@danypops/pi-packed 0.28.4 → 0.28.6

package/README.md

@@ -8,6 +8,12 @@ pi install npm:@danypops/pi-packed
 
 The extension connects to Packed's authenticated user daemon and starts the package-local `packed serve` process when no healthy daemon is available. It contains no SQLite, registry, package execution, or daemon implementation code.
 
+## Isolated daemon services
+
+Packed materializes every managed daemon into a private, versioned npm project under its state directory (`services/<package>/<version>/`). Each root has its own `package.json`, lockfile, and `node_modules`; Pi's shared global project, root-level `overrides`, hoisting, and unrelated package updates therefore cannot rewrite a daemon's dependency closure. Downloads still use npm's shared cache.
+
+A complete root is activated only after installation and manifest validation, using an atomic directory rename. Armada switches the persistent service to that root, and Packed retains the previous root for rollback while pruning older versions within a fixed bound. Removing the service removes its private roots. Pi extensions remain installed in Pi's own package project; only their daemon processes run from the isolated closure.
+
 ## Commands
 
 - `/packed` -- one floating overlay, four tabs (Packages/Find/Config/Settings), always shown in a persistent tab bar at the top: the focused tab reverses the theme's text color for high contrast in both dark and light modes, unfocused tabs show only a foreground color with their own first letter highlighted as a jump mnemonic (the focused tab needs no mnemonic -- there's nothing to jump to when you're already there). `Tab`/`Shift-Tab` (or `←`/`→`) sweep between them -- recognized under legacy CSI, xterm's modifyOtherKeys, and the Kitty keyboard protocol alike, not just one hardcoded encoding; from any tab other than Packages, `p`/`f`/`c`/`s` also jump straight to the matching one (never stolen while that tab's own filter/query box is capturing text). `Esc` returns to Packages from anywhere else, or closes the panel from Packages itself. Every approval and reload confirmation, on any tab, renders inline on this same panel (`y`/`n` keys), never a separate popup or native dialog. A standing test (`keymap.test.ts`, using Malevich's tree-style `findMnemonicConflicts`) verifies no two actions genuinely reachable at once share a key.

package/dist/daemon/daemon-service.d.ts

@@ -1,6 +1,7 @@
 import { type VehicleRegistrar, type VehicleRegistrationOutcome, type VehicleSpec } from "@danypops/armada";
 import { type ServiceInstallResult, type ServiceSpec } from "@danypops/vehicle-server/service";
 import type { InstalledPkg } from "../packages/package.ts";
+import { type DaemonPackageMaterializer } from "./isolated-service-install.ts";
 export interface DaemonServiceManifest {
     /** Relative to the installed package's own root directory. */
     binPath: string;
@@ -234,6 +235,8 @@ export interface DaemonServiceInstaller {
      * whatever used to produce it.
      */
     unregisterVehicleByName(name: string): Promise<VehicleRegistrationOutcome>;
+    /** True when an executable lives in this installer's private managed-service roots. */
+    ownsExecutable?(path: string): boolean;
 }
 /**
  * Calls Armada's own VehicleRegistrar directly (in-process), rather than
@@ -245,9 +248,11 @@ export interface DaemonServiceInstaller {
 export declare class RealDaemonServiceInstaller implements DaemonServiceInstaller {
     private readonly registrar;
     private readonly selfRestart;
-    constructor(registrar?: VehicleRegistrar, selfRestart?: SelfRestartScheduler);
+    private readonly materializer;
+    constructor(registrar?: VehicleRegistrar, selfRestart?: SelfRestartScheduler, materializer?: DaemonPackageMaterializer);
     listRegisteredVehicles(): Promise<readonly VehicleSpec[]>;
     unregisterVehicleByName(name: string): Promise<VehicleRegistrationOutcome>;
+    ownsExecutable(path: string): boolean;
     install(piHome: string, source: string): Promise<{
         ok: true;
         result: ServiceInstallResult;

