The bundle page ends with a Source section: the spec that installs the bundle elsewhere, as `pnpm add` accepts it, or Built in for an official bundle the installation ships, followed by its current version. The Host's listBundles carries the new `source` field for profile dependencies: git addresses and URLs as recorded, file:/link: paths made absolute against the profile, and registry ranges, tags, or aliases after the package name.