docs: record official plugin project scope

.project-docs/40-domain/business-rules.md

@@ -7,10 +7,11 @@
   later consume Token Points, and system-included Data Service remains zero-charge.
 - Account Library, Device Installation, project enablement, Agent assignment, runtime
   authorization, and billing are separate states. No read, install, acquisition, or
-  assignment may silently advance another state. The sole code-owned activation-scope
-  exception is `makelore.project-scaffold`: Account acquisition and project enablement
-  remain separate, but project enablement intentionally makes its Skills available to
-  every parent Agent without creating or requiring assignment state.
+  assignment may silently advance another state. The code-owned project-wide identities
+  are `makelore.data-service`, `makelore.game-resource`, and
+  `makelore.project-scaffold`: their existing delivery/acquisition and project enablement
+  remain separate, but project enablement intentionally makes their Skills/tools
+  available to every parent Agent without creating or requiring assignment state.
 - Marketplace packages become effective only after closed manifest/descriptor parsing,
   canonical archive and client-compatibility checks, Ed25519 verification, immutable
   Package Store selection, project enablement, Agent projection, and current server
@@ -21,11 +22,11 @@
   worker or delete bytes it still owns.
 - System-included Data Service ships with MakeLore and has no Library acquisition,
   Admission, download, update, or device-uninstall action. Users may still enable it
-  per project and assign its Skill to an Agent.
+  per project; project enablement makes its Skill/tools available to every parent Agent.
 - Code-owned Game Resource is the optional bundled hosted Plugin. Its exact schema-2
   manifest, Skill, and tools ship with MakeLore, so it has no device download, update,
   Beta, signature, or device-uninstall state. Account Library acquisition/removal,
-  project enablement, Agent assignment, current server policy, immutable Admission,
+  project enablement, current server policy, immutable Admission,
   explicit confirmation, and Token Point billing remain distinct.
 - Production Marketplace trust fails closed while the official Ed25519 public key is
   absent. Test-only/integration keys and packaged unknown-key rejection are evidence,
@@ -33,8 +34,10 @@
   implemented, but production package trust and real Provider activation remain closed
   until the official key and separate server pricing, credential, Admission, and
   acceptance gates are ready.
-- A `platform_hosted` Skill or tool may enter only an installed, enabled, assigned,
-  trusted, compatible, policy-admitted parent Pi logical thread. Unknown, disabled, or
+- A `platform_hosted` Skill or tool may enter only a delivered/installed, enabled,
+  trusted, compatible, policy-admitted parent Pi logical thread. Agent assignment is an
+  additional gate only for Plugin identities whose activation scope requires it; the
+  three code-owned project-wide identities bypass that gate. Unknown, disabled, or
   ineligible assignments stay inert; child workers receive no hosted Plugin projection.
 - A metered hosted mutation requires explicit client confirmation before resolve,
   Admission, or charging. Works Square owns price, payer, Token Point policy, and receipt
@@ -67,10 +70,12 @@
   Store, Release, Channel, Admission, project enablement, Agent assignment, or server
   billing state.
 - Code-owned official bundled Plugins may be `platform_hosted` or `skill_only`.
-  `makelore.project-scaffold` retains Account Library, project enablement, Release, and
-  Admission state while its exact Skill/templates/`.mjs` ship only in the signed client.
-  It is project-wide: once acquired and enabled for a project, every parent Agent receives
-  the Skill without partner assignment; child Agents remain empty. Downloadable
+  Data Service is system-included; Game Resource and `makelore.project-scaffold` retain
+  Account Library, project enablement, Release, and Admission state where applicable,
+  while their exact resources ship only in the signed client. All three are project-wide:
+  once their delivery/acquisition condition is satisfied and they are enabled for a
+  project, every parent Agent receives the full resource set without partner assignment;
+  child Agents remain empty. Downloadable
   Marketplace artifacts remain P0
   text/image-only and must reject `.mjs`; official bundled authority is not inferred
   from provider metadata or an uploaded ZIP.
@@ -159,4 +164,4 @@
 
 ## Last Reviewed
 
-2026-09-04
+2026-09-05

.project-docs/40-domain/glossary.md

@@ -4,6 +4,7 @@
 |---|---|---|
 | `ProjectType` | 创建项目时选择且之后不可变的产品类型 | 规范值为 `interactive_ai_app`、`custom`；历史 `mini_game` / `mini_program` 读取时归一为前者，缺少字段按 `custom` 处理 |
 | `BuildPreset` | 平台内部用于构建和验收项目包的受控实现 | 不等于 `ProjectType` 或 Scaffold 状态；交互式 AI 应用使用固定 Vite preset |
+| Official Project Plugin | 由 MakeLore 代码所有、以项目启用作为生效范围的官方 Plugin | 当前闭合集合为 `makelore.data-service`、`makelore.game-resource`、`makelore.project-scaffold`；满足既有交付/获取条件并启用项目后自动进入每个 parent Agent，不使用伙伴分配，child 为空 |
 | Project Scaffold Skill | 官方 bundled Marketplace Plugin `makelore.project-scaffold` 中由用户明确调用、独立版本化的起步文件生成与发布准备度指导 | `.mjs` 只来自固定客户端资源；不覆盖路径、不安装/构建/上传/提审；项目创建服务和 Main/Works 发布权威不属于该 Skill |
 | Main-owned Release Build | Electron Main 对安全源码快照执行固定 npm 与项目 lockfile Vite 的本地构建 | Vite config/plugins 以桌面用户权限执行，不是 sandbox；Renderer 不获得路径、归档或 origin |
 | Artifact Contract | 与 source/built 双归档一并上传的严格版本化清单 | 服务端把三者视为不可信输入并独立逐字节重算、校验 |