package/dist/daemon/daemon-service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"daemon-service.d.ts","sourceRoot":"","sources":["../../service/src/daemon/daemon-service.ts"],"names":[],"mappings":"AA+BA,OAAO,EAA0B,KAAK,gBAAgB,EAAE,KAAK,0BAA0B,EAAE,KAAK,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEpI,OAAO,EAGN,KAAK,oBAAoB,EACzB,KAAK,WAAW,EAEhB,MAAM,kCAAkC,CAAC;AAE1C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAG3D,MAAM,WAAW,qBAAqB;IACrC,8DAA8D;IAC9D,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,8DAA8D;IAC9D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0EAA0E;IAC1E,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,0BAA0B,GACnC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,WAAW,CAAA;CAAE;AACjC,qbAAqb;GACnb;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAOvD,uKAAuK;AACvK,UAAU,wBAAwB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CAChB;AAqHD,wBAAgB,0BAA0B,CACzC,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,EACpB,qBAAqB,CAAC,EAAE,MAAM,GAC5B,wBAAwB,GAAG,SAAS,CA2BtC;AAoCD;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,0BAA0B,CAkCnG;AAED,MAAM,WAAW,mBAAmB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB;iGAC6F;IAC7F,WAAW,EAAE,MAAM,CAAC;CACpB;AAiCD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,kCAAkC,CAAC,MAAM,EAAE,MAAM,GAAG,mBAAmB,EAAE,CAexF;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAElF;AAED,MAAM,MAAM,gBAAgB,GAAG,WAAW,GAAG,mBAAmB,CAAC;AAEjE;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAMjG;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,YAAY,EAAE,CAYxF;AAED,MAAM,WAAW,kBAAkB;IAClC;;;;;wGAKoG;IACpG,UAAU,EAAE,KAAK,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,OAAO,CAAC;QAAC,cAAc,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9H,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,KAAK,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACvD,6GAA6G;IAC7G,MAAM,EAAE,KAAK,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3D,WAAW,EAAE,KAAK,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC5D;AAKD;;;wFAGwF;AACxF,eAAO,MAAM,mBAAmB,cAAc,CAAC;AAO/C;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ,EACzB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACd;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAQrE;AAED;;;;0CAI0C;AAC1C,MAAM,MAAM,oBAAoB,GAAG,CAAC,IAAI,EAAE,WAAW,KAAK,IAAI,CAAC;AAE/D,eAAO,MAAM,mBAAmB,EAAE,oBAiBjC,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,0BAA0B,CAC/C,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,GAAG,SAAS,EAC/B,SAAS,EAAE,IAAI,CAAC,sBAAsB,EAAE,SAAS,GAAG,wBAAwB,GAAG,yBAAyB,CAAC,GACvG,OAAO,CAAC,kBAAkB,CAAC,CA4C7B;AA8BD,MAAM,WAAW,sBAAsB;IACtC,OAAO,CACN,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,GACZ,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,MAAM,EAAE,oBAAoB,CAAC;QAAC,IAAI,EAAE,WAAW,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAChI,MAAM,CACL,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,GACZ,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,MAAM,EAAE,oBAAoB,CAAC;QAAC,IAAI,EAAE,WAAW,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAChI,OAAO,CACN,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,GACZ,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,SAAS,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,WAAW,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACvI,8GAA8G;IAC9G,sBAAsB,IAAI,OAAO,CAAC,SAAS,WAAW,EAAE,CAAC,CAAC;IAC1D;;;;;OAKG;IACH,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAC;CAC3E;AAED;;;;;;GAMG;AACH,qBAAa,0BAA2B,YAAW,sBAAsB;IAEvE,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,WAAW;gBADX,SAAS,GAAE,gBAA2C,EACtD,WAAW,GAAE,oBAA0C;IAGnE,sBAAsB,IAAI,OAAO,CAAC,SAAS,WAAW,EAAE,CAAC;IAIzD,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,CAAC;IAI1E,OAAO,CACZ,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,GACZ,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,MAAM,EAAE,oBAAoB,CAAC;QAAC,IAAI,EAAE,WAAW,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAUzH,MAAM,CACX,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,GACZ,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,MAAM,EAAE,oBAAoB,CAAC;QAAC,IAAI,EAAE,WAAW,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAUzH,OAAO,CACZ,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,GACZ,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,SAAS,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,WAAW,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;CAkBtI"}
+{"version":3,"file":"daemon-service.d.ts","sourceRoot":"","sources":["../../service/src/daemon/daemon-service.ts"],"names":[],"mappings":"AA+BA,OAAO,EAA0B,KAAK,gBAAgB,EAAE,KAAK,0BAA0B,EAAE,KAAK,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEpI,OAAO,EAGN,KAAK,oBAAoB,EACzB,KAAK,WAAW,EAEhB,MAAM,kCAAkC,CAAC;AAE1C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAE3D,OAAO,EACN,KAAK,yBAAyB,EAE9B,MAAM,+BAA+B,CAAC;AAEvC,MAAM,WAAW,qBAAqB;IACrC,8DAA8D;IAC9D,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,8DAA8D;IAC9D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0EAA0E;IAC1E,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,0BAA0B,GACnC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,WAAW,CAAA;CAAE;AACjC,qbAAqb;GACnb;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAOvD,uKAAuK;AACvK,UAAU,wBAAwB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CAChB;AAqHD,wBAAgB,0BAA0B,CACzC,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,EACpB,qBAAqB,CAAC,EAAE,MAAM,GAC5B,wBAAwB,GAAG,SAAS,CA2BtC;AAoCD;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,0BAA0B,CAkCnG;AAED,MAAM,WAAW,mBAAmB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB;iGAC6F;IAC7F,WAAW,EAAE,MAAM,CAAC;CACpB;AAiCD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,kCAAkC,CAAC,MAAM,EAAE,MAAM,GAAG,mBAAmB,EAAE,CAexF;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAElF;AAED,MAAM,MAAM,gBAAgB,GAAG,WAAW,GAAG,mBAAmB,CAAC;AAEjE;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAMjG;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,YAAY,EAAE,CAYxF;AAED,MAAM,WAAW,kBAAkB;IAClC;;;;;wGAKoG;IACpG,UAAU,EAAE,KAAK,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,OAAO,CAAC;QAAC,cAAc,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9H,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,KAAK,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACvD,6GAA6G;IAC7G,MAAM,EAAE,KAAK,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3D,WAAW,EAAE,KAAK,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC5D;AAKD;;;wFAGwF;AACxF,eAAO,MAAM,mBAAmB,cAAc,CAAC;AAO/C;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ,EACzB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACd;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAQrE;AAED;;;;0CAI0C;AAC1C,MAAM,MAAM,oBAAoB,GAAG,CAAC,IAAI,EAAE,WAAW,KAAK,IAAI,CAAC;AAE/D,eAAO,MAAM,mBAAmB,EAAE,oBAiBjC,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,0BAA0B,CAC/C,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,GAAG,SAAS,EAC/B,SAAS,EAAE,IAAI,CAAC,sBAAsB,EAAE,SAAS,GAAG,wBAAwB,GAAG,yBAAyB,CAAC,GACvG,OAAO,CAAC,kBAAkB,CAAC,CA4C7B;AA8BD,MAAM,WAAW,sBAAsB;IACtC,OAAO,CACN,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,GACZ,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,MAAM,EAAE,oBAAoB,CAAC;QAAC,IAAI,EAAE,WAAW,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAChI,MAAM,CACL,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,GACZ,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,MAAM,EAAE,oBAAoB,CAAC;QAAC,IAAI,EAAE,WAAW,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAChI,OAAO,CACN,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,GACZ,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,SAAS,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,WAAW,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACvI,8GAA8G;IAC9G,sBAAsB,IAAI,OAAO,CAAC,SAAS,WAAW,EAAE,CAAC,CAAC;IAC1D;;;;;OAKG;IACH,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAC3E,uFAAuF;IACvF,cAAc,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;CACvC;AAED;;;;;;GAMG;AACH,qBAAa,0BAA2B,YAAW,sBAAsB;IAEvE,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,YAAY;gBAFZ,SAAS,GAAE,gBAA2C,EACtD,WAAW,GAAE,oBAA0C,EACvD,YAAY,GAAE,yBAAsE;IAGhG,sBAAsB,IAAI,OAAO,CAAC,SAAS,WAAW,EAAE,CAAC;IAIzD,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,CAAC;IAIhF,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAI/B,OAAO,CACZ,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,GACZ,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,MAAM,EAAE,oBAAoB,CAAC;QAAC,IAAI,EAAE,WAAW,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAuBzH,MAAM,CACX,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,GACZ,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,MAAM,EAAE,oBAAoB,CAAC;QAAC,IAAI,EAAE,WAAW,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAWzH,OAAO,CACZ,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,GACZ,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,SAAS,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,WAAW,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;CA+BtI"}

