[yaojin3616]

Summary

• accept required packages that are installed with a manifest but intentionally expose no runtime entry point
• recognize host and ordinary dependencies resolved through package links in the installation closure
• preserve failures for genuinely missing dependencies, private host singletons, and resolutions outside all allowed roots
• add regression coverage for no-entry packages and closure directory links

Verification

• npm test -- --run test/generation-installer.test.ts (16 passed)
• npm run typecheck
• git diff --check
• full npm test: 714 passed, 33 unrelated existing patch-artifact tests failed

Fixes #293
Closes AND-400

[yaojin3616]

已对照最新 main（03df4a6）完成 review。此 PR 的目标已由 #352（f7aebb5，已包含在 v0.8.0）中的实现覆盖：支持类型包、ESM/子路径导出，并识别安装 closure 中指向应用包目录的链接，同时保留缺失依赖、私有宿主单例和越界解析检查。最新 main 的 generation-installer 测试 21/21 通过。额外将本 PR 实现替换到同一测试环境后，缺少运行入口文件的回归测试失败：仅凭 package.json 存在就放行会漏检损坏包。因此按已被现有实现替代关闭，不再解决冲突合入。对应 #293。