OPTIONAL_BUNDLES in app-boot lists the bundles the installation ships switched off; the plugin manager, the default-product isolation gate, the workspace constraints, and the packed-install check read that one list instead of a dsh.optionalBundles field in apps/cli/package.json.