package/dist/daemon/isolated-service-install.d.ts

@@ -0,0 +1,33 @@
+export interface MaterializedDaemonPackage {
+    readonly piHome: string;
+    readonly source: string;
+    commit(): void;
+    rollback(): void;
+}
+export interface DaemonPackageMaterializer {
+    materialize(piHome: string, source: string): Promise<MaterializedDaemonPackage>;
+    remove(source: string): void;
+    ownsExecutable(path: string): boolean;
+}
+export declare class PassThroughDaemonPackageMaterializer implements DaemonPackageMaterializer {
+    materialize(piHome: string, source: string): Promise<MaterializedDaemonPackage>;
+    remove(_source: string): void;
+    ownsExecutable(_path: string): boolean;
+}
+/**
+ * Installs a daemon source into a private, versioned npm project. The project deliberately has
+ * no `overrides` field, so a host-level Pi/Bun override cannot rewrite the daemon's transitive
+ * dependency closure. npm's cache remains shared; only resolution metadata and node_modules are
+ * private. A completed directory is published with one atomic rename and retained alongside one
+ * prior version for rollback.
+ */
+export declare class IsolatedDaemonPackageMaterializer implements DaemonPackageMaterializer {
+    private readonly stateDirectory;
+    private readonly npmBin;
+    constructor(stateDirectory: string, npmBin?: string);
+    materialize(piHome: string, source: string): Promise<MaterializedDaemonPackage>;
+    remove(source: string): void;
+    ownsExecutable(path: string): boolean;
+    private prune;
+}
+//# sourceMappingURL=isolated-service-install.d.ts.map

package/dist/daemon/isolated-service-install.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"isolated-service-install.d.ts","sourceRoot":"","sources":["../../service/src/daemon/isolated-service-install.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,yBAAyB;IACzC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,MAAM,IAAI,IAAI,CAAC;IACf,QAAQ,IAAI,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,yBAAyB;IACzC,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAChF,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;CACtC;AA4CD,qBAAa,oCAAqC,YAAW,yBAAyB;IAC/E,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAIrF,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAE7B,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;CAGtC;AAED;;;;;;GAMG;AACH,qBAAa,iCAAkC,YAAW,yBAAyB;IAEjF,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,cAAc,EAAE,MAAM,EACtB,MAAM,SAAgE;IAGlF,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAC;IA+ErF,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAM5B,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAIrC,OAAO,CAAC,KAAK;CAiBb"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@danypops/pi-packed",
-  "version": "0.28.4",
+  "version": "0.28.6",
   "description": "Pi package lifecycle, validation, daemon, tools, profiles, and TUI",
   "type": "module",
   "bin": {
@@ -30,9 +30,9 @@
     "@danypops/armada": "^0.5.0",
     "@danypops/packed": "^0.7.0",
     "@danypops/pi-extension-harness": "^0.7.0",
-    "@danypops/vehicle-client": "^0.10.3",
-    "@danypops/vehicle-core": "^0.17.1",
-    "@danypops/vehicle-server": "^0.25.2",
+    "@danypops/vehicle-client": "^0.10.5",
+    "@danypops/vehicle-core": "^0.18.4",
+    "@danypops/vehicle-server": "^0.26.0",
     "jiti": "^2.7.0",
     "malevich-tui-components": "^0.32.1",
     "publint": "0.3.22",
@@ -40,13 +40,13 @@
   },
   "devDependencies": {
     "@danypops/pi-tui-harness": "^0.0.1",
-    "@danypops/vehicle-client-pi": "^0.44.0",
+    "@danypops/vehicle-client-pi": "^0.45.0",
     "@danypops/vehicle-conformance": "^0.4.0",
     "@types/semver": "^7.7.1",
     "follow-redirects": "^1.16.0"
   },
   "peerDependencies": {
-    "@danypops/vehicle-client-pi": "^0.44.0",
+    "@danypops/vehicle-client-pi": "^0.45.0",
     "@earendil-works/pi-coding-agent": "*",
     "@earendil-works/pi-tui": "*",
     "typebox": "*"

