docs: checkpoint marketplace main integration

.project-docs/30-worklog/tasks/20260830-integrate-plugin-marketplace-client-6e3b9d82.md

@@ -0,0 +1,82 @@
+# Task: Integrate MakeLore Plugin Marketplace Release A client
+
+## Identity
+
+- Task ID: 20260830-integrate-plugin-marketplace-client-6e3b9d82
+- Mode: Integration
+- Branch: codex/20260830-integrate-plugin-marketplace-client-6e3b9d82-integrate-plugin-marketplace-client
+- Worktree: D:\Datas\OthersProjects\makelore-integrate-plugin-marketplace-6e3b9d82
+- Base commit: f2456039230f68e3ecb2c8653fc3379c23bbe5ce
+- Owner: codex-root
+- Status: In Progress
+
+## Scope
+
+- Fast-forward the clean integration branch from local `main`
+  `f2456039230f68e3ecb2c8653fc3379c23bbe5ce` through completed Marketplace
+  Release A client source `40df677a31ff7651f962151eb84b925987781c03`.
+- Preserve the R7 Standards/Spec zero-finding result and completed XMA-01
+  packaged-client evidence.
+- Promote the source task's accepted Main/Package Store/effective resolver,
+  state-separation, current-state, and evidence facts into canonical project
+  memory.
+- Verify the integrated Marketplace client seams without modifying the dirty,
+  unowned user root worktree.
+
+## Intent And Constraints
+
+- Integration Gate and lock are mandatory; source promotion candidates and
+  server DTO authority were reviewed before reconciliation.
+- Account Library, Device Installation, project enablement, Agent assignment,
+  runtime authorization, and billing remain distinct states and actions.
+- Release A remains the only integrated Marketplace scope. Release B, hosted
+  runtime, deployment, publication, push, and PR remain out of scope.
+- Production trust remains fail closed until the official Ed25519 public key is
+  built into MakeLore; no private key or runtime trust override is added.
+- Preserve the pre-existing untracked task record in the user `main` worktree;
+  do not adopt, delete, stash, reset, or clean it implicitly.
+
+## Outcome
+
+- Fast-forwarded the integration branch from local `main`
+  `f2456039230f68e3ecb2c8653fc3379c23bbe5ce` to completed Marketplace client
+  source `40df677a31ff7651f962151eb84b925987781c03`.
+- Promoted the accepted Marketplace Main/Package Store/effective resolver,
+  runtime lifecycle, state-separation, and live evidence facts in commit
+  `30f84fe973e0deecff1448ac119421ab98941de0`.
+- Foreign task-owned records introduced by the source history were excluded
+  from the final integration tree; they remain on their source branches.
+- Canonical `main` has not yet advanced. Its user worktree contains preserved,
+  unowned untracked record
+  `.project-docs/30-worklog/tasks/20260827-plugin-ml07-spec-7c5a2e91.md`;
+  the integration task did not adopt, delete, stage, stash, reset, or clean it.
+
+## Verification
+
+- `corepack pnpm run typecheck` passed.
+- Ten Marketplace/package/effective-resolver/Pi/Renderer focused files passed
+  `108` tests with one worker.
+- `corepack pnpm run build:vite` passed for Renderer (`2261 modules`), Main
+  (`193 modules`), Preload, and utility worker.
+- `git diff --check`, `check_project_docs.py`, and `check_doc_drift.py` pass.
+- Source R7 Standards/Spec zero-finding review and XMA-01 12/12 signed-in
+  packaged evidence were reviewed and promoted; packaging and live acceptance
+  were not repeated for the byte-identical fast-forwarded product tree.
+
+## Follow-ups
+
+- Obtain explicit human adoption of the dirty, unowned client root worktree (or
+  have the originating task remove its orphan record), start a matching root
+  task context, and fast-forward `main` to this integration head while
+  preserving the record unchanged.
+- Production trust activation remains HOLD for the official Ed25519 public key;
+  Release B remains closed.
+
+## Promotion Candidates
+
+- Applied: Marketplace Main, Account cache, immutable Package Store, effective
+  resolver, and Pi lifecycle to canonical module map and data flow.
+- Applied: Library/device/project/Agent/runtime/billing separation and trust
+  boundaries to business rules.
+- Applied: final R7/XMA evidence and source commit to current state and evidence
+  index. No new ADR or product direction was introduced.