feat(coding): add model tools and device packages

.project-docs/40-domain/business-rules.md

@@ -19,11 +19,11 @@
 - System-included Data Service ships with MakeLore and has no Library acquisition,
   Admission, download, update, or device-uninstall action. Users may still enable it
   per project and assign its Skill to an Agent.
-- Code-owned Game Resource and Web Search are optional bundled hosted Plugins. Their
-  exact schema-2 manifests, Skills, and tools ship with MakeLore, so they have no
-  device download, update, Beta, signature, or device-uninstall state. Account Library
-  acquisition/removal, project enablement, Agent assignment, current server policy,
-  immutable Admission, explicit confirmation, and Token Point billing remain distinct.
+- Code-owned Game Resource is the optional bundled hosted Plugin. Its exact schema-2
+  manifest, Skill, and tools ship with MakeLore, so it has no device download, update,
+  Beta, signature, or device-uninstall state. Account Library acquisition/removal,
+  project enablement, Agent assignment, current server policy, immutable Admission,
+  explicit confirmation, and Token Point billing remain distinct.
 - Production Marketplace trust fails closed while the official Ed25519 public key is
   absent. Test-only/integration keys and packaged unknown-key rejection are evidence,
   not authority to activate production. Generic `platform_hosted` client execution is
@@ -43,14 +43,22 @@
   not expose Provider credentials, URLs, credit balances, raw responses, or Provider job
   IDs. Saving a hosted result must use bounded project-relative paths and the existing
   project write lease.
-- Native Web Search is a user-acquired code-owned bundled `platform_hosted` Plugin. Free
-  acquisition, project enablement, Agent assignment, current
-  Admission, and explicit per-search Token Point confirmation are separate gates.
-  Only the frozen parent worker receives `makelore_web_search`; child workers receive
-  no hosted tool. `submission_unknown` is result-less and must not auto-retry, while
-  `receipt_unavailable` is a Main-only closed billing projection that tells the user
-  not to repeat the search. Provider key, model, URL, price authority, and raw response
-  never enter Renderer, the Package, Pi arguments, or project metadata.
+- Native Web Search is a selected-model capability, not a Marketplace Plugin. Only an
+  exact verified capability may place `makelore_web_search` in a frozen parent worker;
+  it uses that worker's current model/provider/credential and ordinary model billing.
+  Unsupported models expose no tool, child workers receive none, and the implementation
+  must not switch models, call the retired hosted client, create a Plugin Charge, or
+  fall back to `agent_browser`.
+- Device Packages are local Main-owned installations created only through conversation.
+  Inspect/preview and a distinct later confirmation precede commit; there is no visible
+  install/source-picker UI. Accepted npm, Git, absolute local Plugin-directory, and loose
+  `SKILL.md` sources become immutable generations and default enabled. Lifecycle scripts
+  never run. Pi extensions execute with desktop-user authority after that fact is shown
+  in confirmation. New and idle parent workers refresh automatically, active parents
+  switch only after settlement, and child workers never inherit Device Package resources.
+- Device Packages appear separately from Official Plugins in My Plugins and never enter
+  Account Library, Marketplace Package Store, Release, Channel, Admission, project
+  enablement, Agent assignment, or server billing state.
 - 面向用户的 AI 编程新建流程必须在 `mini_game`、`mini_program`、`custom` 中选择；`ProjectType` 是产品类型，创建后不能通过 UI 或 Host API 修改，未传类型的兼容 API 调用按 `custom` 处理。
 - 新建小游戏和小程序会生成平台固定版本的受控 Vite 发布模板，并可使用项目配置中的单一“提交审核”入口；`custom` 和缺少类型字段的旧项目不提供一键发布。
 - `ProjectType` 不等于 `BuildPreset`：第一期两个可发布产品类型都映射到内部受控 Vite preset；本地 `projectType` 不是授权边界，Main-owned 安全打包、Host API 和服务端包体校验仍必须执行。