package/service/src/daemon/daemon-service.ts

@@ -41,6 +41,10 @@ import {
 import { npmPackageName, readInstalledPackagesAcrossScopes, readPackageDeclarations } from "../packages/installed.ts";
 import type { InstalledPkg } from "../packages/package.ts";
 import { versionAtLeast } from "../publish/publish.ts";
+import {
+	type DaemonPackageMaterializer,
+	PassThroughDaemonPackageMaterializer,
+} from "./isolated-service-install.ts";
 
 export interface DaemonServiceManifest {
 	/** Relative to the installed package's own root directory. */
@@ -612,7 +616,7 @@ export async function reconcileAllDaemonServices(
 async function pruneStaleVehicles(
 	piHome: string,
 	discovered: ReadonlySet<string>,
-	installer: Pick<DaemonServiceInstaller, "listRegisteredVehicles" | "unregisterVehicleByName">,
+	installer: Pick<DaemonServiceInstaller, "listRegisteredVehicles" | "unregisterVehicleByName" | "ownsExecutable">,
 ): Promise<Pick<ReconcileAllResult, "pruned" | "pruneFailed">> {
 	const managedRoot = join(piHome, "npm", "node_modules") + "/";
 	const pruned: ReconcileAllResult["pruned"] = [];
@@ -621,7 +625,7 @@ async function pruneStaleVehicles(
 	for (const vehicle of registered) {
 		if (vehicle.name === PACKED_VEHICLE_NAME) continue;
 		if (discovered.has(vehicle.name)) continue;
-		if (!vehicle.executable.startsWith(managedRoot)) continue;
+		if (!vehicle.executable.startsWith(managedRoot) && !installer.ownsExecutable?.(vehicle.executable)) continue;
 		const outcome = await installer.unregisterVehicleByName(vehicle.name);
 		if (outcome.ok) pruned.push({ vehicleName: vehicle.name, executable: vehicle.executable });
 		else pruneFailed.push({ vehicleName: vehicle.name, reason: outcome.diagnostics.map((d) => d.message).join("; ") || "unregister failed" });
@@ -651,6 +655,8 @@ export interface DaemonServiceInstaller {
 	 * whatever used to produce it.
 	 */
 	unregisterVehicleByName(name: string): Promise<VehicleRegistrationOutcome>;
+	/** True when an executable lives in this installer's private managed-service roots. */
+	ownsExecutable?(path: string): boolean;
 }
 
 /**
@@ -664,6 +670,7 @@ export class RealDaemonServiceInstaller implements DaemonServiceInstaller {
 	constructor(
 		private readonly registrar: VehicleRegistrar = createVehicleRegistrar(),
 		private readonly selfRestart: SelfRestartScheduler = scheduleSelfRestart,
+		private readonly materializer: DaemonPackageMaterializer = new PassThroughDaemonPackageMaterializer(),
 	) {}
 
 	async listRegisteredVehicles(): Promise<readonly VehicleSpec[]> {
@@ -674,16 +681,33 @@ export class RealDaemonServiceInstaller implements DaemonServiceInstaller {
 		return this.registrar.unregister(name);
 	}
 
+	ownsExecutable(path: string): boolean {
+		return this.materializer.ownsExecutable(path);
+	}
+
 	async install(
 		piHome: string,
 		source: string,
 	): Promise<{ ok: true; result: ServiceInstallResult; spec: ServiceSpec } | { ok: false; reason: string; notADaemon?: boolean }> {
-		const resolved = resolveDaemonServiceSpec(piHome, source);
-		if (!resolved.ok) return resolved;
-		if (resolved.spec.name === PACKED_VEHICLE_NAME) {
-			return { ok: true, result: { installed: false, reason: SELF_REGISTRATION_REASON }, spec: resolved.spec };
+		const discovered = resolveDaemonServiceSpec(piHome, source);
+		if (!discovered.ok) return discovered;
+		if (discovered.spec.name === PACKED_VEHICLE_NAME) {
+			return { ok: true, result: { installed: false, reason: SELF_REGISTRATION_REASON }, spec: discovered.spec };
+		}
+		let materialized;
+		try {
+			materialized = await this.materializer.materialize(piHome, source);
+		} catch (error) {
+			return { ok: false, reason: error instanceof Error ? error.message : String(error) };
+		}
+		const resolved = resolveDaemonServiceSpec(materialized.piHome, materialized.source);
+		if (!resolved.ok) {
+			materialized.rollback();
+			return resolved;
 		}
 		const result = await registerVehicleService(resolved.spec, this.registrar);
+		if (result.installed) materialized.commit();
+		else materialized.rollback();
 		return { ok: true, result, spec: resolved.spec };
 	}
 
