema      JSON Schema validation, restricted and describable
+IDENTITY   identity    hybrid Ed25519 + ML-DSA-65 signing
+           passkey     WebAuthn and recovery primitives
+           totp        bounded RFC 6238 verification
+           notify      escaped named notification templates
+           schema      restricted validation and form descriptors
 
-FINANCE    money       minor units with the asset attached
-           storage      the same amount, exact AND sortable in a database
-           ledger      double-entry postings and derived balances
-           commission  profit net of flows, high-water mark, referral split
-           rates       what an asset is worth, and how old that answer is
-           transfers   deposits and withdrawals as ordered pipelines
-           tax         who may tax a sale, and who accounts for it
-           chain       chains, assets, confirmation depth by value band
-           custody     CREATE2 deposit addresses and EIP-712 digests
-           derive      declare a key ForgeZero generates, not the tenant
-           venues      trading venues, market types and symbols as data
-           binance     Binance behind the venue adapter
+FINANCE    money       exact minor-unit strings with currency and scale
+           storage     exact authority plus coarse indexed projection
+           discounts   bounded price adjustments
+           tax         jurisdiction and accounting decisions
 ```
 
 ## Optional peers — install only what your subpath needs
 
-Nothing third-party is bundled. Vendoring a crypto library means a fix for it never reaches you until this package is republished, so the imports stay real and the dependency stays yours. Most subpaths need nothing; four of them do, and the failure is a plain module-not-found rather than a silently wrong result.
+Nothing third-party is bundled. Vendoring a crypto library means a fix cannot reach you until this package republishes, so optional peer imports remain explicit. Most subpaths need nothing.
 
 ```text
-# most subpaths: nothing to add
-
-# finance/custody  — CREATE2 and EIP-712 digests
-bun add @noble/hashes
-
-# identity         — hybrid post-quantum signing
+# identity and hybrid passkeys
 bun add @noble/curves @noble/post-quantum
 
-# schema/typebox   — only if you validate with TypeBox
+# schema/typebox — only if you validate with TypeBox
 bun add @sinclair/typebox
 ```
 
@@ -1946,18 +885,6 @@ const row = toStored(fee);
 rangeBounds(parseAmount('10', 'USD'), null);   // { gte: 10 }
 ```
 
-## The contracts ship with it
-
-The Solidity behind `finance/custody` is in the package rather than in a repository you have to go find. `finance/custody` computes the counterfactual address; `DepositFactory` is what makes that address real on first sweep, and `ColdVault` is the M-of-N EIP-712 approval the digests are built for. Address arithmetic without the contract that honours it is half an answer.
-
-```text
-node_modules/@forgezero/runtime/contracts/src/
-  DepositProxy.sol      lazily deployed at first sweep — no key, no gas per address
-  DepositFactory.sol    CREATE2, salt opaque to the contract
-  ColdVault.sol         M-of-N, signatures ordered by ascending signer
-  SafeTransferLib.sol   tokens that do not return a bool
-```
-
 ## Jobs — background work that never overlaps
 
 The lock and the cursor store are interfaces, so this runs against a database, Redis, or nothing at all in a test.
@@ -2001,13 +928,13 @@ Fetch a batch, process every item, then write the cursor — never per item and
 
 ```text
 cursorJob({
-  key: 'scan-deposits',
-  label: 'Scan deposits',
-  every: '15s',
+  key: 'rotate-provider-credentials',
+  label: 'Rotate provider credentials',
+  every: '1m',
   store: cursors,
   from: '0',
-  fetch: (cursor) => fetchBlocks(cursor),
-  process: (transfer) => credit(transfer)   // keyed, so a retry is free
+  fetch: (cursor) => dueRotations(cursor),
+  process: (record) => rotateOnce(record)   // keyed and idempotent
 });
 ```
 
@@ -2018,7 +945,7 @@ Returning from stop() before in-flight work settles is how a deploy leaves a rec
 ```text
 await scheduler.stop();       // clears timers, aborts, awaits in-flight
 scheduler.pause();            // stop scheduling, let in-flight finish
-await scheduler.runNow('scan-deposits');
+await scheduler.runNow('rotate-provider-credentials');
 ```
 
 ## Status somebody can read during an incident
@@ -2027,7 +954,7 @@ Last run, duration, result, error and consecutive failures per job. Without it a
 
 ```text
 scheduler.status();
-// [{ key: 'scan-deposits', state: 'idle', runs: 412,
+// [{ key: 'rotate-provider-credentials', state: 'idle', runs: 412,
 //    lastDurationMs: 840, lastResult: { processed: 17, batches: 2 },
 //    consecutiveFailures: 0, skippedLocked: 0 }]
 ```