Production-ship hardening: runnable examples, clean-install verified, FURS runtime documented

[terrxo]

Hardens fiscalize to production-ship state (engine already merged). Docs/examples only — no library code change. 44 pass / 1 skip, tsc clean.

1. Runnable examples (examples/)

• e-invoice.ts — model → createEInvoice e-SLOG 2.0 (XSD-validated on the way out) + UBL + explicit validateEslogXml + clean 400 on bad input.
• furs-offline.ts — full FURS crypto offline: load cert → ZOI → printable (QR/PDF417) → request-JWS → response-verify → EOR. Runs under bun (no live call / real cert needed). This is the basis the upcoming demo app can build on.

Both run green (bun run examples/…). README snippets corrected to match.

2. Clean install from a consumer repo — verified

bun pm pack → fresh bun init repo → bun add the tarball → imported and ran as a real consumer:

• top-level @grunt-it/fiscalize, @grunt-it/fiscalize/eslog, @grunt-it/fiscalize/furs all resolve;
• the bundled e-SLOG XSDs load from node_modules (the key packaging risk — confirmed working when installed);
• all transitive deps install; examples are excluded from the package; the 2 XSDs ship.
• Publish config confirmed: license: UNLICENSED, publishConfig → GitHub Packages, no private: true (publish works), bunfig.toml present (env-var token, house standard).

3. FURS runtime blocker — documented, not silent

New docs/FURS-RUNTIME.md: bun ≤1.3.6 can't present an outbound mTLS client cert, so live FURS (echo/reportInvoice/registerBusinessPremise) must run under Node on a non-proxied network. Includes the opt-in Node snippet + how to run the skipped live integration test + the demo-cert details. README carries a sharpened ⚠ pointer.

Forbidden zone respected

Did not touch the Medusa-plugin consumer (jp2jo0ec's territory).

Next: ready to ship to the registry

The engine + this hardening make v0.1.0 publishable. Publishing = the tag-triggered CI (publish.yml on v* → GitHub Packages). I've teed it up but not pushed the tag — release-to-consumers is a confirm-first action; say go and I'll cut v0.1.0 (needed so the demo app / medusa plugin can bun add @grunt-it/fiscalize from GH Packages rather than a local tarball).

🤖 Generated with Claude Code