@@ -697,6 +721,7 @@ export class RealDaemonServiceInstaller implements DaemonServiceInstaller {
 			return { ok: true, result: { installed: false, reason: SELF_REGISTRATION_REASON }, spec: resolved.spec };
 		}
 		const result = await unregisterVehicleService(resolved.spec.name, this.registrar);
+		if (result.installed) this.materializer.remove(source);
 		return { ok: true, result, spec: resolved.spec };
 	}
 
@@ -713,12 +738,25 @@ export class RealDaemonServiceInstaller implements DaemonServiceInstaller {
 		if (!(await isVehicleServiceRegistered(resolved.spec.name, this.registrar))) {
 			return { ok: true, restarted: false, reason: `no persistent service is registered for ${resolved.spec.name}`, spec: resolved.spec };
 		}
-		const result = await registerVehicleService(resolved.spec, this.registrar);
+		let materialized;
+		try {
+			materialized = await this.materializer.materialize(piHome, source);
+		} catch (error) {
+			return { ok: false, reason: error instanceof Error ? error.message : String(error) };
+		}
+		const isolated = resolveDaemonServiceSpec(materialized.piHome, materialized.source);
+		if (!isolated.ok) {
+			materialized.rollback();
+			return isolated;
+		}
+		const result = await registerVehicleService(isolated.spec, this.registrar);
+		if (result.installed) materialized.commit();
+		else materialized.rollback();
 		return {
 			ok: true,
 			restarted: result.installed,
 			...(result.installed ? {} : { reason: result.reason }),
-			spec: resolved.spec,
+			spec: isolated.spec,
 		};
 	}
 }

package/service/src/daemon/daemon.ts

@@ -36,6 +36,7 @@ import { createLogger } from "../shared/log.ts";
 import { legacyPackedStateDirectory, migrateLegacyPackedState, type PackedPaths, resolvePackedPaths } from "../shared/paths.ts";
 import { envMs } from "../shared/state.ts";
 import { createApp } from "./service.ts";
+import { IsolatedDaemonPackageMaterializer } from "./isolated-service-install.ts";
 import { checkUpdates, saveUpdates } from "./watcher.ts";
 
 const logger = createLogger("daemon");
@@ -89,7 +90,9 @@ export function daemonOptions(options: StartPackedDaemonOptions): StartDaemonOpt
 	// already uses via checkUpdates() -- one mirror, two consumers, never two
 	// notions of "the real latest version".
 	const inst = options.inst ?? new ExecInstaller(undefined, piHome, undefined, undefined, undefined, (name) => latestVersion(database, name));
-	const daemonServiceInstaller = options.daemonServiceInstaller ?? new RealDaemonServiceInstaller();
+	const daemonServiceInstaller =
+		options.daemonServiceInstaller ??
+		new RealDaemonServiceInstaller(undefined, undefined, new IsolatedDaemonPackageMaterializer(paths.stateDirectory));
 	const configuredMaintenanceTasks = options.maintenanceTasks ?? [
 		{
 			name: "package-update-check",

