# X_PACKAGE_DUPLICATED

## Means

two copies of one registry-holding framework package (`@ultimat3/i18n`, `@ultimat3/policy`, `@ultimat3/entity`) are installed in one app

## Typical cause

a workspace pinning an older range than the root (`packages/i18n` on `^19.0.0`, the root on `^19.1.0`), or two resolutions of one version. Each copy is its own module instance with its own registry, so the app registers into one and the CLI reads the other: `x i18n check` reported `X_CATALOG_UNREGISTERED` over a `defineCatalogs()` call that was exactly where its fix said to put it, and the `policy` step is green over an undeclared grant because `isKnownPermission` checks nothing while its own copy holds no declaration. Judged by realpath — a workspace symlink to one checkout is one copy

## Fix

the finding names both copies and the `package.json` to pin: set every `@ultimat3/*` to one exact version there, then `bun install`; two copies of ONE version are collapsed by `bun install --force`. `x i18n check --json` and `x verify --only policy --json` re-check

[Encrypted secrets](/error-codes#encrypted-secrets)