The design choiceautoInstallPeers: false prevents the profile from casually duplicating Host-owned runtime packages.

Three checks before one install.

01 · resolveWhere is the peer?

Profile, Host fallback, or nowhere.

02 · compareDoes the version satisfy?

A found package can still be incompatible.

03 · identifyWho owns the fix?

Host, plugin publisher, or deployment.

Route each warning independently.

Host peer + valid rangeExpected warning

Record it. Keep one shared instance.

Host peer + wrong rangeCompatibility mismatch

Choose a compatible Host/plugin tuple.

third-party + unresolvedGenuine missing peer

Follow the publisher's install contract.

ignored build scriptDifferent boundary

Review the exact build identity.

Do not silence pnpm by cloning the runtime.A nearer Cordis or DSH service package can split registration and injection identity.

One install. Twelve proofs.

  1. Range recorded.
  2. Owner resolved.
  3. Version satisfies.
  4. No runtime duplicate.
  5. Third-party contract followed.
  6. Build warning separated.
  7. Build identity reviewed.
  8. Native feature exercised.
  9. Composition inspected.
  10. Real task passes.
  11. Removal reconciles.
  12. Second boot is clean.