package/service/src/daemon/isolated-service-install.ts

@@ -0,0 +1,196 @@
+import { existsSync, mkdirSync, readFileSync, readdirSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
+import { join, sep } from "node:path";
+import { npmPackageName } from "../packages/installed.ts";
+
+const MAX_VERSION_DIRECTORIES = 20;
+const RETAINED_VERSION_DIRECTORIES = 2;
+const MAX_INSTALL_OUTPUT_BYTES = 64 * 1024;
+const VERSION_DIRECTORY_RE = /^[0-9A-Za-z][0-9A-Za-z.+_-]{0,127}$/;
+
+export interface MaterializedDaemonPackage {
+	readonly piHome: string;
+	readonly source: string;
+	commit(): void;
+	rollback(): void;
+}
+
+export interface DaemonPackageMaterializer {
+	materialize(piHome: string, source: string): Promise<MaterializedDaemonPackage>;
+	remove(source: string): void;
+	ownsExecutable(path: string): boolean;
+}
+
+function readVersion(packageJsonPath: string): string | undefined {
+	try {
+		const parsed = JSON.parse(readFileSync(packageJsonPath, "utf8")) as { version?: unknown };
+		return typeof parsed.version === "string" && parsed.version.length > 0 ? parsed.version : undefined;
+	} catch {
+		return undefined;
+	}
+}
+
+async function readBounded(stream: ReadableStream<Uint8Array>): Promise<string> {
+	const reader = stream.getReader();
+	const decoder = new TextDecoder();
+	let output = "";
+	let retainedBytes = 0;
+	for (;;) {
+		const { done, value } = await reader.read();
+		if (done) break;
+		if (retainedBytes >= MAX_INSTALL_OUTPUT_BYTES) continue;
+		const remaining = MAX_INSTALL_OUTPUT_BYTES - retainedBytes;
+		const retained = value.byteLength <= remaining ? value : value.slice(0, remaining);
+		output += decoder.decode(retained, { stream: true });
+		retainedBytes += retained.byteLength;
+	}
+	return output + decoder.decode();
+}
+
+function packageDirectory(piHome: string, packageName: string): string {
+	return join(piHome, "npm", "node_modules", packageName);
+}
+
+function installKey(packageName: string): string {
+	return encodeURIComponent(packageName).replaceAll("%", "_");
+}
+
+function isolatedPiHome(versionDirectory: string): string {
+	return join(versionDirectory, "pi-home");
+}
+
+function resolvedPackageJson(piHome: string, packageName: string): string {
+	return join(packageDirectory(piHome, packageName), "package.json");
+}
+
+export class PassThroughDaemonPackageMaterializer implements DaemonPackageMaterializer {
+	async materialize(piHome: string, source: string): Promise<MaterializedDaemonPackage> {
+		return { piHome, source, commit() {}, rollback() {} };
+	}
+
+	remove(_source: string): void {}
+
+	ownsExecutable(_path: string): boolean {
+		return false;
+	}
+}
+
+/**
+ * Installs a daemon source into a private, versioned npm project. The project deliberately has
+ * no `overrides` field, so a host-level Pi/Bun override cannot rewrite the daemon's transitive
+ * dependency closure. npm's cache remains shared; only resolution metadata and node_modules are
+ * private. A completed directory is published with one atomic rename and retained alongside one
+ * prior version for rollback.
+ */
+export class IsolatedDaemonPackageMaterializer implements DaemonPackageMaterializer {
+	constructor(
+		private readonly stateDirectory: string,
+		private readonly npmBin = process.env.PI_PACKED_NPM_BIN ?? process.env.NPM_BIN ?? "npm",
+	) {}
+
+	async materialize(piHome: string, source: string): Promise<MaterializedDaemonPackage> {
+		const packageName = npmPackageName(source);
+		if (!packageName) throw new Error(`isolated daemon installation only supports npm sources: ${source}`);
+		const version = readVersion(resolvedPackageJson(piHome, packageName));
+		if (!version) throw new Error(`cannot isolate ${packageName}: installed package version is unreadable`);
+		if (!VERSION_DIRECTORY_RE.test(version)) throw new Error(`cannot isolate ${packageName}: installed package version is unsafe`);
+
+		const packageRoot = join(this.stateDirectory, "services", installKey(packageName));
+		const finalDirectory = join(packageRoot, version);
+		const finalPiHome = isolatedPiHome(finalDirectory);
+		const finalPackageJson = resolvedPackageJson(finalPiHome, packageName);
+		if (readVersion(finalPackageJson) === version) {
+			return {
+				piHome: finalPiHome,
+				source: `npm:${packageName}@${version}`,
+				commit: () => this.prune(packageRoot, finalDirectory),
+				rollback() {},
+			};
+		}
+
+		mkdirSync(packageRoot, { recursive: true, mode: 0o700 });
+		if (existsSync(finalDirectory)) rmSync(finalDirectory, { recursive: true, force: true });
+		const temporaryDirectory = join(packageRoot, `.${version}.${process.pid}.${crypto.randomUUID()}.tmp`);
+		const temporaryPiHome = isolatedPiHome(temporaryDirectory);
+		const projectDirectory = join(temporaryPiHome, "npm");
+		mkdirSync(projectDirectory, { recursive: true, mode: 0o700 });
+		writeFileSync(
+			join(projectDirectory, "package.json"),
+			JSON.stringify({ name: `packed-service-${installKey(packageName)}`, private: true, dependencies: { [packageName]: version } }, null, 2),
+		);
+
+		let publishedByThisCall = false;
+		try {
+			const proc = Bun.spawn(
+				[
+					this.npmBin,
+					"install",
+					"--ignore-scripts",
+					"--no-audit",
+					"--no-fund",
+					"--install-strategy=nested",
+					"--loglevel=error",
+				],
+				{ cwd: projectDirectory, stdout: "pipe", stderr: "pipe", env: process.env },
+			);
+			const [stdout, stderr, code] = await Promise.all([readBounded(proc.stdout), readBounded(proc.stderr), proc.exited]);
+			if (code !== 0) {
+				const output = [stdout.trim(), stderr.trim()].filter(Boolean).join("\n");
+				throw new Error(`isolated npm install failed for ${packageName}@${version} (exit ${code}): ${output || "no output"}`);
+			}
+			if (readVersion(resolvedPackageJson(temporaryPiHome, packageName)) !== version) {
+				throw new Error(`isolated npm install did not resolve ${packageName}@${version}`);
+			}
+			try {
+				renameSync(temporaryDirectory, finalDirectory);
+				publishedByThisCall = true;
+			} catch (error) {
+				if (readVersion(finalPackageJson) !== version) throw error;
+				rmSync(temporaryDirectory, { recursive: true, force: true });
+			}
+		} catch (error) {
+			rmSync(temporaryDirectory, { recursive: true, force: true });
+			throw error;
+		}
+
+		let committed = false;
+		return {
+			piHome: finalPiHome,
+			source: `npm:${packageName}@${version}`,
+			commit: () => {
+				committed = true;
+				this.prune(packageRoot, finalDirectory);
+			},
+			rollback: () => {
+				if (!committed && publishedByThisCall) rmSync(finalDirectory, { recursive: true, force: true });
+			},
+		};
+	}
+
+	remove(source: string): void {
+		const packageName = npmPackageName(source);
+		if (!packageName) return;
+		rmSync(join(this.stateDirectory, "services", installKey(packageName)), { recursive: true, force: true });
+	}
+
+	ownsExecutable(path: string): boolean {
+		return path.startsWith(join(this.stateDirectory, "services") + sep);
+	}
+
+	private prune(packageRoot: string, activeDirectory: string): void {
+		let directories: string[];
+		try {
+			directories = readdirSync(packageRoot)
+				.filter((name) => !name.startsWith("."))
+				.slice(0, MAX_VERSION_DIRECTORIES)
+				.map((name) => join(packageRoot, name))
+				.filter((path) => statSync(path).isDirectory());
+		} catch {
+			return;
+		}
+		directories.sort((left, right) => statSync(right).mtimeMs - statSync(left).mtimeMs);
+		const retained = new Set([activeDirectory, ...directories.slice(0, RETAINED_VERSION_DIRECTORIES)]);
+		for (const directory of directories) {
+			if (!retained.has(directory)) rmSync(directory, { recursive: true, force: true });
+		}
+	}
+}

package/service/test/daemon-service.test.ts

@@ -4,6 +4,7 @@ import { tmpdir } from "node:os";
 import { join } from "node:path";
 import type { VehicleRegistrar } from "@danypops/armada";
 import { createArmadaTestHarness } from "@danypops/armada/testing";
+import type { DaemonPackageMaterializer } from "../src/daemon/isolated-service-install.ts";
 import {
 	classifyUpdateSource,
 	detectVehicleDaemonService,
@@ -490,6 +491,38 @@ describe("RealDaemonServiceInstaller -- Armada registration through the in-proce
 		}
 	});
 
+	it("install() registers the isolated executable and commits that root only after Armada accepts it", async () => {
+		const piHome = fakePiHome();
+		const isolatedPiHome = fakePiHome();
+		writePackage(piHome, "@danypops/lector", { binPath: "src/cli.ts", args: ["serve"] });
+		writePackage(isolatedPiHome, "@danypops/lector", { binPath: "src/cli.ts", args: ["serve"] });
+		let committed = 0;
+		let rolledBack = 0;
+		const materializer: DaemonPackageMaterializer = {
+			materialize: async () => ({
+				piHome: isolatedPiHome,
+				source: "npm:@danypops/lector@1.0.0",
+				commit: () => committed++,
+				rollback: () => rolledBack++,
+			}),
+			remove() {},
+			ownsExecutable: (path) => path.startsWith(isolatedPiHome),
+		};
+		const harness = await createArmadaTestHarness();
+		try {
+			const installer = new RealDaemonServiceInstaller(harness.registrar, undefined, materializer);
+			const outcome = await installer.install(piHome, "npm:@danypops/lector");
+
+			expect(outcome.ok).toBe(true);
+			if (!outcome.ok) throw new Error("expected ok");
+			expect(outcome.spec.binPath).toBe(join(isolatedPiHome, "npm", "node_modules", "@danypops/lector", "src/cli.ts"));
+			expect(committed).toBe(1);
+			expect(rolledBack).toBe(0);
+		} finally {
+			await harness.dispose();
+		}
+	});
+
 	it("install() never asks Armada to replace Packed from inside Packed's own process", async () => {
 		const piHome = fakePiHome();
 		writePackage(piHome, "@danypops/pi-packed", { binPath: "service/src/cli/cli.ts", args: ["serve"] });

package/service/test/isolated-service-install.test.ts

@@ -0,0 +1,148 @@
+import { afterEach, describe, expect, it } from "bun:test";
+import { chmodSync, existsSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, rmSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { IsolatedDaemonPackageMaterializer } from "../src/daemon/isolated-service-install.ts";
+
+const roots: string[] = [];
+afterEach(() => {
+	for (const root of roots.splice(0)) rmSync(root, { recursive: true, force: true });
+});
+
+function temporaryRoot(): string {
+	const root = mkdtempSync(join(tmpdir(), "packed-isolated-service-"));
+	roots.push(root);
+	return root;
+}
+
+function writeInstalledPackage(piHome: string, name: string, version: string): void {
+	const directory = join(piHome, "npm", "node_modules", name);
+	mkdirSync(directory, { recursive: true });
+	writeFileSync(join(directory, "package.json"), JSON.stringify({ name, version }));
+}
+
+function writeFakeNpm(root: string, vehicleVersions: string | Record<string, string> = "0.10.3"): string {
+	const path = join(root, `fake-npm-${crypto.randomUUID()}`);
+	writeFileSync(
+		path,
+		`#!/usr/bin/env bun
+const fs = require("node:fs");
+const path = require("node:path");
+const project = JSON.parse(fs.readFileSync(path.join(process.cwd(), "package.json"), "utf8"));
+if (project.overrides) throw new Error("host overrides leaked into isolated project");
+const [name, version] = Object.entries(project.dependencies)[0];
+const vehicleVersions = ${JSON.stringify(vehicleVersions)};
+const vehicleVersion = typeof vehicleVersions === "string" ? vehicleVersions : vehicleVersions[name];
+if (!vehicleVersion) throw new Error("missing fake Vehicle version for " + name);
+const packageDir = path.join(process.cwd(), "node_modules", name);
+fs.mkdirSync(packageDir, { recursive: true });
+fs.writeFileSync(path.join(packageDir, "package.json"), JSON.stringify({ name, version, packed: { daemonService: { binPath: "src/cli.ts", args: ["serve"] } } }));
+const vehicleDir = path.join(packageDir, "node_modules", "@danypops", "vehicle-client");
+fs.mkdirSync(vehicleDir, { recursive: true });
+fs.writeFileSync(path.join(vehicleDir, "package.json"), JSON.stringify({ name: "@danypops/vehicle-client", version: vehicleVersion }));
+`,
+	);
+	chmodSync(path, 0o755);
+	return path;
+}
+
+describe("IsolatedDaemonPackageMaterializer", () => {
+	it("materializes a private dependency closure that cannot inherit the host project's incompatible override", async () => {
+		const root = temporaryRoot();
+		const piHome = join(root, "pi");
+		const stateDirectory = join(root, "state");
+		mkdirSync(join(piHome, "npm"), { recursive: true });
+		writeFileSync(
+			join(piHome, "npm", "package.json"),
+			JSON.stringify({
+				dependencies: { "@danypops/lector": "0.19.21" },
+				overrides: { "@danypops/vehicle-client": "0.6.2" },
+			}),
+		);
+		writeInstalledPackage(piHome, "@danypops/lector", "0.19.21");
+		writeInstalledPackage(piHome, "@danypops/vehicle-client", "0.6.2");
+		const materializer = new IsolatedDaemonPackageMaterializer(stateDirectory, writeFakeNpm(root));
+
+		const result = await materializer.materialize(piHome, "npm:@danypops/lector");
+		const isolatedLector = join(result.piHome, "npm", "node_modules", "@danypops", "lector");
+		const isolatedVehicle = join(isolatedLector, "node_modules", "@danypops", "vehicle-client", "package.json");
+
+		expect(JSON.parse(readFileSync(isolatedVehicle, "utf8")).version).toBe("0.10.3");
+		expect(JSON.parse(readFileSync(join(piHome, "npm", "node_modules", "@danypops", "vehicle-client", "package.json"), "utf8")).version).toBe("0.6.2");
+		expect(result.source).toBe("npm:@danypops/lector@0.19.21");
+		expect(existsSync(join(isolatedLector, "package.json"))).toBe(true);
+		expect(materializer.ownsExecutable(join(isolatedLector, "src", "cli.ts"))).toBe(true);
+		expect(materializer.ownsExecutable(join(piHome, "npm", "node_modules", "@danypops", "lector", "src", "cli.ts"))).toBe(false);
+		result.commit();
+	});
+
+	it("keeps two managed daemons with incompatible shared dependency requirements in separate roots", async () => {
+		const root = temporaryRoot();
+		const piHome = join(root, "pi");
+		const stateDirectory = join(root, "state");
+		writeInstalledPackage(piHome, "daemon-old", "1.0.0");
+		writeInstalledPackage(piHome, "daemon-new", "2.0.0");
+		const materializer = new IsolatedDaemonPackageMaterializer(
+			stateDirectory,
+			writeFakeNpm(root, { "daemon-old": "0.6.2", "daemon-new": "0.10.5" }),
+		);
+
+		const oldDaemon = await materializer.materialize(piHome, "npm:daemon-old");
+		const newDaemon = await materializer.materialize(piHome, "npm:daemon-new");
+		const versionAt = (materialized: { piHome: string }, name: string) =>
+			JSON.parse(
+				readFileSync(join(materialized.piHome, "npm", "node_modules", name, "node_modules", "@danypops", "vehicle-client", "package.json"), "utf8"),
+			).version;
+
+		expect(versionAt(oldDaemon, "daemon-old")).toBe("0.6.2");
+		expect(versionAt(newDaemon, "daemon-new")).toBe("0.10.5");
+		expect(oldDaemon.piHome).not.toBe(newDaemon.piHome);
+		oldDaemon.commit();
+		newDaemon.commit();
+	});
+
+	it("publishes complete roots atomically and removes an uncommitted candidate on rollback", async () => {
+		const root = temporaryRoot();
+		const piHome = join(root, "pi");
+		const stateDirectory = join(root, "state");
+		writeInstalledPackage(piHome, "daemon", "1.0.0");
+		const materializer = new IsolatedDaemonPackageMaterializer(stateDirectory, writeFakeNpm(root));
+
+		const result = await materializer.materialize(piHome, "npm:daemon");
+		const versionDirectory = join(result.piHome, "..");
+		expect(existsSync(join(result.piHome, "npm", "node_modules", "daemon", "package.json"))).toBe(true);
+		expect(readdirSync(join(stateDirectory, "services", "daemon")).some((name) => name.startsWith("."))).toBe(false);
+
+		result.rollback();
+		expect(existsSync(versionDirectory)).toBe(false);
+	});
+
+	it("rejects an unsafe installed version before creating a service directory", async () => {
+		const root = temporaryRoot();
+		const piHome = join(root, "pi");
+		const stateDirectory = join(root, "state");
+		writeInstalledPackage(piHome, "daemon", "../../escape");
+		const materializer = new IsolatedDaemonPackageMaterializer(stateDirectory, writeFakeNpm(root));
+
+		await expect(materializer.materialize(piHome, "npm:daemon")).rejects.toThrow(/version is unsafe/);
+		expect(existsSync(join(stateDirectory, "services"))).toBe(false);
+	});
+
+	it("reuses a committed version without invoking npm again and removes all roots on uninstall", async () => {
+		const root = temporaryRoot();
+		const piHome = join(root, "pi");
+		const stateDirectory = join(root, "state");
+		writeInstalledPackage(piHome, "daemon", "1.0.0");
+		const npmBin = writeFakeNpm(root);
+		const materializer = new IsolatedDaemonPackageMaterializer(stateDirectory, npmBin);
+		const first = await materializer.materialize(piHome, "npm:daemon");
+		first.commit();
+		rmSync(npmBin);
+
+		const second = await materializer.materialize(piHome, "npm:daemon");
+		expect(second.piHome).toBe(first.piHome);
+		second.commit();
+		materializer.remove("npm:daemon");
+		expect(existsSync(join(stateDirectory, "services", "daemon"))).toBe(false);
+	});
+});